tes\x00', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x4)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

15:02:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040))
r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x1000)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x1000)

15:02:10 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)

15:02:10 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000), 0x7294059)

[  343.649210][T13309] input: syz0 as /devices/virtual/input/input7
15:02:10 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)
msgsnd(r0, &(0x7f0000000000)={0x5}, 0x8, 0x0)

15:02:10 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=<r3=>0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=r3)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f)
r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x1000)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x1000)

[  343.748530][T13315] input: syz0 as /devices/virtual/input/input8
15:02:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)

15:02:11 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socket$inet6_tcp(0xa, 0x1, 0x0)

15:02:11 executing program 4:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)

15:02:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3f)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x1000)

15:02:11 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x40d, 0x0)

15:02:11 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

15:02:11 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c00ef010000000904000001020d0000052406000125240000002c240f0100000000002e4c967d0c0178f1c4a20000000006241a0000000905810300000000000904d6a200020d00000904010102020d0000090571f824d0000000090503020000000000"], 0x0)

15:02:11 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@ldst={0x6, 0x0, 0x6, 0x31}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

15:02:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:11 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)

15:02:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3f)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x1000)

15:02:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:11 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

15:02:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000)

15:02:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0x8010aebb, 0x0)

[  344.662331][ T2931] usb 2-1: new high-speed USB device number 9 using dummy_hcd
15:02:11 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

15:02:11 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

[  344.902973][ T2931] usb 2-1: Using ep0 maxpacket: 32
[  345.022190][ T2931] usb 2-1: config 1 has too many interfaces: 239, using maximum allowed: 32
[  345.031117][ T2931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.042405][ T2931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 239
[  345.051597][ T2931] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  345.242138][ T2931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.251344][ T2931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.259635][ T2931] usb 2-1: Product: syz
[  345.263896][ T2931] usb 2-1: Manufacturer: syz
[  345.268505][ T2931] usb 2-1: SerialNumber: syz
[  345.323296][ T2931] cdc_ncm 2-1:1.0: skipping garbage
[  345.328598][ T2931] cdc_ncm 2-1:1.0: bind() failure
[  345.524692][ T2931] usb 2-1: USB disconnect, device number 9
[  346.301882][ T2931] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  346.541922][ T2931] usb 2-1: Using ep0 maxpacket: 32
[  346.664348][ T2931] usb 2-1: config 1 has too many interfaces: 239, using maximum allowed: 32
[  346.673151][ T2931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.683378][ T2931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 239
[  346.692518][ T2931] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  346.872234][ T2931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  346.881480][ T2931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.889643][ T2931] usb 2-1: Product: syz
[  346.893962][ T2931] usb 2-1: Manufacturer: syz
[  346.898615][ T2931] usb 2-1: SerialNumber: syz
[  346.954248][ T2931] cdc_ncm 2-1:1.0: skipping garbage
[  346.959685][ T2931] cdc_ncm 2-1:1.0: bind() failure
[  347.154105][ T2931] usb 2-1: USB disconnect, device number 10
15:02:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup3(r0, r1, 0x0)
dup2(r3, r2)

15:02:14 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000)

15:02:14 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4)

15:02:14 executing program 5:
r0 = open(&(0x7f0000003880)='./file0\x00', 0x14104a, 0x0)
write$P9_RSYMLINK(r0, &(0x7f0000000140)={0x14}, 0x14)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40204000000b)
pread64(r0, &(0x7f00000038c0)=""/4096, 0x1000, 0x0)

15:02:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:14 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:14 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:14 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000)

15:02:14 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a00, &(0x7f0000000680)=ANY=[])
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

15:02:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/48, 0x2b)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000002c0)=""/127, 0x23a)

15:02:14 executing program 1:
r0 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

15:02:14 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:14 executing program 0:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:14 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x4}, 0x3e)

15:02:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/48, 0x2b)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000002c0)=""/127, 0x23a)

15:02:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

15:02:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:15 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:15 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x4}, 0x3e)

[  348.054370][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  348.085302][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
15:02:15 executing program 0:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:15 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/48, 0x2b)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000002c0)=""/127, 0x23a)

15:02:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

15:02:15 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:15 executing program 0:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:15 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/48, 0x2b)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000002c0)=""/127, 0x23a)

15:02:15 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x4}, 0x3e)

15:02:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

[  348.422939][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
15:02:15 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

15:02:15 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:15 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @rand_addr=0x2}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  348.766368][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
15:02:15 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:15 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x4}, 0x3e)

15:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

[  348.922605][    C1] hrtimer: interrupt took 35075 ns
15:02:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

[  349.046203][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
15:02:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:16 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
writev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d09c653f698ac3bcec94602fe78ec55be8ce98d64884523fdb7d8153", 0x1c}], 0x1)

15:02:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x80000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x4], [], @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30e359fc3906ba27}, 0x0)

[  349.437171][T13535] netlink: 'syz-executor.4': attribute type 23 has an invalid length.
15:02:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

[  349.506897][T13538] netlink: 'syz-executor.4': attribute type 23 has an invalid length.
15:02:16 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @rand_addr=0x2}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

15:02:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:16 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0)

15:02:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:16 executing program 4:
add_key(&(0x7f0000000240)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_reqkey_keyring(0xe, 0x2)

15:02:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:16 executing program 4:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x18a9, 0x305580)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x2000})

15:02:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:16 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100))

15:02:17 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:17 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1})

15:02:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:17 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080))
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0))
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0)

15:02:17 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @rand_addr=0x2}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

15:02:17 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0x40405515, &(0x7f00000000c0)={0xfff})

15:02:17 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0xfffffffffffffffb, 0x2000000c})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0)

15:02:17 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:18 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', <r1=>0x0})
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)=@ll={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400000000000084, 0x0)

15:02:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:18 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:18 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r1, 0x7, &(0x7f0000000040))

15:02:18 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @rand_addr=0x2}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

15:02:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:18 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:18 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r1, 0x7, &(0x7f0000000040))

15:02:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080))
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0))
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0)

15:02:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:18 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:19 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r1, 0x7, &(0x7f0000000040))

15:02:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:19 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:19 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r1, 0x7, &(0x7f0000000040))

15:02:19 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f00000000c0)=0xbf)

15:02:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080))
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0))
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0)

15:02:20 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)

15:02:20 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)

15:02:20 executing program 4:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xffffffffffffff4c, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

15:02:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)

15:02:20 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x43, 0x3a, 0x8c, 0x40, 0x1ba6, 0x1, 0x70b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0xd8, 0xfa, 0x9a}}]}}]}}, 0x0)

15:02:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:20 executing program 5:
r0 = gettid()
capget(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280))

15:02:20 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)

[  353.324895][T13716] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure
[  353.562663][T12803] usb 5-1: new high-speed USB device number 2 using dummy_hcd
15:02:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080))
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0))
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0)

15:02:20 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:20 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5, 0x6809, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

15:02:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)

15:02:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)

15:02:21 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

[  353.937562][T12803] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  353.946049][T12803] usb 5-1: config 0 has no interface number 0
[  353.952854][T12803] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=70.b2
[  353.962866][T12803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.062213][T12803] usb 5-1: config 0 descriptor??
[  354.132592][T12803] as10x_usb: device has been detected
[  354.139335][T12803] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  354.286351][T12803] usb 5-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)...
[  354.340491][T12803] usb 5-1: Direct firmware load for as102_data1_st.hex failed with error -2
[  354.353407][T12803] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  354.361137][T12803] Registered device Abilis Systems DVB-Titan
[  354.389991][T12803] usb 5-1: USB disconnect, device number 2
[  354.414273][T12803] Unregistered device Abilis Systems DVB-Titan
[  354.420734][T12803] as10x_usb: device has been disconnected
[  355.071975][ T2931] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  355.442105][ T2931] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  355.450412][ T2931] usb 5-1: config 0 has no interface number 0
[  355.457254][ T2931] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=70.b2
[  355.466467][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.475829][ T2931] usb 5-1: config 0 descriptor??
[  355.542237][ T2931] as10x_usb: device has been detected
[  355.548914][ T2931] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  355.577417][ T2931] usb 5-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)...
[  355.589374][ T2931] usb 5-1: Direct firmware load for as102_data1_st.hex failed with error -2
[  355.600134][ T2931] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  355.608037][ T2931] Registered device Abilis Systems DVB-Titan
[  355.739727][T12803] usb 5-1: USB disconnect, device number 3
[  355.753275][T12803] Unregistered device Abilis Systems DVB-Titan
[  355.755667][T12803] as10x_usb: device has been disconnected
15:02:23 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x43, 0x3a, 0x8c, 0x40, 0x1ba6, 0x1, 0x70b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0xd8, 0xfa, 0x9a}}]}}]}}, 0x0)

15:02:23 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10)
sendmmsg$alg(r0, &(0x7f0000004440)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="f2dee46336b8b528a7009327666cb2be65a2ac61148cfcf03942414d1654670f59fd92761f8919e926d499bb557e10b747802c51cc2652e96741ffc6471894ef7e3f65", 0xe24}, {&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="e56ce9a6fee69dfe6922dfef7254468f1ac3ab7593b50cf30b102389dd8dce95ce986a99d2b7b1422c8e2491baf89251463a2ecefbbab2b8e5e800cbf3b6275d1504db3afd61ad70ee3537b75a11b18a7433951e3e9db475a67a0304a9ce74d74802206d2c7851453fcc0e33d67df3434b5962f1e052ca1281a079af26c7f8114e94ea394abc5567a97a73f6d5da11e272f5ab4b74aaf2a956ca62390366a5cb097a779a4197e14671d290e125f45a87fde20d943544ed93ea6fab00188dc24565fc2dd08941f8b78788f3c3aad1ee1d5e355cf91d85a31bf57a5bab32a2f875b32a47e0b415b626", 0xe8}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="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", 0xb93}], 0x5}], 0x1, 0x0)

15:02:23 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)

15:02:23 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:23 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x301a00, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

15:02:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)

15:02:23 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:23 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000003}, 0x2b)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x23c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)

15:02:23 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x35, &(0x7f0000000040)={0x1}, 0x2a8)

15:02:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)

[  356.612189][ T2931] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  356.982107][ T2931] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  356.990415][ T2931] usb 5-1: config 0 has no interface number 0
[  356.996750][ T2931] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=70.b2
[  357.005873][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.015332][ T2931] usb 5-1: config 0 descriptor??
[  357.071647][ T2931] as10x_usb: device has been detected
[  357.078505][ T2931] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  357.106788][ T2931] usb 5-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)...
[  357.119560][ T2931] usb 5-1: Direct firmware load for as102_data1_st.hex failed with error -2
[  357.128746][ T2931] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  357.136619][ T2931] Registered device Abilis Systems DVB-Titan
[  357.276691][ T2931] usb 5-1: USB disconnect, device number 4
[  357.290828][ T2931] Unregistered device Abilis Systems DVB-Titan
[  357.293036][ T2931] as10x_usb: device has been disconnected
15:02:24 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x43, 0x3a, 0x8c, 0x40, 0x1ba6, 0x1, 0x70b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0xd8, 0xfa, 0x9a}}]}}]}}, 0x0)

15:02:24 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:24 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x8)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040))

15:02:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:24 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000003}, 0x2b)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x23c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)

15:02:24 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)

15:02:24 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)

15:02:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:25 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc104)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9", 0x1}], 0x1)
read(r0, &(0x7f00000001c0)=""/198, 0xc6)

15:02:25 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000003}, 0x2b)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x23c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)

15:02:25 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="3100000013000900690006007a00000dab008008100000004600010700000054090027c0256465a3060000000075702e1a", 0x31}], 0x1)

[  358.175049][T12803] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  358.254727][T13826] netlink: 'syz-executor.2': attribute type 39 has an invalid length.
[  358.263524][T13826] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  358.542103][T12803] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  358.550410][T12803] usb 5-1: config 0 has no interface number 0
[  358.556729][T12803] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=70.b2
[  358.565917][T12803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.575445][T12803] usb 5-1: config 0 descriptor??
[  358.619501][T12803] as10x_usb: device has been detected
[  358.626316][T12803] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  358.657388][T12803] usb 5-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)...
[  358.668837][T12803] usb 5-1: Direct firmware load for as102_data1_st.hex failed with error -2
[  358.677809][T12803] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  358.685575][T12803] Registered device Abilis Systems DVB-Titan
[  358.830536][ T2931] usb 5-1: USB disconnect, device number 5
[  358.846787][ T2931] Unregistered device Abilis Systems DVB-Titan
[  358.848954][ T2931] as10x_usb: device has been disconnected
15:02:26 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x43, 0x3a, 0x8c, 0x40, 0x1ba6, 0x1, 0x70b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0xd8, 0xfa, 0x9a}}]}}]}}, 0x0)

15:02:26 executing program 2:
r0 = userfaultfd(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003000))
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000000c0)={0x8}, 0x8)

15:02:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x3011, r0, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000fc0)={'security\x00'}, &(0x7f0000000040)=0x54)

15:02:26 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000003}, 0x2b)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x23c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)

15:02:26 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:26 executing program 5:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f0000000000)={'stack ', 'u\x00'}, 0x7)
close(r0)
execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

15:02:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:26 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:26 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x3e, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000000)=0x95)

15:02:26 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80)
sendto(r0, &(0x7f0000000000)="9653ab1d09467cf6b6c104a29534b87322af5a3292f53e1ff62f5f370464ab5eefa40e5b368b697412b1752dc5c890439b65aa259828b2855d", 0x39, 0x0, 0x0, 0x0)

15:02:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

[  359.725320][ T2931] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  360.102298][ T2931] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  360.110739][ T2931] usb 5-1: config 0 has no interface number 0
[  360.116990][ T2931] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=70.b2
[  360.126137][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.135966][ T2931] usb 5-1: config 0 descriptor??
[  360.188444][ T2931] as10x_usb: device has been detected
[  360.195111][ T2931] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  360.226624][ T2931] usb 5-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)...
[  360.238383][ T2931] usb 5-1: Direct firmware load for as102_data1_st.hex failed with error -2
[  360.247479][ T2931] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  360.255223][ T2931] Registered device Abilis Systems DVB-Titan
[  360.396992][T12803] usb 5-1: USB disconnect, device number 6
[  360.411374][T12803] Unregistered device Abilis Systems DVB-Titan
[  360.413595][T12803] as10x_usb: device has been disconnected
15:02:27 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x3, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="5ecac4c9c0f9d2c29bd15d530e", 0xd}], 0x1)

15:02:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:27 executing program 1:
r0 = socket(0x1e, 0x1000000000004, 0x0)
r1 = epoll_create(0x7fff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000004})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x80000004})

15:02:27 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0)

15:02:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:28 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000007c0), 0x1a0, &(0x7f0000000880), 0xd}, 0x0)

15:02:28 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0xca, 0x0, 0x0, 0x4})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

15:02:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:28 executing program 1:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}]}, 0x40}}, 0x0)

15:02:28 executing program 5:
unshare(0x400)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045005, 0x0)

15:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x3}}, 0x1c}}, 0x0)

15:02:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:28 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa)

15:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:28 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000007c0), 0x1a0, &(0x7f0000000880), 0xd}, 0x0)

15:02:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x3}}, 0x1c}}, 0x0)

15:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:28 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @multicast1, @broadcast}, 0xc)

15:02:28 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000007c0), 0x1a0, &(0x7f0000000880), 0xd}, 0x0)

15:02:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x3}}, 0x1c}}, 0x0)

15:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:29 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x19840, 0x65}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0))
ptrace(0x10, r4)
ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000280)={0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_deladdr={0x18, 0x15, 0x201}, 0x18}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895aba03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x58)

15:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080580d00000046008107a277001419000a000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1)

15:02:29 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000007c0), 0x1a0, &(0x7f0000000880), 0xd}, 0x0)

15:02:29 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x3}}, 0x1c}}, 0x0)

[  362.182954][T13964] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
15:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:29 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x10000000005, &(0x7f0000000000)="e1affde3", 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0x1c)
r1 = socket(0x1, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "cccbf9a56f3ec39d"}, 0x10}}, 0x0)

15:02:29 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:29 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0)
mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x504a00, 0x0, 0x11, r0, 0x0)

15:02:29 executing program 4:
unshare(0x400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)

15:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:29 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x19840, 0x65}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0))
ptrace(0x10, r4)
ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000280)={0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_deladdr={0x18, 0x15, 0x201}, 0x18}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895aba03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x58)

15:02:29 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2000000000000a)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x24)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24)

15:02:29 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:29 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400)
getuid()
lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x375)
fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close(0xffffffffffffffff)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)

15:02:29 executing program 4:
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0xfffffffffffffffc)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28}, 0x28)

15:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x162, &(0x7f0000000000)=[@op={0x18}], 0x24}], 0x49249249249265b, 0x0)

15:02:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:30 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:30 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x19840, 0x65}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0))
ptrace(0x10, r4)
ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000280)={0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_deladdr={0x18, 0x15, 0x201}, 0x18}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895aba03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x58)

15:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:30 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:31 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:31 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400)
getuid()
lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x375)
fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close(0xffffffffffffffff)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)

15:02:31 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:31 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:31 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x19840, 0x65}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0))
ptrace(0x10, r4)
ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000280)={0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_deladdr={0x18, 0x15, 0x201}, 0x18}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895aba03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x58)

15:02:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:31 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:31 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:31 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400)
getuid()
lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x375)
fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close(0xffffffffffffffff)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)

15:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)

15:02:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:32 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000700)=""/200, 0xc8}], 0x2, &(0x7f0000000b40)=[@zcopy_cookie={0x18}], 0x18}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000300), 0x62f, 0x0)

15:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)

15:02:32 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:32 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x1110, 0x0)

15:02:32 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
close(r0)
preadv(r0, 0x0, 0x0, 0x0)

15:02:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)

15:02:32 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400)
getuid()
lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x375)
fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close(0xffffffffffffffff)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)

15:02:32 executing program 5:
set_mempolicy(0x3, &(0x7f0000000040)=0x11, 0x8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x10000080800)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

15:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x1000)

15:02:32 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x12, 0x0, 0x0)

15:02:33 executing program 5:
set_mempolicy(0x3, &(0x7f0000000040)=0x11, 0x8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x10000080800)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

15:02:33 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0011000000", 0x24)

15:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:33 executing program 4:
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)

15:02:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

[  366.164071][T14161] netlink: 'syz-executor.1': attribute type 27 has an invalid length.
15:02:33 executing program 5:
set_mempolicy(0x3, &(0x7f0000000040)=0x11, 0x8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x10000080800)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

15:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004c00)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}}, 0x0)

15:02:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:33 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000024f89020bf0a7033388a0000000109021a000100000077090400000268f15d0009050800000000000009050d000000000000ae781efac311ca5a637ccf3b1f77dd443c7f29326bc787fc69e3777d26aa13972ebeb7558347afc5975ce0eb829b58f035"], 0x0)

15:02:33 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x76}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

15:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

[  366.519074][T14183] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
15:02:33 executing program 5:
set_mempolicy(0x3, &(0x7f0000000040)=0x11, 0x8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x10000080800)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

[  366.581377][T14188] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
15:02:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:33 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000002f00)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r2, 0x40, &(0x7f00000000c0)="11dc86055e0bceec7be070")
clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='uservboxnet1\x00', 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$invalidate(0x15, r3)
keyctl$describe(0x6, r3, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'\x00{\x00', 0x3}, 0x0, 0x0, r3)
request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='uservboxnet1\x00', r4)

15:02:33 executing program 1:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000201010000409fbc60e130d79915434810000200040001000800020004000179"], 0x24}}, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

15:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

15:02:33 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000100)="1f0000000106fffffd3b54c007110000f30501000b000300000000000000cf", 0x1f)

15:02:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x4, 0x1, 0x0, "4c80e28681ba41ef528ee5c7e82339ed17dc1bca32434ea575d5a14978a0c164"})

[  366.832079][T12803] usb 5-1: new high-speed USB device number 7 using dummy_hcd
15:02:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

[  367.092132][T12803] usb 5-1: Using ep0 maxpacket: 32
[  367.212271][T12803] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  367.222920][T12803] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  367.235969][T12803] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=8a.38
[  367.245108][T12803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.254664][T12803] usb 5-1: config 0 descriptor??
[  367.504643][T12803] usb 5-1: USB disconnect, device number 7
[  368.271988][T12803] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  368.512004][T12803] usb 5-1: Using ep0 maxpacket: 32
[  368.632318][T12803] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  368.642690][T12803] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  368.655771][T12803] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=8a.38
[  368.664977][T12803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.674380][T12803] usb 5-1: config 0 descriptor??
[  368.913624][ T2931] usb 5-1: USB disconnect, device number 8
15:02:36 executing program 4:
r0 = socket$inet(0x2, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

15:02:36 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x4, 0x1a, 0x14, 0x40, 0xbda, 0x818b, 0xba7a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

15:02:36 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x9, 0x4)
getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482)

15:02:36 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'eth0-.%lo'}], 0xa, "0554a30e53949d1b1002758332bbed"}, 0x24)

15:02:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0)

15:02:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0)

15:02:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:36 executing program 1:
get_mempolicy(&(0x7f0000000000), 0xfffffffffffffffd, 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3)

15:02:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000940)='I\x00=', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/ptmx\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000002380)='/dev/ptmx\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000023c0), 0x8, 0x0)
socket$unix(0x1, 0x3, 0x0)
eventfd(0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002540)='/proc/self/attr/exec\x00', 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000002580)='/dev/hwrng\x00', 0x0, 0x0)
eventfd2(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39)

15:02:36 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23afb16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000272000))

[  369.733850][T12803] usb 6-1: new high-speed USB device number 2 using dummy_hcd
15:02:36 executing program 1:
socket$packet(0x11, 0x4000000000002, 0x300)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
socket(0x100000000011, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

15:02:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

[  370.012452][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  370.012558][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  370.018766][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  370.024683][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  370.114195][T12803] usb 6-1: config 0 has an invalid interface number: 26 but max is 0
[  370.122479][T12803] usb 6-1: config 0 has no interface number 0
[  370.128726][T12803] usb 6-1: New USB device found, idVendor=0bda, idProduct=818b, bcdDevice=ba.7a
[  370.138092][T12803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.150558][T12803] usb 6-1: config 0 descriptor??
[  370.453451][T12803] usb 6-1: Unsupported USB TX end-points
[  370.459249][T12803] usb 6-1: Fatal - failed to identify chip
[  370.465601][T12803] rtl8xxxu: probe of 6-1:0.26 failed with error -524
[  370.487002][T12803] usb 6-1: USB disconnect, device number 2
[  370.812331][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  370.818530][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  371.192012][T12803] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  371.552122][T12803] usb 6-1: config 0 has an invalid interface number: 26 but max is 0
[  371.560358][T12803] usb 6-1: config 0 has no interface number 0
[  371.566707][T12803] usb 6-1: New USB device found, idVendor=0bda, idProduct=818b, bcdDevice=ba.7a
[  371.575855][T12803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.585314][T12803] usb 6-1: config 0 descriptor??
[  371.882029][T12803] usb 6-1: Unsupported USB TX end-points
[  371.887868][T12803] usb 6-1: Fatal - failed to identify chip
[  371.894247][T12803] rtl8xxxu: probe of 6-1:0.26 failed with error -524
[  371.905748][T12803] usb 6-1: USB disconnect, device number 3
15:02:39 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0})

15:02:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0)

15:02:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x8000032, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x0, @ipv4=@multicast1=0x4000550}]}]}, 0x24}}, 0x0)

15:02:39 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

15:02:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0)
io_submit(r3, 0x2, &(0x7f0000001b00)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0])

[  372.395661][T14286] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
15:02:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:39 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d440", 0x70}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:02:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@timestamp={0x44, 0x4}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'g(F', 0x0, "71b646"}}}}}}, 0x0)

15:02:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:02:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:39 executing program 1:
unshare(0x28020400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f00000001c0)='./file1\x00', r0}, 0x10)

15:02:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:40 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

15:02:40 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x351, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000100)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0)

15:02:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:42 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d440", 0x70}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:02:42 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:42 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

15:02:42 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x351, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000100)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0)

15:02:42 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x100000000000001, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x86)

15:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:42 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:42 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x156)
write(r0, &(0x7f0000000180)="1c0000005e001f0014584707f9f4ff0800000000281cf20001000000", 0x1c)

15:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {0x0}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r0, 0x0, 0x200000000000002d, 0x0, 0x1e4)

15:02:45 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:45 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

15:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {0x0}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="864009000000070016204ac075d9a4b94a6d5c9848ca6b3a82ea701cc2c01763c5bb8bd8f1a335c73206e07310b5995b1567"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000280)=0x8)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:02:45 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d440", 0x70}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:02:45 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x351, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000100)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0)

15:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {0x0}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:45 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:46 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000)

15:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x223, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0)

15:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:46 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x1000)

15:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:48 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x1000)

15:02:48 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000480)={0x0, [], 0x7})

15:02:48 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x351, 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000100)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0)

15:02:48 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d440", 0x70}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:02:48 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0)
ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000))
write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], []]}, 0x258)

15:02:48 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x1000)

15:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:48 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @random="b0215e20b322", 'bridge0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

15:02:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:49 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000)

15:02:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:02:49 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000)

15:02:51 executing program 5:
r0 = socket$kcm(0x2b, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000000), 0x4)

15:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2}}], 0x48}, 0x0)

15:02:51 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000)

15:02:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3)
syz_open_procfs(0x0, &(0x7f0000272000))

15:02:51 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
listxattr(&(0x7f0000000080)='.\x00', 0x0, 0x0)

15:02:51 executing program 4:
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt(r0, 0x1, 0x2, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a)

15:02:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
chroot(&(0x7f0000000000)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)

15:02:52 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x2c5}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000d40)='u', 0x1}], 0x1)

15:02:52 executing program 3:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
shutdown(r1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000100), 0xfffffd95, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0)

15:02:52 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x0)

15:02:52 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x10071, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})

15:02:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$isdn(0x22, 0x3, 0x12)

15:02:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0)

15:02:52 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x0)

15:02:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
chroot(&(0x7f0000000000)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)

15:02:52 executing program 2:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xe})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x3ffffd})

15:02:52 executing program 4:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)

[  385.434888][T12803] usb 2-1: new high-speed USB device number 11 using dummy_hcd
15:02:52 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$packet_buf(r0, 0x107, 0x9, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483)

15:02:52 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="230000001e00817478d12876ca81410007020000080001000000020000000020000000", 0x23}], 0x1}, 0x0)

[  385.685807][T12803] usb 2-1: Using ep0 maxpacket: 8
[  385.802150][T12803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  385.812196][T12803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 709
[  385.822870][T12803] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  385.835965][T12803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  385.845162][T12803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.336095][T12803] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  386.543447][T12803] usb 2-1: USB disconnect, device number 11
[  386.553792][T12803] usblp0: removed
[  387.331975][ T2931] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  387.571960][ T2931] usb 2-1: Using ep0 maxpacket: 8
[  387.712033][ T2931] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  387.721965][ T2931] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 709
[  387.732068][ T2931] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  387.745235][ T2931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  387.754419][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:02:55 executing program 1:
waitid(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

15:02:55 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x0)

15:02:55 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0)
recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42, 0x0)

15:02:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
chroot(&(0x7f0000000000)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)

15:02:55 executing program 3:
r0 = gettid()
kcmp(r0, r0, 0xc, 0xffffffffffffffff, 0xffffffffffffffff)

15:02:55 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rtc0\x00', 0x0, 0x0)
poll(&(0x7f0000001880)=[{r0}], 0x1, 0x176)

[  388.064906][ T2931] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  388.097360][T12803] usb 2-1: USB disconnect, device number 12
[  388.106007][T12803] usblp0: removed
15:02:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3)
listen(r2, 0x0)
sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

15:02:55 executing program 1:
syz_emit_ethernet(0x140, &(0x7f0000000000)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, @dccp={{0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, "24a500", 0x0, "1fe628"}}}}}}, 0x0)

15:02:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000001000000e9bb628a9eadb479ab1e98454b509cc4a9"])
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x5, [0x48c], [0xc1]})

15:02:55 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0)
r1 = memfd_create(&(0x7f0000000540)='\x00', 0x3)
write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r0, r1, &(0x7f0000000040), 0xfffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
fcntl$addseals(r1, 0x409, 0x8)
shutdown(r0, 0x1)
linkat(r4, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1e00)

15:02:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
chroot(&(0x7f0000000000)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)

[  388.419930][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
15:02:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
dup2(r0, r2)

15:02:55 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000180)={0x18, 0x2, 0xb0302ae1f9c92e07, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0x7}]}, 0x18}}, 0x0)

15:02:55 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1, 0x0)

15:02:55 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x80000000000003, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
close(r0)

15:02:55 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1ffffffffffffd)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)

15:02:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r0, &(0x7f00000011c0), 0x0}, 0x2ab)

15:02:55 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="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", 0x1e9}], 0x1}}], 0x1, 0x4000000)

15:02:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
syz_open_dev$admmidi(0x0, 0xa8c9, 0x6b366dc90a9ce66d)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18)
r1 = open(0x0, 0x0, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x8001, 0x3})
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0)
ioctl(r0, 0x8916, &(0x7f0000000000))
socket(0x100000000011, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x200048c8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
pwrite64(r2, 0x0, 0x0, 0x0)
ioctl(r0, 0x8936, &(0x7f0000000000))

15:02:56 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0xd0a, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9ce, 0x4)
recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012161, 0x0)

15:02:56 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc0, 0xbb, 0x9b, 0x40, 0x20b7, 0x1540, 0xef8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io(r0, 0x0, &(0x7f0000002400)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x40, 0x21, 0x1}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c40)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0), 0x0, 0x0})

15:02:56 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x3, 0x8000a0ffffffff})

15:02:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1ffffffffffffd)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)

[  389.096604][T14636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:02:56 executing program 4:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="f7", 0x100000091}], 0x1, 0x0)
tee(r1, r0, 0x7fff, 0x0)

15:02:56 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0)

15:02:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x202}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x2}], 0x20}, 0xfc)

15:02:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000d40)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0e3ff0403ff03000001000a0000000665"])
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0xc1}]})

15:02:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1ffffffffffffd)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)

15:02:56 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x8}, {0x3, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x6}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  389.462032][T12803] usb 2-1: new high-speed USB device number 13 using dummy_hcd
15:02:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1ffffffffffffd)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)

15:02:56 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto(r0, &(0x7f0000000140)='&', 0x1, 0x0, 0x0, 0x0)

15:02:56 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x7}}, 0x24)

[  389.872319][T12803] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  389.880632][T12803] usb 2-1: config 0 has no interface number 0
[  389.887078][T12803] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f
[  389.896566][T12803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.948712][T12803] usb 2-1: config 0 descriptor??
[  391.082190][T12803] usb 2-1: unexpected transceiver, part 0x58 version 0x58
[  391.089465][T12803] usb 2-1: Firmware version (0.0) predates our first public release.
[  391.098150][T12803] usb 2-1: Please update to version 0.2 or newer
[  391.104693][T12803] usb 2-1: atusb_probe: initialization failed, error = -19
[  391.284815][T12803] usb 2-1: USB disconnect, device number 13
[  392.051880][ T2931] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  392.422113][ T2931] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  392.430546][ T2931] usb 2-1: config 0 has no interface number 0
[  392.436893][ T2931] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f
[  392.446038][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.455582][ T2931] usb 2-1: config 0 descriptor??
15:02:59 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0xd4c2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:02:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_MEDIA={0x9, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x28}}, 0x0)

15:02:59 executing program 3:
ppoll(&(0x7f0000000080)=[{}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x2)

15:02:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, 0x0)

15:02:59 executing program 5:
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0)
io_setup(0x800, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

15:02:59 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto(r0, &(0x7f0000000140)='&', 0x1, 0x0, 0x0, 0x0)

[  392.817639][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  392.832156][ T2931] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71
[  392.840430][ T2931] usb 2-1: Firmware version (0.0) predates our first public release.
[  392.844264][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  392.849229][ T2931] usb 2-1: Please update to version 0.2 or newer
15:02:59 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto(r0, &(0x7f0000000140)='&', 0x1, 0x0, 0x0, 0x0)

[  392.864484][ T2931] usb 2-1: atusb_probe: initialization failed, error = -71
[  392.872039][ T2931] atusb: probe of 2-1:0.106 failed with error -71
15:03:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x20400)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

15:03:00 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800030800000000a90300000c0000000000000008000100575aff9fefebf9ae20f36b6744254ffe2e4173a0380144abbbb4bc94819c7fdd68561939066d757a3cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7", @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

15:03:00 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1)
close(r2)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="88"], 0x1}}, 0x0)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0)

15:03:00 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto(r0, &(0x7f0000000140)='&', 0x1, 0x0, 0x0, 0x0)

[  393.083159][ T2931] usb 2-1: USB disconnect, device number 14
15:03:00 executing program 5:
unshare(0x28020400)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00')
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:03:00 executing program 3:
syz_emit_ethernet(0x420, &(0x7f0000000240)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x5], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3801, 0x3, 0x0, 0x0, 0x4]}, @mcast2}}}}}}}, 0x0)

15:03:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)

15:03:00 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x1, 0x5, 0x3]})

15:03:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x3, 0x0, [{0xa, 0xa2}, {0x7}, {0x1}]})

15:03:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x20400)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

15:03:00 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa)
close(r3)
r6 = socket$netlink(0x10, 0x3, 0x4)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x4f20, 0x0)

15:03:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002800)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000)
write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68)
write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68)
write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, 0x0, 0x0, 0x3}}, 0x68)

15:03:00 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}]}, 0x60}}, 0x0)

15:03:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x20400)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

15:03:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000780)='./file0\x00')
mkdir(&(0x7f00000004c0)='./control\x00', 0x0)
rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00')
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0xa400295c)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file1\x00')

15:03:00 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x54, 0x2f, 0x10, 0x78c, 0x1002, 0xe647, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xa, 0x4, 0xc8, 0x0, [@hid_hid={0x9}], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0)

[  393.772371][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  393.778806][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:03:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0)

15:03:01 executing program 5:
r0 = socket$inet6(0xa, 0x80000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000008940)=""/113, 0x71}, {&(0x7f0000008a40)=""/237, 0xed}], 0x3}}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1f, 0x4)
sendto$inet6(r0, &(0x7f0000000300), 0xfe02, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffe0)

15:03:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x20400)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

[  393.910873][T14775] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  393.932535][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  393.938885][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:03:01 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r1, &(0x7f0000000000), 0x1c)
connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)

[  394.013939][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  394.020215][    C1] protocol 88fb is buggy, dev hsr_slave_1
15:03:01 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14}, 0xffffffea)

15:03:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0)

[  394.236185][T12682] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  394.982369][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  394.988653][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  395.093508][T14796] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
15:03:02 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x6, 0x101}, 0x14}}, 0x0)

15:03:02 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffffff20d10702389ed40000000309021b0001000000000904000001ffffff00090502000000000000"], 0x0)

15:03:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}})

15:03:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0)

15:03:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14}, 0xffffffea)

[  395.250259][T14807] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  395.284409][T12682] usb 3-1: Using ep0 maxpacket: 16
[  395.402221][T12682] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  395.410613][T12682] usb 3-1: config 0 has no interface number 0
[  395.416942][T12682] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[  395.426381][T12682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.460726][T12682] usb 3-1: config 0 descriptor??
[  395.519662][ T2931] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  395.762100][T12682] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 0
[  395.770357][T12682] gtco: probe of 3-1:0.219 failed with error -5
[  395.780763][ T2931] usb 5-1: Using ep0 maxpacket: 32
[  395.820142][T12682] usb 3-1: USB disconnect, device number 4
[  396.062461][ T2931] usb 5-1: New USB device found, idVendor=07d1, idProduct=3802, bcdDevice=d4.9e
[  396.071890][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.088254][ T2931] usb 5-1: config 0 descriptor??
[  396.134700][ T2931] i1480-dfu-usb 5-1:0.0: Direct firmware load for i1480-pre-phy-0.0.bin failed with error -2
[  396.147208][ T2931] i1480-dfu-usb 5-1:0.0: Direct firmware load for i1480-usb-0.0.bin failed with error -2
[  396.158111][ T2931] i1480-dfu-usb 5-1:0.0: Direct firmware load for ptc-0.0.bin failed with error -2
[  396.167769][ T2931] i1480-dfu-usb 5-1:0.0: Cannot locate MAC FW file 'i1480-usb-0.0.bin'
[  396.176346][ T2931] i1480-dfu-usb: probe of 5-1:0.0 failed with error -2
[  396.335022][ T3373] usb 5-1: USB disconnect, device number 9
[  396.471988][T12803] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  396.712021][T12803] usb 3-1: Using ep0 maxpacket: 16
[  396.832082][T12803] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  396.840410][T12803] usb 3-1: config 0 has no interface number 0
[  396.846720][T12803] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[  396.855873][T12803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.865253][T12803] usb 3-1: config 0 descriptor??
[  397.132563][ T2931] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  397.162093][T12803] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 0
[  397.170140][T12803] gtco: probe of 3-1:0.219 failed with error -5
[  397.179869][T12803] usb 3-1: USB disconnect, device number 5
15:03:04 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x54, 0x2f, 0x10, 0x78c, 0x1002, 0xe647, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xa, 0x4, 0xc8, 0x0, [@hid_hid={0x9}], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0)

15:03:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8, @u64}]}, 0x20}}, 0x0)

15:03:04 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r4, 0x0, 0x9, 0x0, &(0x7f0000012000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

15:03:04 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140))

15:03:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14}, 0xffffffea)

[  397.279057][T14827] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
15:03:04 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x7, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

15:03:04 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200"/16], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0xa, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_key={0x1e, 0x9, 0x5bb, 0x0, "88e8b88a0a121f21d36060cda468fb2fc3625df9c6dfc7f52078f6f098d621c254955dbcd6f5d221b13ced7969b603bf231da896157a9f71905b4e465319437e596daa6fbb07ec9d0c0138e02b640116e0ed6b41c0334d74ebe36dbdda9b6c12639a1bfaab0aa319f33b2477311772dfbc1357c5f9747a53e8b5f75964fbe1f8c06fd603a8077949ae6078a096740c01a9323974b7d5c1691bfcb1ec8548fa2dbe34ce2a242281fbc390a8903e618e71db2f20971e30f153bc87b385fa969b6169d30e26f94183babc0e9bcc71b22ac9bcc2cb9c590005ca332381975d82364d9b7647a449"}, @sadb_x_filter={0x200002ec, 0x1a, @in6=@ipv4={[], [], @multicast1}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sadb_x_sec_ctx={0xe, 0x18, 0x0, 0x0, 0x61, "db770424396daa1a08e41e4cb3100645a3a9b0fcb2c3b9e1c53bdfb27bd0d1075c9ed36067ae0d7b3b1d7fe3cd0600e61312caf734543daec6dff3cb2456d1030ab4515c9846c6f2f8f64649295399ed9ce6b25302e69d294a796bfa68a5660738"}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback}}]}, 0x1f0}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0)

15:03:04 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x20}, {r0, 0x124}, {r0, 0x140}, {r0}, {r0, 0x4000}, {r0}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000140)='v', 0x1}], 0x1)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = inotify_init1(0x0)
pipe(&(0x7f0000000100))
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)

[  397.735813][T14842] ptrace attach of "/root/syz-executor.0"[12679] was attempted by " ��      ��              0       p       �       ��             fd/3     �       ��                 ����                        \x07                                                                  \x09   \x0a                      
                                   
                                                           v                                                                                                                                        \x0c                                                                                                                                                                                                                                                                                                                                                                                                                                                     
[  397.812043][ T2931] usb 5-1: device not accepting address 10, error -71
15:03:05 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000013000)=0x72)
mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

15:03:05 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000015d12)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "f6c85b", 0x30, 0x3a, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "44309d", 0x0, 0x0, 0x0, @empty, @mcast1}}}}}}}, 0x0)

15:03:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0xffffffff)
read(r0, &(0x7f0000000280)=""/11, 0xfe17)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

15:03:05 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x20}, {r0, 0x124}, {r0, 0x140}, {r0}, {r0, 0x4000}, {r0}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000140)='v', 0x1}], 0x1)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = inotify_init1(0x0)
pipe(&(0x7f0000000100))
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)

[  398.289777][T14859] ptrace attach of "/root/syz-executor.0"[12679] was attempted by " ��      ��              0       p       �       ��             fd/3     �       ��                 ����                        \x07                                                                  \x09   \x0a                      
                                   
                                                           v                                                                                                                                        \x0c                                                                                                                                                                                                                                                                                                                                                                                                                                                     
[  398.541993][T12803] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  398.781904][T12803] usb 3-1: Using ep0 maxpacket: 16
[  398.902057][T12803] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  398.910289][T12803] usb 3-1: config 0 has no interface number 0
[  398.916675][T12803] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[  398.925832][T12803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.935306][T12803] usb 3-1: config 0 descriptor??
[  399.232079][T12803] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 0
[  399.240051][T12803] gtco: probe of 3-1:0.219 failed with error -5
[  399.254177][T12803] usb 3-1: USB disconnect, device number 6
15:03:06 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x54, 0x2f, 0x10, 0x78c, 0x1002, 0xe647, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xa, 0x4, 0xc8, 0x0, [@hid_hid={0x9}], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0)

15:03:06 executing program 3:
sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23)
read(r0, &(0x7f00003fefff)=""/1, 0x1)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080))

15:03:06 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0)
splice(r0, 0x0, r2, 0x0, 0xbc, 0x0)

15:03:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14}, 0xffffffea)

15:03:06 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x20}, {r0, 0x124}, {r0, 0x140}, {r0}, {r0, 0x4000}, {r0}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000140)='v', 0x1}], 0x1)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = inotify_init1(0x0)
pipe(&(0x7f0000000100))
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)

15:03:06 executing program 1:
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001020000102505a1a4400001028301090280000201dae0480904000001020d00030a24060001ac3dee2ab3052400ae260d240f01faffffff018004009c06241a0100040524150400042402080a2407030000020000000c241bf248000109001f0001090581030c03c73f06090401c401000000000000010102020d008009058202c001797f04925e4563b0d749d151"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x84, &(0x7f00000001c0)=@string={0x84, 0x3, "1f776397c455e96c75a466fa7a27edbe18787341c83c30d72fa337d89e00ab1362145f10a5ea79ad8e5fb438a709b061179363085ab35c52e1d86eaad3707645afc7c8b86efd44034fd6e457e520997132c75f971e306f9aaf137fccaaf2b00419b8425128d90f0d14db65665b664579478edf1ddcd59467b43507c81751f799328c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]})

15:03:06 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x20}, {r0, 0x124}, {r0, 0x140}, {r0}, {r0, 0x4000}, {r0}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000140)='v', 0x1}], 0x1)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = inotify_init1(0x0)
pipe(&(0x7f0000000100))
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)

15:03:06 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
writev(r0, &(0x7f0000b97000)=[{&(0x7f0000000040)='1', 0xff21}], 0x1)

15:03:06 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = dup2(r0, r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0)

[  399.814504][T14882] ptrace attach of "/root/syz-executor.0"[12679] was attempted by " ��      ��              0       p       �       ��             fd/3     �       ��                 ����                        \x07                                                                  \x09   \x0a                      
                                   
                                                           v                                                                                                                                        \x0c                                                                                                                                                                                                                                                                                                                                                                                                                                                     
15:03:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040), 0x4)

15:03:07 executing program 4:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(&(0x7f00000003c0)='./file0/file0\x00', 0xf0, 0x0)
renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0)

15:03:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x200040000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc))

[  400.201891][T14894] ptrace attach of "/root/syz-executor.0"[12679] was attempted by " ��      ��              0       p       �       ��             fd/3     �       ��                 ����                        \x07                                                                  \x09   \x0a                      
                                   
                                                           v                                                                                                                                        \x0c                                                                                                                                                                                                                                                                                                                                                                                                                                                     
[  400.822407][ T2931] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  400.912202][T12803] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  401.071982][ T2931] usb 2-1: Using ep0 maxpacket: 16
[  401.152001][T12803] usb 3-1: Using ep0 maxpacket: 16
[  401.192182][ T2931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.202523][ T2931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 199, changing to 11
[  401.214953][ T2931] usb 2-1: config 1 interface 1 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  401.228100][ T2931] usb 2-1: config 1 interface 1 has no altsetting 0
[  401.282088][T12803] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  401.290557][T12803] usb 3-1: config 0 has no interface number 0
[  401.296890][T12803] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[  401.306027][T12803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.315518][T12803] usb 3-1: config 0 descriptor??
[  401.392359][ T2931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  401.401464][ T2931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131
[  401.410049][ T2931] usb 2-1: Product: syz
[  401.414408][ T2931] usb 2-1: SerialNumber: syz
[  401.612268][T12803] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 0
[  401.620229][T12803] gtco: probe of 3-1:0.219 failed with error -5
[  401.630027][T12803] usb 3-1: USB disconnect, device number 7
[  401.734187][ T2931] usb 2-1: selecting invalid altsetting 1
[  401.740088][ T2931] usb 2-1: selecting invalid altsetting 0
[  401.746146][ T2931] usb 2-1: selecting invalid altsetting 0
[  401.752128][ T2931] cdc_ncm 2-1:1.0: bind() failure
[  401.764316][ T2931] usb 2-1: selecting invalid altsetting 0
[  401.770199][ T2931] usbtest: probe of 2-1:1.1 failed with error -22
[  401.818400][ T2931] usb 2-1: USB disconnect, device number 15
15:03:09 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x54, 0x2f, 0x10, 0x78c, 0x1002, 0xe647, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xa, 0x4, 0xc8, 0x0, [@hid_hid={0x9}], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0)

15:03:09 executing program 5:
getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=<r0=>0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x1c}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0)

15:03:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'})
dup2(r2, r1)

15:03:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x200040000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc))

15:03:09 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)

[  402.421996][T12803] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  402.442010][ T3373] usb 3-1: new high-speed USB device number 8 using dummy_hcd
15:03:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x1d9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)="3e130b4a7d0c59a7bac3be2c39731d2ef5f3df8a9fe5099976b89ddc016fe4de13a9ef6966a7291c1aea1e6dbbe82b0fba8c4e007bdcadc7", 0x0, 0x38})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xc0000202, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:03:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x200040000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc))

15:03:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002f00ff050000000000000000050000050800030014000000"], 0x1c}}, 0x0)

15:03:09 executing program 5:
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x0, 0x40})
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
writev(r0, &(0x7f00000000c0), 0x20000000000003fa)

15:03:09 executing program 4:
unshare(0x24020400)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x262640, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  402.662275][T12803] usb 2-1: Using ep0 maxpacket: 16
[  402.689761][ T3373] usb 3-1: Using ep0 maxpacket: 16
[  402.742202][T12803] usb 2-1: device descriptor read/all, error -71
15:03:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x200040000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc))

15:03:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0x892}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  402.812371][ T3373] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  402.820673][ T3373] usb 3-1: config 0 has no interface number 0
[  402.827260][ T3373] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[  402.836646][ T3373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.971722][ T3373] usb 3-1: config 0 descriptor??
[  403.272117][ T3373] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 0
[  403.280349][ T3373] gtco: probe of 3-1:0.219 failed with error -5
[  403.289541][ T3373] usb 3-1: USB disconnect, device number 8
15:03:10 executing program 3:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x8000000e})
write$sndseq(r1, &(0x7f0000000200), 0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8)

15:03:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_setup(0x0, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
listen(r1, 0x20000003)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c)

15:03:10 executing program 4:
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000000))

15:03:10 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x22, 0xffffffffffffffe5})

15:03:10 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaabbaabbaaaaaaaaaaaa886442a703000000"], 0x0)

[  403.799415][T14972] 8021q: VLANs not supported on lo
15:03:10 executing program 2:
syz_emit_ethernet(0xbe, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x2a}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x61, 0x0, [{0x0, 0x2}, {0x0, 0xa, "641826194dc2dd7a"}, {0x0, 0xf, "2ad0da8d4fc70af7e9614c204a"}, {0x0, 0x3, '\v'}, {0x0, 0xf, "dfcdf7ade297e39a06abf27cec"}, {0x0, 0x10, "f3b3b6f5f4a58450f8a299f890f4"}, {0x0, 0x4, "6fb3"}, {0x0, 0xa, "f08e672c1b71a585"}, {0x0, 0x9, "dcd0d15e7c19e6"}, {0x0, 0x7, "4f958760ce"}]}, @end, @noop, @noop, @generic={0x0, 0xe, "1c7c9c810975393f54aa6231"}, @lsrr={0x83, 0xb, 0x0, [@multicast2, @dev]}]}}}}}}}, 0x0)

15:03:10 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr="9fa273b347e0d4387b8b0219dd83c038"}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000500)="d4", 0x1}], 0x1}}], 0x1, 0x0)

15:03:10 executing program 3:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})

15:03:11 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e)
readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x36}, {&(0x7f0000000040)=""/235, 0xeb}], 0x2)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)
ppoll(&(0x7f0000001080)=[{r3}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r2, 0xa, 0x12)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x15)

15:03:11 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1000000005, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000000400), 0x1000)

15:03:11 executing program 4:
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000000))

15:03:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_setup(0x0, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
listen(r1, 0x20000003)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c)

15:03:11 executing program 2:
unshare(0x8000400)
r0 = socket$packet(0x11, 0x1000000000000003, 0x300)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r1, 0x0)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), 0x4)

[  404.092621][T12803] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max
15:03:11 executing program 4:
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000000))

[  404.196201][T12803] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on s�z1
[  404.225435][T15009] 8021q: VLANs not supported on lo
[  404.281474][T12682] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
15:03:11 executing program 3:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})

15:03:11 executing program 0:
r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

15:03:11 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x8}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

[  404.347731][T15020] 8021q: VLANs not supported on lo
15:03:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_setup(0x0, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
listen(r1, 0x20000003)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c)

15:03:11 executing program 4:
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000000))

[  404.380557][T12682] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on s�z1
15:03:11 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x1}, 0xfdfe)

15:03:11 executing program 3:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})

[  404.598863][T15038] 8021q: VLANs not supported on lo
15:03:11 executing program 4:
unshare(0x20400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

15:03:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_setup(0x0, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
listen(r1, 0x20000003)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c)

15:03:11 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x8}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

[  404.761950][T12682] usb 1-1: new high-speed USB device number 7 using dummy_hcd
15:03:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0)

15:03:12 executing program 3:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})

15:03:12 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x36, &(0x7f0000002880)={{0x12, 0x1, 0x0, 0x7a, 0x9d, 0x57, 0x8, 0x1286, 0x2046, 0x1289, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0xff, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x2, 0x12}}]}}]}}]}}, 0x0)

[  404.900629][T15063] binder: binder_mmap: 15062 20ffb000-20fff000 bad vm_flags failed -1
[  405.026509][T12682] usb 1-1: Using ep0 maxpacket: 16
[  405.162412][T12682] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  405.170764][T12682] usb 1-1: config 0 has no interface number 0
[  405.177409][T12682] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[  405.186677][T12682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.196514][T12682] usb 1-1: config 0 descriptor??
[  405.391983][ T2931] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  405.641922][ T2931] usb 2-1: Using ep0 maxpacket: 8
[  405.792168][ T2931] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  405.800747][ T2931] usb 2-1: config 0 has no interface number 0
[  405.807599][ T2931] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[  405.817889][ T2931] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  405.827888][ T2931] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89
[  405.837188][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.846740][ T2931] usb 2-1: config 0 descriptor??
[  405.893841][ T2931] usb 2-1: NFC: intf 00000000e2703d45 id 00000000830f60dc
[  405.907191][ T2931] nfcmrvl 2-1:0.239: NFC: registered with nci successfully
[  406.096972][ T2931] usb 2-1: USB disconnect, device number 18
[  406.104051][ T2931] usb 2-1: NFC: intf 00000000e2703d45
[  406.742211][T12682] smscufx: Failed to write register index 0x00007010 with value 0x00000000
[  406.750935][T12682] smscufx: error writing 0x7010
[  406.750955][T12682] smscufx: error -71 configuring system clock
[  406.756695][T12682] smscufx: probe of 1-1:0.122 failed with error -71
[  406.774161][T12682] usb 1-1: USB disconnect, device number 7
[  406.861955][ T2931] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  407.101915][ T2931] usb 2-1: Using ep0 maxpacket: 8
[  407.222023][ T2931] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  407.230722][ T2931] usb 2-1: config 0 has no interface number 0
[  407.237178][ T2931] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[  407.247229][ T2931] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  407.257219][ T2931] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89
[  407.266590][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.278216][ T2931] usb 2-1: config 0 descriptor??
[  407.323591][ T2931] usb 2-1: NFC: intf 000000001fa67a8b id 00000000830f60dc
[  407.337279][ T2931] nfcmrvl 2-1:0.239: NFC: registered with nci successfully
[  407.523883][ T2931] usb 2-1: USB disconnect, device number 19
[  407.530442][ T2931] usb 2-1: NFC: intf 000000001fa67a8b
[  407.542926][T12682] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  407.781879][T12682] usb 1-1: Using ep0 maxpacket: 16
[  407.902031][T12682] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  407.910347][T12682] usb 1-1: config 0 has no interface number 0
[  407.916827][T12682] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[  407.925998][T12682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.935585][T12682] usb 1-1: config 0 descriptor??
15:03:15 executing program 0:
r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

15:03:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0)

15:03:15 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x8}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:03:15 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="1f2b4c673746c1614e563231769e10cafc379a3020047b956f2f5e83c01b78f5eb49740284d2ba81eb285ad323c945f726aee7e43be4e1b5c58dfc51887cd57b452c3adc53117abc9d1778f619d41f23b65a0c2e5b2cba86d98e0a66b09c6dc95d970e17d17081fdd266d09fcdcc349aba5a4af4f79eb8b685ef4454c3b09b160c579717794d9c5828e46794cc29daffce505b72ffa44d7883b0462a973baea42e37f7d333287c6e7599f324b5ed440a17ea71004b056f1c943a8d6ee98f5ed4cb8b2fa880c18fa8"})

15:03:15 executing program 3:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000001000000000000000000000600000000000000000000000000008100000000000000000000000000000000000000e500"/272], 0x110)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

15:03:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1e, 0x1, 0x0)
getsockopt(r2, 0x800000010f, 0x87, &(0x7f00004ad000), &(0x7f0000a3c000)=0x35)

[  408.292182][T12682] smscufx: Failed to write register index 0x00003008 with value 0x00000001
[  408.300873][T12682] smscufx: ufx_lite_reset error writing 0x3008
[  408.300891][T12682] smscufx: error -71 resetting device
[  408.308103][T12682] smscufx: probe of 1-1:0.122 failed with error -71
[  408.339111][T15095] binder: binder_mmap: 15091 20ffb000-20fff000 bad vm_flags failed -1
15:03:15 executing program 5:
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000be000000002000bc379650228cd79e530000000000000040", @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="0000000001000400"/28, @ANYRES32, @ANYBLOB='\x00'/23, @ANYRES32])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2)
ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:15 executing program 3:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  408.412793][T12682] usb 1-1: USB disconnect, device number 8
15:03:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0)

15:03:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = accept4$alg(r1, 0x0, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12)
splice(r2, 0x0, r4, 0x0, 0x80000000000ec6, 0x4)

15:03:15 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x8}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

[  408.647322][T15120] binder: binder_mmap: 15117 20ffb000-20fff000 bad vm_flags failed -1
15:03:15 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000300", 0x20)

[  408.843550][T12682] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  409.091991][T12682] usb 1-1: Using ep0 maxpacket: 16
[  409.212042][T12682] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  409.220432][T12682] usb 1-1: config 0 has no interface number 0
[  409.226747][T12682] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[  409.235923][T12682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.245444][T12682] usb 1-1: config 0 descriptor??
[  410.812118][T12682] smscufx: Failed to write register index 0x00007010 with value 0x00000000
[  410.821147][T12682] smscufx: error writing 0x7010
[  410.821161][T12682] smscufx: error -71 configuring system clock
[  410.827058][T12682] smscufx: probe of 1-1:0.122 failed with error -71
[  410.848198][T12682] usb 1-1: USB disconnect, device number 9
15:03:18 executing program 0:
r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

15:03:18 executing program 3:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:18 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000001580)=[{0x0, 0x7ffff000}, {&(0x7f0000000180)=""/182, 0xb6}], 0x2, 0x0)

15:03:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0)

15:03:18 executing program 5:
syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2)
syz_open_dev$cec(0x0, 0x2, 0x2)
pipe(&(0x7f00000001c0))
socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

15:03:18 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000100)=0xfd, 0x4)

[  411.360577][T15145] binder: binder_mmap: 15136 20ffb000-20fff000 bad vm_flags failed -1
15:03:18 executing program 3:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:18 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x0)
read(r0, 0x0, 0x0)

15:03:18 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})

15:03:18 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x3, 0x4, 0x100000001, 0x0, r0}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffffff3b, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18)

15:03:18 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000100000008000100627066001420020008ec08000100000008000600", @ANYRES32], 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:03:18 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = dup2(r0, r0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0)
close(r0)

[  411.657133][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  411.674238][T12682] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  411.692457][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  411.698799][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  411.922061][T12682] usb 1-1: Using ep0 maxpacket: 16
[  412.062280][T12682] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  412.070707][T12682] usb 1-1: config 0 has no interface number 0
[  412.077024][T12682] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[  412.086138][T12682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.095574][T12682] usb 1-1: config 0 descriptor??
[  412.113591][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  413.642124][T12682] smscufx: Failed to write register index 0x00007010 with value 0x00000000
[  413.652823][T12682] smscufx: error writing 0x7010
[  413.652843][T12682] smscufx: error -71 configuring system clock
[  413.658566][T12682] smscufx: probe of 1-1:0.122 failed with error -71
[  413.676630][T12682] usb 1-1: USB disconnect, device number 10
15:03:21 executing program 0:
r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

15:03:21 executing program 3:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:21 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0\x00')
chdir(&(0x7f00000000c0)='./file0\x00')
symlink(&(0x7f0000000340)='..', &(0x7f0000000280)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
umount2(&(0x7f0000000180)='../file0\x00', 0x0)

15:03:21 executing program 2:
io_setup(0x5, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}])

15:03:21 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000400000fbfadbdf250f0000000800020004"], 0x1}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:21 executing program 4:
socket(0x2000000000000021, 0x0, 0x10000000000002)

15:03:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xffffffffffffff8d, 0x0, 0x229, 0x0, 0xfffffebc}}], 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00')
preadv(r1, &(0x7f00000017c0), 0x235, 0x2902)

15:03:21 executing program 5:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1)
semctl$SETVAL(r0, 0x4, 0x10, 0x0)

15:03:21 executing program 3:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000100)=0x5, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000040)=0x1006, 0xd2, 0x0)

15:03:21 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x4, 0x0, 0x3}}, 0x2e)
connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)

15:03:21 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0)

15:03:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000240)={0xa4b7, {{0x2, 0x0, @multicast1}}}, 0x90)

[  414.492880][T12682] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  414.735403][T12682] usb 1-1: Using ep0 maxpacket: 16
[  414.852213][T12682] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  414.861134][T12682] usb 1-1: config 0 has no interface number 0
[  414.867609][T12682] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[  414.877202][T12682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.887161][T12682] usb 1-1: config 0 descriptor??
[  416.462074][T12682] smscufx: Failed to write register index 0x00007010 with value 0x00000000
[  416.470878][T12682] smscufx: error writing 0x7010
[  416.470891][T12682] smscufx: error -71 configuring system clock
[  416.477086][T12682] smscufx: probe of 1-1:0.122 failed with error -71
[  416.496239][T12682] usb 1-1: USB disconnect, device number 11
15:03:24 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0xfdfd})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

15:03:24 executing program 4:
r0 = socket(0x10, 0x10000000000802, 0x0)
write(r0, &(0x7f0000000000)="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", 0xfc)

15:03:24 executing program 3:
setxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100000061, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r1, 0xc2604110, &(0x7f0000000000))

15:03:24 executing program 5:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
setgroups(0x7fc, &(0x7f0000000140))
pread64(r1, 0x0, 0x10246, 0x80000004)
r2 = epoll_create1(0x0)
r3 = dup2(r2, r2)
r4 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x14})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140))
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, 0x0, 0xfffffffffffffe25)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580))
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x1)
r6 = dup(r5)
setsockopt$inet6_opts(r6, 0x29, 0x3f, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="d20119b6a2002096ea8e565a389d9c82c83f7bbb126cb77028ef25e0941d51d3c50e030070fd5b1b040d4673fb3d5c512e49d6f5759221dc21204b344b560604a129a0796feaf58e561367d8bebe08ed3ddab63a60f796ed504c67e838eca77c26964567ff95a6c5857de76c7bb038a24b8932c31a9b00822ac74225686cbf18b5c131ba4a04afdeeee4ff57cb2ce6e068b1f1f94400000400fec6cb8bc5563312c6bbf8c004783adcc37137a21dceb3525673db97fb569b86a21e50065d0c8d20ad4868846ec236ddd2f95cf507c34f64a48837da78c0f1f41becd6f6f513dd0c88166eb0c4be4872aa74a2a1afbf982ba2c26323d3228063b68194e926d1c1e5ad6b29e8b1b1aa55e3674d997c2fc57ea2811c035d02ff494862eacfb1a58cb673ae49a5e56c57f8eab3ba6905ac650faacdcc68eb6a2addc3267bcdfd9a0f819daae452208138425563b0262d7cb35d6e63f6891295105cf768cb5adc430248a228d8ca37f3ce71f431eb2f8a6d908d1bcece"]], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0)
r7 = socket$packet(0x11, 0x100000002, 0x300)
socket$packet(0x11, 0x4, 0x300)
socket$packet(0x11, 0x200000000006, 0x300)
r8 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r8)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'t\x83am0 \x00', 0x4004})
r10 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
syslog(0xffffffff, &(0x7f0000000880)=""/4096, 0x1000)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000300)=0x14)
write$binfmt_elf64(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xd8)
ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000840)={0x7, 0x7})
ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000080)={0x5, 0x3, 0x7, 0x20, 0x7ff, 0xa2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x200100, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x8)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)

15:03:24 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x4, 0x0, 0x3}}, 0x2e)
connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)

15:03:24 executing program 4:
socket$unix(0x1, 0x1, 0x0)
socket$isdn(0x22, 0x3, 0x11)
unshare(0x400)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f00000003c0)={0x0, 0x0, 0x69c4})
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000003c0)={0x0, 0x0, 0x69c4})
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000003c0)={0x0, 0x0, 0x69c4})
r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f00000003c0)={0x0, 0x0, 0x69c4})

15:03:24 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x4f, 0x2, 0x8, 0x187f, 0x302, 0x435e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2d, 0xf0, 0x38, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0)

15:03:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}})

15:03:24 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206001fffffff01000000003900090035000c0311000000190012400a000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

15:03:24 executing program 5:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
setgroups(0x7fc, &(0x7f0000000140))
pread64(r1, 0x0, 0x10246, 0x80000004)
r2 = epoll_create1(0x0)
r3 = dup2(r2, r2)
r4 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x14})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140))
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, 0x0, 0xfffffffffffffe25)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580))
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x1)
r6 = dup(r5)
setsockopt$inet6_opts(r6, 0x29, 0x3f, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"]], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0)
r7 = socket$packet(0x11, 0x100000002, 0x300)
socket$packet(0x11, 0x4, 0x300)
socket$packet(0x11, 0x200000000006, 0x300)
r8 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r8)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'t\x83am0 \x00', 0x4004})
r10 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
syslog(0xffffffff, &(0x7f0000000880)=""/4096, 0x1000)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000300)=0x14)
write$binfmt_elf64(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xd8)
ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000840)={0x7, 0x7})
ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000080)={0x5, 0x3, 0x7, 0x20, 0x7ff, 0xa2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x200100, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x8)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)

15:03:24 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x4, 0x0, 0x3}}, 0x2e)
connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)

15:03:24 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000100)='./file0/file1\x00', r0, &(0x7f0000000180)='./file0\x00')
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0)

15:03:24 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0)

15:03:24 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x80000080045007, 0x0)

15:03:24 executing program 5:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
setgroups(0x7fc, &(0x7f0000000140))
pread64(r1, 0x0, 0x10246, 0x80000004)
r2 = epoll_create1(0x0)
r3 = dup2(r2, r2)
r4 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x14})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140))
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, 0x0, 0xfffffffffffffe25)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580))
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x1)
r6 = dup(r5)
setsockopt$inet6_opts(r6, 0x29, 0x3f, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"]], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0)
r7 = socket$packet(0x11, 0x100000002, 0x300)
socket$packet(0x11, 0x4, 0x300)
socket$packet(0x11, 0x200000000006, 0x300)
r8 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r8)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'t\x83am0 \x00', 0x4004})
r10 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
syslog(0xffffffff, &(0x7f0000000880)=""/4096, 0x1000)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000300)=0x14)
write$binfmt_elf64(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xd8)
ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000840)={0x7, 0x7})
ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000080)={0x5, 0x3, 0x7, 0x20, 0x7ff, 0xa2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x200100, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x8)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)

[  417.418830][T15268] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'.
[  417.443431][T15268] team0: Port device veth3 added
15:03:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  417.482030][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
15:03:24 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x4, 0x0, 0x3}}, 0x2e)
connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)

[  417.555836][T15268] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'.
[  417.579204][T15268] team0: Port device veth5 added
15:03:24 executing program 0:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r4, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x34}}, 0x0)

[  417.725049][   T31] usb 3-1: Using ep0 maxpacket: 8
[  417.739367][T15285] MTU too low for tipc bearer
[  417.842219][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.853961][   T31] usb 3-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=43.5e
[  417.863416][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.901877][   T31] usb 3-1: config 0 descriptor??
[  417.946489][   T31] smsusb:smsusb_probe: board id=12, interface number 0
[  417.972287][   T31] smsusb:smsusb_probe: Device initialized with return code -19
[  418.145269][T12682] usb 3-1: USB disconnect, device number 9
[  418.912041][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  419.151891][   T31] usb 3-1: Using ep0 maxpacket: 8
[  419.282282][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.293561][   T31] usb 3-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=43.5e
[  419.303095][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.313760][   T31] usb 3-1: config 0 descriptor??
[  419.355930][   T31] smsusb:smsusb_probe: board id=12, interface number 0
[  419.382173][   T31] smsusb:smsusb_probe: Device initialized with return code -19
[  419.554091][   T31] usb 3-1: USB disconnect, device number 10
15:03:27 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x22, {0x22, 0x0, "45890c999ded627da70f95e5755905db397b04a580603e5a3971c358ae77a721"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

15:03:27 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
unshare(0x400)
fstat(r0, &(0x7f0000000000))

15:03:27 executing program 4:
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe)

15:03:27 executing program 5:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
setgroups(0x7fc, &(0x7f0000000140))
pread64(r1, 0x0, 0x10246, 0x80000004)
r2 = epoll_create1(0x0)
r3 = dup2(r2, r2)
r4 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x14})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140))
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, 0x0, 0xfffffffffffffe25)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580))
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x1)
r6 = dup(r5)
setsockopt$inet6_opts(r6, 0x29, 0x3f, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"]], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0)
r7 = socket$packet(0x11, 0x100000002, 0x300)
socket$packet(0x11, 0x4, 0x300)
socket$packet(0x11, 0x200000000006, 0x300)
r8 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r8)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'t\x83am0 \x00', 0x4004})
r10 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
syslog(0xffffffff, &(0x7f0000000880)=""/4096, 0x1000)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000300)=0x14)
write$binfmt_elf64(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="459710fe022cd716fb709ea3482eb3c2a6852ceb0547ab7cca8a1fc66a19d11c768b19d2a24f0105f26191abfae8bcf5ba1e3845257043a170a53a272b1d75facd022cf7f8ef481fa92c490f3978d7c663116ebfd2e0de046dd972ffa6d78814558b3265fb22c36f342bc49dd83c53b790cf3de28e0a5dea9b74c2ebefaac7dcd75e829c3788881a43070be930b0b55495e54d3d3004c460ddb2cadce417696baf36f9fec05853d84448126d9e8819f269cc6da57e247a1cf14b550644f3a9db29284e99ab7e322679117258361becb8f1cc0308a5f92d85d3a3160000cb7957dd3fefa843a16fc0c359f1df4ad506d504b5f4df90923c2aca058b8a8abadcbdb07cdf4bc34478caabb35e96605124edf3d9ca20c2ab8ce4f66c87e353b0a210f07d102c3edf4f228694544d0b25c3cdaae83486a7f906e50c19aa2e31a4021db7d60adb97d04f8a06c1fbbbdea96c64f3324dcccad697eda185ef805123296ed935ce09c5d63837a4d1"], 0xd8)
ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000840)={0x7, 0x7})
ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000080)={0x5, 0x3, 0x7, 0x20, 0x7ff, 0xa2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x200100, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x8)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)

15:03:27 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0)

15:03:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x269}}, 0x0)

15:03:27 executing program 4:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000001000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x1}, 0x20)

15:03:27 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000006c0)={0xa8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x0, 0xff}}]}, 0xa8)

15:03:27 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xffeffffefffffffb)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "24b9dd94"}]}}}}}}}}, 0x0)

15:03:27 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)

[  420.320113][T15317] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
15:03:27 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x2, 0x0, 0x0, 0x69, 0x11, 0x1a001000000}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

15:03:27 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x13, 0x0, &(0x7f0000000040))

[  420.372651][T15317] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  420.403801][T12682] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  420.651932][T12682] usb 4-1: Using ep0 maxpacket: 16
[  420.772053][T12682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.783638][T12682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  420.797147][T12682] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  420.806363][T12682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.816403][T12682] usb 4-1: config 0 descriptor??
[  421.304704][T12682] elecom 0003:056E:00FC.0003: unknown main item tag 0x2
[  421.312018][T12682] elecom 0003:056E:00FC.0003: unknown main item tag 0x6
[  421.319353][T12682] elecom 0003:056E:00FC.0003: unknown main item tag 0x7
[  421.326763][T12682] elecom 0003:056E:00FC.0003: item fetching failed at offset -1796665886
[  421.335839][T12682] elecom: probe of 0003:056E:00FC.0003 failed with error -22
[  421.548404][T12682] usb 4-1: USB disconnect, device number 4
[  422.321911][T12682] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  422.561956][T12682] usb 4-1: Using ep0 maxpacket: 16
[  422.682062][T12682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.693584][T12682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  422.706945][T12682] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  422.716294][T12682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.727958][T12682] usb 4-1: config 0 descriptor??
[  423.034024][T12682] elecom 0003:056E:00FC.0004: unknown main item tag 0x2
[  423.041401][T12682] elecom 0003:056E:00FC.0004: unknown main item tag 0x6
[  423.048935][T12682] elecom 0003:056E:00FC.0004: unknown main item tag 0x7
[  423.058168][T12682] elecom 0003:056E:00FC.0004: item fetching failed at offset -1796666526
[  423.067474][T12682] elecom: probe of 0003:056E:00FC.0004 failed with error -22
15:03:30 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x1}, 0x3c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000100)}, 0x10)

15:03:30 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1000, 0x4)

15:03:30 executing program 0:
lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0x19a, 0x0)

15:03:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000058000100100001007564703a73797a304000000044000400200001000a000000000000000000000000000000000000000000000100800000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0)

15:03:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000ac0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

15:03:30 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0xf010000, 0x0, 0x0, [0x80040000], 0x0})

[  423.104916][T12682] usb 4-1: USB disconnect, device number 5
15:03:30 executing program 0:
r0 = socket$kcm(0x10, 0x8000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="a500000018008100e00f80ecdb4cb904024865160b000000d4126efb12000f002b51da3b40d819a9ffe200060000e84a6b83a51959c9358c283c3915cfe38206fb613cf34b6b9dc3b736747280da6470e49bc355a5ae752ae61428639c8d909d5cd8cb578d528613b77b896f80047eae53883c3a325395ce109a270c6dee459926ea9d523713770a817aef13fe7f5e5edc1279b3ace9ceee77e8f5ed7617adf433f3e63156", 0xa5}], 0x1, &(0x7f00000013c0)}, 0x0)

15:03:30 executing program 3:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x50d060000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/92)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  423.272710][T15354] Started in network mode
[  423.277959][T15354] Own node identity 00000000000000000000000000000001, cluster identity 4711
[  423.287612][T15354] Enabling of bearer <udp:syz0@> rejected, failed to enable media
15:03:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x38}}, 0x0)

[  423.379479][T15357] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[  423.388480][T15357] netlink: 117 bytes leftover after parsing attributes in process `syz-executor.0'.
15:03:30 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r0, &(0x7f00000017c0), 0x333, 0x8f)

15:03:30 executing program 0:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
ppoll(&(0x7f00000010c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000040)=""/4096, 0xfffffffffffffce3, 0x0, &(0x7f0000001040)={0x0, 0x1c9c380})

[  423.705417][T15368] netlink: 'syz-executor.4': attribute type 22 has an invalid length.
15:03:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:30 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000240)={0x14, 0x14, 0x301, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)

15:03:30 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xb, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x80006080044d76, 0x0)

15:03:31 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb5, 0x0)
fstat(r0, &(0x7f00000003c0))
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f00000003c0)=""/226)

15:03:31 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00')
r2 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.cpus\x00', 0x2, 0x0)
set_mempolicy(0x8003, &(0x7f0000000080)=0x7f, 0x7)
sendfile(r2, r1, 0x0, 0xfff)

15:03:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a004000fe02000000010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

15:03:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x3, 0x0, "b0c7b9bd822173f59c1e3718ab4c8f332688edb9679d731b968df40b5242fe96389377f38336bf4c671230bda278ae03f4d218e21f6ba0537dae68dffb0e1863df5ec693e3dcd7a4bd19fdc267405a5a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x2, 0x0, "8b05e98a6e9a990ccccaa0722f7917adbf9251c09e5993d319d88199f692070000003eaad49bc3c0a86bd1683c51ec2fdab5a220e04e0000637e2b5a8dd3403b3e0104601d083e2317d3045a7b001d00"}, 0x36a)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "521353f37dcd64c12799efad200b6cd16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f3ea21c5dd607e8a88c9cfd00000000080000000000000000f2ff"}, 0xd8)

15:03:31 executing program 2:
r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0)
r1 = epoll_create(0x20)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffdbf, 0x0, &(0x7f0000000180))

15:03:31 executing program 3:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x50d060000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/92)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

15:03:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="71ffffff7f9bca47b80a516bd1000006", 0x10)

[  424.354606][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
15:03:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040))

15:03:31 executing program 0:
unshare(0x8000400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0})

15:03:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x5, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000000)=0x2, 0xff09)

15:03:31 executing program 1:
syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x2, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0x1, 0x2f, [0x0]}, @padn]}]}}}}}}}, 0x0)

15:03:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x5)

15:03:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040))

15:03:32 executing program 0:
unshare(0x8000400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0})

15:03:32 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0)

15:03:32 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x4, 0x400000}}, 0x20)

15:03:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x36, 0x829, 0x0, 0x0, {0x3, 0x1000000}, [@typed={0xc, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0)
r1 = socket(0x10, 0x80002, 0x10)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  425.342813][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
15:03:32 executing program 3:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x50d060000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/92)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

15:03:32 executing program 0:
unshare(0x8000400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0})

15:03:32 executing program 1:
unshare(0x20400)
r0 = socket(0x40000000018, 0x0, 0x2)
bind$inet(r0, 0x0, 0x0)

15:03:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040))

15:03:32 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket(0x200000000000011, 0x4000000000080002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00')
syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
socket(0x10, 0x80002, 0x0)
socket(0x10, 0x80002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]})
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

15:03:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040))

15:03:32 executing program 1:
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

15:03:32 executing program 0:
unshare(0x8000400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0})

15:03:32 executing program 0:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x8})

15:03:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)

15:03:33 executing program 1:
unshare(0x400)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x3, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0)

[  426.146388][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
15:03:33 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x5d, 0x0, &(0x7f0000000100)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x40046307, 0x0, 0x40486311, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

15:03:33 executing program 0:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

15:03:33 executing program 1:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0x0, 0x8864], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0)

15:03:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x805, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
dup3(r0, r1, 0x0)
poll(&(0x7f0000000140)=[{r2}, {}], 0x2, 0x0)

15:03:33 executing program 5:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffffffffffe)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write$nbd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

15:03:33 executing program 3:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x50d060000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/92)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  426.622637][T15531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  426.641343][T15531] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
15:03:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="240000001e0007121dff18946f610400020000001f0000000000080008000a000400ff7e", 0x24}], 0x1}, 0x0)

15:03:33 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:33 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='eth0eth1\\posix_acl_access-\\$vmnet1\x00', 0x4)
writev(r0, 0x0, 0x0)

15:03:34 executing program 1:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0x0, 0x8864], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0)

[  426.912662][T15557] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET)
15:03:34 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0xfffffffffffffe93)

[  427.149936][T15566] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
15:03:34 executing program 1:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0x0, 0x8864], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0)

[  427.408990][T15579] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
15:03:34 executing program 0:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

15:03:34 executing program 1:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0x0, 0x8864], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0)

15:03:34 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:34 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:34 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="240000001e0007121dff18946f610400020000001f0000000000080008000a000400ff7e", 0x24}], 0x1}, 0x0)

15:03:34 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0xfffffffffffffe93)

[  427.919109][T15598] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
15:03:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0)
dup3(r0, r2, 0x0)

15:03:35 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0xfffffffffffffe93)

15:03:35 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="240000001e0007121dff18946f610400020000001f0000000000080008000a000400ff7e", 0x24}], 0x1}, 0x0)

15:03:35 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000400)=""/91, 0x214)

15:03:35 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:35 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0xfffffffffffffe93)

15:03:36 executing program 0:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

15:03:36 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

15:03:36 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="240000001e0007121dff18946f610400020000001f0000000000080008000a000400ff7e", 0x24}], 0x1}, 0x0)

15:03:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1)

15:03:36 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x10c, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0x10c}}, 0x0)

15:03:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080008000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="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", 0xc16, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:36 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r1)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r1, &(0x7f00000002c0), 0x17c)

15:03:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$kcm(0x2, 0x2, 0x73)
recvmmsg(r1, &(0x7f00000042c0), 0x400000000000175, 0x0, 0x0)
shutdown(r1, 0x0)

15:03:36 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  429.774960][T15661] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
15:03:36 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9)
syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18)
listen(r2, 0x200000000002)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1})
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socket$nl_crypto(0x10, 0x3, 0x15)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x3c}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  429.961250][T15676] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
15:03:37 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=""/40}, 0x18)

15:03:37 executing program 2:
r0 = socket(0x15, 0x80005, 0x0)
connect(r0, &(0x7f00000000c0)=@generic={0xa, "f8617677754a691821e2593ab66252f1a5af986898fa31a5016075bd10ca0f568c443aaa48f979332acd9b1053116d7f60a33d8b06f7f02a1a1671b0d014e2624dd617644013c4b12606ed88d84aabae2dc85e0f36d8be0cc96ad334daa6cb8cdbce934da3e639ec112ef3cc623d39ee51283f5b5cc441999b1326c36d68"}, 0x80)
getsockname(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80)

15:03:37 executing program 0:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

15:03:37 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1d)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0xe8)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast2=0xe0000003}}}}}, 0x0)

15:03:37 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xfffffc79)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
tkill(r0, 0x1000000000016)

15:03:37 executing program 2:
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100))
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})

15:03:37 executing program 3:
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9ad9ca21429043bd)

15:03:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300090568fe0700000000000700ff3f1400c90000450001070000001419001a0006000000030000000208000800005d27dfb51571", 0x39}], 0x1)

15:03:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x0, 0x30}, 0xc)

15:03:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4068aea3, &(0x7f0000000080)={0x94})
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)

15:03:38 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0x3, 0x0, 0x8000000, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

15:03:38 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x40a, 0x4)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x58, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0)

15:03:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0xa, @pix={0x0, 0x0, 0x31364d4e, 0x9}})

15:03:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="4b4323ce1a6f66a0e01f35bfea43a0c365af39", 0x13}, {&(0x7f00000014c0)="5ae08d2b99ab182245c710e00e", 0xd}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

[  431.252622][T15735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:03:38 executing program 3:
r0 = socket$kcm(0x2b, 0x200000000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xca0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f000000cd00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

15:03:38 executing program 5:
r0 = io_uring_setup(0x64, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

15:03:38 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, 0x0)
close(r0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = gettid()
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
tkill(r1, 0x1000000000014)

15:03:38 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0x3, 0x0, 0x8000000, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

15:03:38 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x8})

15:03:38 executing program 0:
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000000340)=<r1=>0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

15:03:38 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2}, 0x8)

15:03:38 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x2c7, 0x0}, 0xc100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14}, 0x14)

15:03:38 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0x3, 0x0, 0x8000000, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

15:03:38 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x5})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97)

15:03:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x813, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x10'}]}]}, 0x20}}, 0x0)

15:03:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00')
bind$alg(r1, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r3 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x80)
recvmmsg(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

15:03:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5c55})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:39 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0x3, 0x0, 0x8000000, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

15:03:39 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x2c7, 0x0}, 0xc100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14}, 0x14)

15:03:39 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000004840)='/dev/input/mice\x00', 0x0, 0x0)

15:03:39 executing program 0:
r0 = socket$kcm(0x10, 0x20000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008102e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x0)

15:03:39 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0x400000001)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x101, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)

15:03:39 executing program 1:
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x0, 0x2f, 0x0, @local, @local}}}}, 0x0)

[  432.249709][T15806] IPv6: NLM_F_CREATE should be specified when creating new route
[  432.258962][T15806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  432.266401][T15806] IPv6: NLM_F_CREATE should be set when creating new route
[  432.273740][T15806] IPv6: NLM_F_CREATE should be set when creating new route
[  432.281140][T15806] IPv6: NLM_F_CREATE should be set when creating new route
15:03:39 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x2c7, 0x0}, 0xc100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14}, 0x14)

15:03:39 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000100))

15:03:39 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x2c7, 0x0}, 0xc100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14}, 0x14)

15:03:39 executing program 0:
unshare(0x20000200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
setns(r0, 0x0)
clone(0x38082000, 0x0, 0x0, 0x0, 0x0)

15:03:39 executing program 1:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2eb, &(0x7f0000000040)={0x0, 0xffffffffffffffbc}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="3100000013000900690006342fc56aef40be44081000000046000107000000540d0003c0256465a3000000002065702e1a", 0x31}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000000), 0x0, &(0x7f0000000100)}], 0x4924937, 0x0)

15:03:39 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0x400000001)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x101, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)

[  432.513943][ T3373] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  432.638510][T15830] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
15:03:39 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x401, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000)
sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0)

15:03:39 executing program 3:
ioprio_set$pid(0x2, 0x0, 0x0)
ioperm(0x0, 0x7, 0x0)
clone(0xa0020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  432.763956][ T3373] usb 6-1: Using ep0 maxpacket: 8
[  432.892707][ T3373] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[  432.901612][ T3373] usb 6-1: config 0 has no interface number 0
[  432.908232][ T3373] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[  432.917422][ T3373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.012130][ T3373] usb 6-1: config 0 descriptor??
[  433.067854][ T3373] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[  433.502208][ T3373] gspca_ov534_9: reg_w failed -71
[  434.011972][ T3373] gspca_ov534_9: Unknown sensor 0000
[  434.012173][ T3373] ov534_9: probe of 6-1:0.212 failed with error -22
[  434.027472][ T3373] usb 6-1: USB disconnect, device number 4
[  434.442101][ T3373] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  434.682023][ T3373] usb 6-1: Using ep0 maxpacket: 8
[  434.802186][ T3373] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[  434.811078][ T3373] usb 6-1: config 0 has no interface number 0
[  434.817615][ T3373] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[  434.827209][ T3373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.836972][ T3373] usb 6-1: config 0 descriptor??
[  434.886307][ T3373] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[  435.112112][ T3373] gspca_ov534_9: reg_w failed -71
15:03:42 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000004840)='/dev/input/mice\x00', 0x0, 0x0)

15:03:42 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0x400000001)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x101, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)

15:03:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}, {[@timestamp={0x44, 0x4}]}}, @igmp={0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}}}}, 0x0)

15:03:42 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40043, 0x0)

15:03:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, [0x3]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

15:03:42 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246)
r3 = memfd_create(&(0x7f00000001c0)='/\x00\x00\x00\x00\x00\x00\x00\x00\xd6\xa3-\xea\xf1\xc2^\x98\x1d\xc4\xdf\xb1\"\xf3\x87\x048\x97\xd4\x9eGe\xca/8g\xeag^\x01]\x19\xdb\xde\xdd\xcd\xbdgd\xe9\xd6|\xfd<\f\xb9\xad\xc8\'8\xb904\x97\xbbn\xb8lJ\xa3,\x1d\xdd\xddg\x00\x94\xcb\xba;\atv\xe3I\x99\xb4\xb9\xc7U\x11\x1c\xd9$S\xf1\n4&\xb2\x02\xf6\xc1w\x8fD\xa0\a\x95\xf4\'\xd4!&\'\rx\xca\xfe\x9b', 0x0)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x17642c4)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0x0)
pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r2, r3, 0x0, 0x182002700)

15:03:42 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0x400000001)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x101, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)

15:03:42 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x28})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000011000/0xf000)=nil, 0xf000, 0x4)
r1 = socket$kcm(0x2b, 0x2000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
dup2(r1, r0)

15:03:42 executing program 0:
unshare(0x600)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffd)

15:03:42 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
close(r2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

15:03:42 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0)
ftruncate(r1, 0x1000000)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x200)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x8, 0x4, 0x2, 0x10000, 'syz1\x00', 0x6}, 0x3, 0x20, 0xffff, 0xffffffffffffffff, 0x0, 0xe3, 'syz0\x00', &(0x7f0000000000), 0x0, [], [0x2, 0x7fff, 0x6, 0x2]})
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

15:03:42 executing program 4:
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

[  435.691906][ T3373] gspca_ov534_9: Unknown sensor 0000
[  435.692096][ T3373] ov534_9: probe of 6-1:0.212 failed with error -22
[  435.739473][ T3373] usb 6-1: USB disconnect, device number 5
[  436.102039][ T3373] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  436.342054][ T3373] usb 6-1: Using ep0 maxpacket: 8
[  436.462179][ T3373] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[  436.472565][ T3373] usb 6-1: config 0 has no interface number 0
[  436.478881][ T3373] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[  436.488367][ T3373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.498219][ T3373] usb 6-1: config 0 descriptor??
[  436.546367][ T3373] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[  436.972198][ T3373] gspca_ov534_9: reg_w failed -71
[  437.481886][ T3373] gspca_ov534_9: Unknown sensor 0000
[  437.482088][ T3373] ov534_9: probe of 6-1:0.212 failed with error -22
[  437.496462][ T3373] usb 6-1: USB disconnect, device number 6
15:03:44 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000004840)='/dev/input/mice\x00', 0x0, 0x0)

15:03:44 executing program 0:
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x7d)
r0 = socket$inet6(0xa, 0x6, 0x0)
io_uring_setup(0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = io_uring_setup(0xa4, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r1], 0x105)
dup3(r0, r2, 0x0)

15:03:44 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4000000043)
r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
close(r0)

15:03:44 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @empty=0x2}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

15:03:44 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
close(r2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

15:03:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:44 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @empty=0x2}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

15:03:44 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
close(r2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

15:03:44 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

15:03:44 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @empty=0x2}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

15:03:44 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4000000043)
r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
close(r0)

15:03:45 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
close(r2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[  438.039901][ T3373] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  438.342028][ T3373] usb 6-1: Using ep0 maxpacket: 8
[  438.463142][ T3373] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[  438.471671][ T3373] usb 6-1: config 0 has no interface number 0
[  438.478360][ T3373] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[  438.488039][ T3373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.500801][ T3373] usb 6-1: config 0 descriptor??
[  438.546170][ T3373] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[  438.972386][ T3373] gspca_ov534_9: reg_w failed -71
[  439.491902][ T3373] gspca_ov534_9: Unknown sensor 0000
[  439.492036][ T3373] ov534_9: probe of 6-1:0.212 failed with error -22
[  439.506243][ T3373] usb 6-1: USB disconnect, device number 7
15:03:46 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @empty=0x2}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

15:03:46 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000004840)='/dev/input/mice\x00', 0x0, 0x0)

15:03:46 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4000000043)
r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
close(r0)

15:03:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x4)

15:03:46 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x3ff}, 0x4)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15:03:46 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:46 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:46 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4000000043)
r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
close(r0)

15:03:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000001000000e9bb9e08000000000000c940f99ccc2932"])
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x485, 0x5], [0xc1]})

15:03:46 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="b92d4dfdbbc54a5e5da8a38ee28ead5c649bc851c9edc9fcff8fd7b5ae3e19d9eccf0d930b72073b92ed77a6c99ffe790dfd6125e6886b52c2e461dcd9f35f7fa1fd6798478051dce9262bf9407ebff6526deddda1db927ffae92b4f2176f653a43474a717fab7aa405fa36b40504b52d79275ffdb010e5d76ed15fe61c8f7cde194986dc6cd731af050eb7102779ff3bcfad9a7c46f646e90255dac60fab66519006e3ecfe4bee05165a4583705f72619da48a40cc3de901abda28fd3fc04bb2b826cd82e6d5668"})

15:03:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

[  440.022565][ T3373] usb 6-1: new high-speed USB device number 8 using dummy_hcd
15:03:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0x7ff0000000, &(0x7f0000000080)="3b993a32261075593e33b2a0867d1a960e777a3d3d9922e595")

15:03:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000071, 0xff00000000007900, 0xc0000080], [0xc1]})

[  440.220575][T15991] kvm [15990]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[  440.330862][ T3373] usb 6-1: Using ep0 maxpacket: 8
[  440.494239][ T3373] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[  440.502654][ T3373] usb 6-1: config 0 has no interface number 0
[  440.508884][ T3373] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[  440.518274][ T3373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.567150][ T3373] usb 6-1: config 0 descriptor??
[  440.684134][ T3373] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[  441.102022][ T3373] gspca_ov534_9: reg_w failed -71
[  441.621891][ T3373] gspca_ov534_9: Unknown sensor 0000
[  441.622015][ T3373] ov534_9: probe of 6-1:0.212 failed with error -22
[  441.636793][ T3373] usb 6-1: USB disconnect, device number 8
15:03:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb5, &(0x7f0000000100))

15:03:48 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3ff}}, 0xe8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)

15:03:48 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)

15:03:48 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:48 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x3a4, 0x9600, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10)

15:03:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15:03:48 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f000003a000)='./control\x00', 0x100000081000100)
read(r3, 0x0, 0x23020000)
dup3(r0, r3, 0x0)
creat(&(0x7f0000000080)='./control/file0\x00', 0x0)

15:03:48 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20982)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  441.935734][    C0] sd 0:0:1:0: [sg0] tag#2620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  441.945366][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB: Test Unit Ready
[  441.952183][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  441.962624][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  441.972848][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  441.982729][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  441.992628][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.002407][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.015327][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.025113][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.034867][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.044654][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.054389][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.064167][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.073916][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:49 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x3a4, 0x9600, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10)

[  442.083667][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.093414][    C0] sd 0:0:1:0: [sg0] tag#2620 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
15:03:49 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x3a4, 0x9600, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10)

15:03:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a4"], 0x54)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3dbee289ab5e860dd7170e6fde1643ba4d837b0fb2c03ca4a3a82f476e8fdd0f4192e6dec76cdeef2987bad4f04fae657791c48fcc019cbbb95f6381bfbde5d9148abf6531403564160f9374c8dc55386c863")
r1 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000780)=""/174, &(0x7f0000000680)=0xae)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, r2)
add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="4700000003000000000000000000000000000000537a217b84b99a00287379c282668054f6341336ddad4ddc3a6a880e93a0880d2768fd52eeac94226f762cb3d6c3886c83a64f396fe899e22b7580ebc141a4af19e640902435c2a96adf328b189b49e00e86cb17086c375b1ef3d091b9f72d"], 0x73)
r3 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805)
ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040))
write$UHID_INPUT(r4, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c3542ac42cb2f94b098e98f2bcd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0xa943708f26830065}, 0x1006)
connect$pptp(r4, &(0x7f0000000840)={0x18, 0x2, {0x2, @broadcast}}, 0x1e)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

15:03:49 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:49 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20982)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15:03:49 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x3a4, 0x9600, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10)

15:03:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15:03:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)

15:03:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001006866736300000000040002000000000014dbdf4a04f1a8d6307b8909fe48571c07c43cc3dc5d27653a11182d793812b805b1035ad145551c2594e055f58f3c6f0d781b7193ac20d4e6f8576a5dff6de4b9dc4b75cfe5e1d30d7c8d6c7848878d12a9b9fcf6e8925dcdb77875e86eab779c81d964f848cabc8a26e9083c27da678af3b6d28a77eadf3c2e1acc296205fa863a0dafe9c372df091521da54dff117ccd2000000003f005c647a5dc1000047e2896e36ad380a7e399637bf42d391d5d023c620e394162c9d95af91e6ea42210da18d0000000078c1c81fc0d8c16da1c7d256ac8497c8e9c6c687648d4ef7"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  442.896023][    C1] sd 0:0:1:0: [sg0] tag#2560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  442.905639][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB: Test Unit Ready
[  442.912288][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.922119][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.932767][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.942551][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.952302][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.962058][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.965451][T16054] usb usb5: usbfs: process 16054 (syz-executor.3) did not claim interface 0 before use
[  442.971839][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  442.991518][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.001266][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.011110][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.020891][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.030642][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.040663][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.050402][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.060141][    C1] sd 0:0:1:0: [sg0] tag#2560 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
15:03:50 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20982)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  443.271130][T16067] usb usb5: usbfs: process 16067 (syz-executor.3) did not claim interface 0 before use
15:03:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  443.386947][    C0] sd 0:0:1:0: [sg0] tag#2562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  443.396637][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB: Test Unit Ready
[  443.403276][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.412999][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.419442][    C1] sd 0:0:1:0: [sg0] tag#2561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  443.422748][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.432268][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB: Test Unit Ready
[  443.441887][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.448335][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.457956][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.467659][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.477275][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.486891][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.496698][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.506316][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.515945][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.526517][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.536131][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.545753][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.555370][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.564982][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.574600][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.584218][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.594006][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.603640][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.613262][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.622875][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.632545][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.642189][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.651777][    C0] sd 0:0:1:0: [sg0] tag#2562 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  443.661387][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15:03:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  443.679601][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.689368][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.699091][    C1] sd 0:0:1:0: [sg0] tag#2561 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
15:03:50 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20982)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  443.870145][    C0] sd 0:0:1:0: [sg0] tag#2563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  443.879919][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB: Test Unit Ready
[  443.887204][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.897492][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.907735][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.917637][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.927914][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.937748][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.947983][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.958232][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.968513][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.978775][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  443.990584][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.001816][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  444.011906][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.021861][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.031878][    C0] sd 0:0:1:0: [sg0] tag#2563 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  444.087937][    C1] sd 0:0:1:0: [sg0] tag#2564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  444.097596][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB: Test Unit Ready
[  444.104216][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.113974][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.123749][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.135527][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.145301][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.155257][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.165115][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.174876][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.184637][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.194752][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.204506][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.214279][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.224148][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  444.234028][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.243800][    C1] sd 0:0:1:0: [sg0] tag#2564 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  444.324806][    C1] sd 0:0:1:0: [sg0] tag#2581 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  444.335360][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB: Test Unit Ready
[  444.342068][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.351856][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.361582][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.371404][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.381221][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.391024][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.400771][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.410548][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.420341][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.430135][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.439988][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.449742][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.459497][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:51 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r0, 0x40084146, &(0x7f0000001f64))

[  444.469256][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.479004][    C1] sd 0:0:1:0: [sg0] tag#2581 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
15:03:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  444.640061][    C0] sd 0:0:1:0: [sg0] tag#2587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  444.649686][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB: Test Unit Ready
[  444.656343][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.666066][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.675897][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.685905][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.695639][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.705388][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.715124][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.724868][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.734615][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.744425][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.754186][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.763983][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.773908][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.783702][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.793463][    C0] sd 0:0:1:0: [sg0] tag#2587 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  444.832494][    C1] sd 0:0:1:0: [sg0] tag#2588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  444.842137][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB: Test Unit Ready
[  444.848694][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.858488][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.868244][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.878041][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.887891][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.897637][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.907377][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.917120][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.926886][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.936629][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.946385][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.956179][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.965970][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:51 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f0000000180)='\xe0|\x1e\x13L\xe1\xe7\\X\x0fBQ\xcf\xfe\xe9n\"\xddm\xba\xce\x88\xdd?wR\x81\xb1f\xcaq\xf4]\xa7\x1dx5\x8fM\xca\x8b\xf3\'\xf4P\x0eO\xb9\x17\x80\xaa\xaa=\x16\xae\xaa\x0f\x92)\x18\xf1\xd6\x02#\xac\xbc\xd9\xea\x14\x92\xf5gD\xd8\xdb9N\xcc\xc1`0\xac\xac\xb7\xfc,7\xa9&K\xe6V\xd9\x9c\xa5\x88\xd7\x8f\xb5', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r1, &(0x7f0000000100)='i', 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0xfffffffffffffff8)

15:03:51 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x2})

15:03:51 executing program 3:
unshare(0x8000400)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)

15:03:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xb0, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a4aa3fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xb0}}, 0x8081)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  444.975717][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  444.985900][    C1] sd 0:0:1:0: [sg0] tag#2588 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  445.145936][    C0] sd 0:0:1:0: [sg0] tag#2589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  445.155578][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB: Test Unit Ready
[  445.162191][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.171925][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.181655][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.191446][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.201247][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.211190][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.220963][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.230714][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.240479][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.250246][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.260048][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.269807][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.279598][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
15:03:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x98}]}, &(0x7f0000000000)='(9+\xee\xe4\xfc\x7f\xf7\x8f\xe8\xc4E\x1c \x03\xa1V\tO<\xa0\xf4\xbc\x8cg_[\xe6\x0f<i\x8bv\xe3\xd6>\x8bq\xce?\x92[\xeds\xe1)\xd8\xd3\xeae~\aKp\xc7\xb6o\xe4\xbf\x9b~\xff\xfd;\x12\\\x03\xb0z6\xeeY\xae\xd4\xa8\xf51\xe1\x89H\\F7\x04'}, 0x48)

15:03:52 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r0, 0x4161, 0x0)

15:03:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d)

[  445.289378][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.299139][    C0] sd 0:0:1:0: [sg0] tag#2589 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
15:03:52 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000640)='/\x00\a\xaa(\t0\xc4j\\\x14E\x80VfT\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9@\x97\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f\x00\x00\x00\x00\xf8;\xd5g\bQ\xf1a\x0e$9\xc1\x05o8\xe4\xdc6\x04\x86\xa7\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xb4>Ea\xb4\x1c\xaf\xfft\x8a\xb5\xb1\xf6%4\xed%\xa5OYK\xe0_,\x19\xc7q\xc9\x8d\xbaU\x8as$(\xf4M\x18C}!\xf9C\xa9\xb4g\x1e\x9fY\xf9{\n\x9bO\xd2S)WI\x19\xffi\xf48\x7f<k<\xc7\v4\x16\xd8\x87m\x96t>y\xecK\xf6\xfd\xb5:\x1d\xfc\x9ah\xef\xacP\xed\xdbA\x87vpT\xb1\x15\"qy\xacV\xcd[9p\a\xea\xf4Q\x14\xe5vE\xc3\x83\xb2\xe8[B\x03\x7f\x17\xe6\x7fX\x01\xe5\xf7\x9d\x81\xcc\x1aBh0\xce\xac\xe0w\x04\xebU\\;?I\xd6\x11\xbc_\xe8\xb4\xe9\xc5\x0e\t\xeb$\xc7\f\x1b8ye\x8d`\xf5\x8b}6\x94\xd8\x19\x80\x95\xe7\x82\xc1\xb17\xcb`\xd4e\xa0\xbb\x83\x99\x10nP7$\r\xc5a\v\x98\x93\'\xb4l{\xb3\x19\x19\x1b&\x98\xdajq[\xf9\xd1\x96\xb3\xf5\xc3\xce(\x1f\xb1\xc1\xefa\x9e\x9cS\x1dx`\xf1\xbcA\x9b\x99\xf9\xf7\xe3\xaa\xf3\xee\x7ft\xef2\x9c\xcc\xaf\xef\x8eq\xcb\xef\x14\xf5H\xd8A7\xad\xef\x01\a\x93\xd0F\xf9\xbb\xb1\xc2)>\xb0\b\x9ci\xe4X\xe9', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000001500)='/dev/md0\x00', 0x24000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3)

[  445.461689][T16138] l2tp_ppp: tunl 4: set debug=464c457f
[  445.468293][T14900] l2tp_core: tunl 4: closing all sessions...
[  445.502757][    C1] l2tp_core: tunl 4: closing...
15:03:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:52 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)

15:03:52 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @binary="a5"}]}, 0x24}, 0x1, 0xf000}, 0x0)

15:03:52 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0xa00, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:03:52 executing program 1:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7, 0x800, 0x3}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000180)}, 0x20)

15:03:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:52 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {0x0}, {&(0x7f0000000300)=""/155, 0x9b}, {0x0}, {&(0x7f00000004c0)=""/102, 0x66}], 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x1f, @dev}}}, 0x0)
ioctl(r0, 0xc2604110, &(0x7f0000000000))

[  445.951442][T16180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:03:53 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000004})

15:03:53 executing program 3:
mkdir(&(0x7f0000000680)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000000)='./file0\x00', 0x131040, 0x0)

15:03:53 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$addseals(r0, 0x409, 0x8)

15:03:53 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000686ff8)={0xfffffffffffffffe}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000011000))
r0 = memfd_create(&(0x7f0000ddd000)='}\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xea!Y\xb1', 0x0)
fallocate(r0, 0x0, 0x0, 0x3ff)

15:03:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
io_uring_setup(0x0, &(0x7f0000000000))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f0000000040)={0x0, {0x14, 0x14, 0x50aebab6}})

15:03:53 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0xa00, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:03:53 executing program 1:
setrlimit(0x2, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d48b2eed022aa5fa8b3d94c22")

15:03:53 executing program 3:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0)

15:03:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f004})
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:53 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

[  446.615349][T16225] mmap: syz-executor.1 (16225): VmData 18522112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
15:03:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00')
lseek(r0, 0x0, 0x2)

15:03:53 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0xa00, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:03:53 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x0, 0x0)
unshare(0x400)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000))

15:03:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000400)="f10ccb16c78017d48a2fedc46bfaeee65514c3c39f4807afe51e51eca9c640f3a22fc1566cd0e3540ba0653012e92b887a3db641792974848f08bf279c1a44139a6598a888881f6b48c7a8bd161a6ae9e8f9be2b3b244bcd3127174ffc5bfc94c3e4cb", 0x0, 0x63})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:54 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0xa00, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:03:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "3a639edaa93ebb2b", "bdfd76a38e354aca134d3fabd63701ed", "7686e232", "168e122f258a5afb"}, 0x28)
recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x59, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400})
shutdown(r0, 0x0)

15:03:54 executing program 3:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

15:03:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e15fc1772f14dbc1b3f1000ff034017db9820000000003b08d450ffffb3560000080000ab31c357e3972f4100f5cb88b9ce837c597e9ce5cc027942003607000000001d00009f5d54076bb47f0900"], 0x58)
write$binfmt_elf64(r1, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x26c)

15:03:54 executing program 1:
rt_sigaction(0x7, &(0x7f00000001c0)={&(0x7f0000000100)="c461295f4e00d8b78d890000c4c1ff12290fc776c28f4854a2c706c483fd01f0006666440f6d29c483757f3a7f410faeeec422f92a9703000000", {}, 0x0, &(0x7f0000000140)="8fa878c293ffefffff0af040018b3300000066f0460fb08e53000000c4011966028f69889b19660fddf0266626f2450f5afd40dc1ff0814303ebbd01c3f340a4"}, 0xfffffffffffffffd, 0x8, &(0x7f0000000200))

15:03:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2})
r3 = fcntl$dupfd(r2, 0x0, r0)
write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78}, 0x78)
read$hidraw(r3, &(0x7f0000000200)=""/223, 0xdf)

15:03:54 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6526808720c1100f4320000000109021b0001000000000904000001d1f00000070507000000000000"], 0x0)

15:03:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0)

15:03:54 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100))

15:03:54 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write(r0, 0x0, 0x2a4)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00')
sendfile(r1, r2, &(0x7f0000000540)=0xa3, 0x80000002)

15:03:54 executing program 1:
semop(0x0, &(0x7f0000000200)=[{}], 0x1)
r0 = semget(0x1, 0x15fe454033a245e2, 0x80)
clone3(&(0x7f00000001c0)={0x8cfad84b62ce88b1, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x4, 0x0, &(0x7f00000000c0)=""/219, 0xdb, &(0x7f0000000240)=""/251}, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)

[  447.713791][    T5] usb 4-1: new high-speed USB device number 6 using dummy_hcd
15:03:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf12aa77ad43cb41f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
write(r1, 0x0, 0x0)
close(r1)

15:03:54 executing program 4:
io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x2]})

15:03:54 executing program 1:
clock_getres(0xfffffffffffffffe, &(0x7f0000000040))

15:03:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000400)="f10ccb16c78017d48a2fedc46bfaeee65514c3c39f4807afe51e51eca9c640f3a22fc1566cd0e3540ba0653012e92b887a3db641792974848f08bf279c1a44139a6598a888881f6b48c7a8bd161a6ae9e8f9be2b3b244bcd3127174ffc5bfc94c3e4cb", 0x0, 0x63})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:54 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write(r0, 0x0, 0x2a4)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00')
sendfile(r1, r2, &(0x7f0000000540)=0xa3, 0x80000002)

15:03:55 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0)
fallocate(r0, 0x0, 0x0, 0x200)

15:03:55 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e})

[  447.973712][    T5] usb 4-1: Using ep0 maxpacket: 8
[  448.123547][    T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.134193][    T5] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=32.f4
[  448.143418][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.173826][    T5] usb 4-1: config 0 descriptor??
[  448.430360][    T5] usb 4-1: USB disconnect, device number 6
[  449.211947][    T5] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  449.462063][    T5] usb 4-1: Using ep0 maxpacket: 8
[  449.582041][    T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.592511][    T5] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=32.f4
[  449.601653][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.611297][    T5] usb 4-1: config 0 descriptor??
[  449.853870][    T5] usb 4-1: USB disconnect, device number 7
15:03:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f0000e8e000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

15:03:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write(r0, 0x0, 0x2a4)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00')
sendfile(r1, r2, &(0x7f0000000540)=0xa3, 0x80000002)

15:03:57 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
ftruncate(r0, 0xe00000000000000)

15:03:57 executing program 5:
io_setup(0x5, &(0x7f0000000100)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0)
io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="04da932045adf6ad13777a4a776cd7c8fb9f9eca1e257bbf88c0012686061265003b66420a1a1c4deb43fe441da1b06a827360cbf48fa37db0f6a12c33a7aa976af56fee33", 0x45}])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'i\xe4\xff\xff\xff\xff\xff\xff\xbfJ\xe7\xe8G\x00', 0x368753129365c24f})
io_submit(r0, 0x477, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0xffffffe3}])

15:03:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000400)="f10ccb16c78017d48a2fedc46bfaeee65514c3c39f4807afe51e51eca9c640f3a22fc1566cd0e3540ba0653012e92b887a3db641792974848f08bf279c1a44139a6598a888881f6b48c7a8bd161a6ae9e8f9be2b3b244bcd3127174ffc5bfc94c3e4cb", 0x0, 0x63})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:57 executing program 1:
r0 = eventfd(0x0)
fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', 0x0, 0x0)

15:03:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007041dfffd946fa2830020200a000a000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

15:03:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write(r0, 0x0, 0x2a4)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00')
sendfile(r1, r2, &(0x7f0000000540)=0xa3, 0x80000002)

15:03:57 executing program 4:
r0 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
mq_unlink(&(0x7f0000000040)='eth0\x00')

15:03:57 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x80}, {0x80}})
close(r0)

[  450.557576][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
15:03:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)

15:03:57 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0)

15:03:57 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006f00)=""/136, 0x88}, {&(0x7f0000006fc0)=""/179, 0xb3}, {0x0}, {0x0}], 0x4}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:03:57 executing program 3:
unshare(0x40600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x8048ae66, 0x0)

15:03:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80)

15:03:57 executing program 0:
unshare(0x2a000400)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:03:58 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x8841)

15:03:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000400)="f10ccb16c78017d48a2fedc46bfaeee65514c3c39f4807afe51e51eca9c640f3a22fc1566cd0e3540ba0653012e92b887a3db641792974848f08bf279c1a44139a6598a888881f6b48c7a8bd161a6ae9e8f9be2b3b244bcd3127174ffc5bfc94c3e4cb", 0x0, 0x63})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:03:58 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24)

15:03:58 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x80024321, 0x80000000000002)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2}, 0x8)
fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', 'Zbdevvmnet0&{$\x00'})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r2}, &(0x7f00000000c0)=0x20)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = inotify_init()
r6 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000640)={0x14, 0xfffffdcb, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r6, r6, &(0x7f0000000080), 0xa198)

15:03:58 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006f00)=""/136, 0x88}, {&(0x7f0000006fc0)=""/179, 0xb3}, {0x0}, {0x0}], 0x4}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:03:58 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_setup(0x8, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}])

15:03:58 executing program 5:
r0 = socket$inet(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@broadcast}}, 0xe8)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

[  451.300672][T16392] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
15:03:58 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]})
r6 = dup2(r1, r5)
dup3(r6, r4, 0x0)

[  451.353352][T16395] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
15:03:58 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006f00)=""/136, 0x88}, {&(0x7f0000006fc0)=""/179, 0xb3}, {0x0}, {0x0}], 0x4}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:03:58 executing program 3:
unshare(0x40600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae00, 0x0)

15:03:58 executing program 0:
unshare(0x400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tee(r0, r0, 0x5, 0x0)

15:03:58 executing program 3:
syz_emit_ethernet(0x233, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x3, {0x3c7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

15:03:58 executing program 0:
unshare(0x400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tee(r0, r0, 0x5, 0x0)

15:03:59 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x80024321, 0x80000000000002)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2}, 0x8)
fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', 'Zbdevvmnet0&{$\x00'})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r2}, &(0x7f00000000c0)=0x20)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = inotify_init()
r6 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000640)={0x14, 0xfffffdcb, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r6, r6, &(0x7f0000000080), 0xa198)

15:03:59 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006f00)=""/136, 0x88}, {&(0x7f0000006fc0)=""/179, 0xb3}, {0x0}, {0x0}], 0x4}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:03:59 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]})
r6 = dup2(r1, r5)
dup3(r6, r4, 0x0)

15:03:59 executing program 3:
socket(0x1e, 0x4, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0)

15:03:59 executing program 0:
unshare(0x400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tee(r0, r0, 0x5, 0x0)

15:03:59 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17ea3b64, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0xe7ff}})

[  452.172426][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  452.178686][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  452.185205][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  452.191460][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  452.198032][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  452.204327][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:03:59 executing program 0:
unshare(0x400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tee(r0, r0, 0x5, 0x0)

15:03:59 executing program 3:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000300), 0x12)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)

15:03:59 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x50, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

15:03:59 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17ea3b64, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0xe7ff}})

15:03:59 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]})
r6 = dup2(r1, r5)
dup3(r6, r4, 0x0)

15:03:59 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000017010000020086caf81fce59c5c9de00"], 0x18}], 0x1, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1b5, 0x0)

[  452.732380][ T3373] usb 2-1: new high-speed USB device number 20 using dummy_hcd
15:03:59 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17ea3b64, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0xe7ff}})

15:03:59 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000032c0), &(0x7f00000016c0)=0x80)

15:03:59 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x80024321, 0x80000000000002)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2}, 0x8)
fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', 'Zbdevvmnet0&{$\x00'})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r2}, &(0x7f00000000c0)=0x20)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = inotify_init()
r6 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000640)={0x14, 0xfffffdcb, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r6, r6, &(0x7f0000000080), 0xa198)

15:03:59 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x40000000000088)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x40000000000014d, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0xd6}], 0x1)

15:03:59 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]})
r6 = dup2(r1, r5)
dup3(r6, r4, 0x0)

15:04:00 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17ea3b64, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0xe7ff}})

[  452.972343][ T3373] usb 2-1: Using ep0 maxpacket: 8
15:04:00 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x56}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48)

[  453.094464][ T3373] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[  453.102899][ T3373] usb 2-1: config 0 has no interface number 0
[  453.109207][ T3373] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024
[  453.120649][ T3373] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8
[  453.131947][ T3373] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  453.141170][ T3373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.261109][ T3373] usb 2-1: config 0 descriptor??
[  453.309756][ T3373] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input15
15:04:00 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

[  453.509945][    T5] usb 2-1: USB disconnect, device number 20
[  453.522086][    C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19
[  453.523518][    T5] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  454.372059][    T5] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  454.622019][    T5] usb 2-1: Using ep0 maxpacket: 8
[  454.742619][    T5] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[  454.750860][    T5] usb 2-1: config 0 has no interface number 0
[  454.757234][    T5] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024
[  454.768436][    T5] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8
[  454.779677][    T5] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  454.788864][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.798429][    T5] usb 2-1: config 0 descriptor??
[  454.848119][    T5] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input16
[  455.044815][    T5] usb 2-1: USB disconnect, device number 21
[  455.052088][    C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19
[  455.060765][    T5] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
15:04:02 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3fe, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xd2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0)

15:04:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

15:04:02 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000001640)=""/156, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/163, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)

15:04:02 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x80024321, 0x80000000000002)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2}, 0x8)
fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', 'Zbdevvmnet0&{$\x00'})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r2}, &(0x7f00000000c0)=0x20)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = inotify_init()
r6 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000640)={0x14, 0xfffffdcb, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r6, r6, &(0x7f0000000080), 0xa198)

15:04:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

15:04:02 executing program 3:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x9, 0x319}, 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:04:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

[  455.774535][ T3373] usb 2-1: new high-speed USB device number 22 using dummy_hcd
15:04:03 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2}, {}, {}]}, 0x108)

15:04:03 executing program 3:
mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)

15:04:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r0, &(0x7f0000000280)=""/1, 0x3eafb832)
close(r1)

[  456.142284][ T3373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.153786][ T3373] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  456.167147][ T3373] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40
[  456.176484][ T3373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.193879][ T3373] usb 2-1: config 0 descriptor??
15:04:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r0, &(0x7f0000000280)=""/1, 0x3eafb832)
close(r1)

15:04:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r0, &(0x7f0000000280)=""/1, 0x3eafb832)
close(r1)

[  456.678002][ T3373] wacom 0003:056A:00D2.0005: item fetching failed at offset -1947548295
[  456.687075][ T3373] wacom 0003:056A:00D2.0005: parse failed
[  456.693117][ T3373] wacom: probe of 0003:056A:00D2.0005 failed with error -22
[  456.897706][    T5] usb 2-1: USB disconnect, device number 22
[  457.672036][    T5] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  458.032139][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.043368][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  458.056433][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40
[  458.065609][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.075217][    T5] usb 2-1: config 0 descriptor??
[  458.380316][    T5] wacom 0003:056A:00D2.0006: item fetching failed at offset 433517537
[  458.389204][    T5] wacom 0003:056A:00D2.0006: parse failed
[  458.395317][    T5] wacom: probe of 0003:056A:00D2.0006 failed with error -22
15:04:05 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)

15:04:05 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x40096102, &(0x7f0000000040))

15:04:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r0, &(0x7f0000000280)=""/1, 0x3eafb832)
close(r1)

15:04:05 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @mcast2, 0x68e9}, {0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0xffff, [0x4, 0x8000, 0x4, 0x4, 0x4ce, 0x0, 0x2, 0x4]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2, 0x8000a0ffffffff}}], 0x48}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x10000, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x80, 0x2, 0xdd1}, 0x14)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r12 = openat(r10, &(0x7f0000000080)='./file0\x00', 0xe99b14aca75f4c22, 0x1ca)
socket$inet_sctp(0x2, 0x0, 0x84)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'gre0\x00', 0x200})

15:04:05 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3f)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=<r4=>0x0)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=r4)
r5 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x1000)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r9 = openat$cgroup_ro(r7, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x1000)

15:04:05 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x58002, 0x0)
ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3f)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=<r4=>0x0)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=r4)
r5 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x1000)
socket$unix(0x1, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0)
r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x1000)

[  458.505116][ T3373] usb 2-1: USB disconnect, device number 23
15:04:05 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0)
fgetxattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/140, 0x22)

15:04:05 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000000))

15:04:05 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000140))

15:04:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140)=0x4000000, 0x4)

15:04:05 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r0)
keyctl$describe(0x6, r0, 0x0, 0x0)

15:04:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000033000503d25a80648c6394fb0300fc0010000b400c000200053582c137153e370900018005003000d1bd", 0x2e}], 0x1}, 0x0)

15:04:05 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x1e, &(0x7f00000000c0), 0x10)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

15:04:06 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000940)=0x7b)
r1 = socket$netlink(0x10, 0x3, 0x0)
dup2(r1, r0)

15:04:06 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb00000000000000000004000000000010000000d0fec95896e5343e0004000400170000001f0000da000700003f00000000000000030000000000120002000b00050000000108018000000000bc6abd422d8affce24d1a0350ddf184e69bdd5064923725345bb6f9adb6de9f7c8a26f963bba66d4b22578c5bccededda90b05512065226118198bfc6f4fcc5b73"], 0x88}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

15:04:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x0, [0xc0010112], [0xc1]})

15:04:06 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x400000000008000, 0xff0d)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x18e, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x1a6, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000200)="92dfb037", 0x4}, {&(0x7f0000000400)="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", 0x595}], 0x2}}], 0x2, 0x0)

15:04:06 executing program 4:
mknod(&(0x7f00000005c0)='./bus\x00', 0x4f625649608205a3, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

15:04:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
io_uring_setup(0x64, &(0x7f0000000140))
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x25, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)

15:04:06 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='GPL.cpuset-\x82\'posix_acl_access\x00')
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

15:04:06 executing program 0:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000))
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x801000}, 0xc)

15:04:06 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'team_slave_1\x00', @empty=[0x48]})

15:04:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

15:04:06 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000140), 0x4)

[  459.435261][   T32] kauditd_printk_skb: 3 callbacks suppressed
[  459.435335][   T32] audit: type=1804 audit(1570547046.487:31): pid=16639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm=47504C2E6370757365742D8227706F name="/newroot/200/file0/bus" dev="ramfs" ino=49271 res=1
15:04:06 executing program 0:
r0 = memfd_create(&(0x7f00000001c0)='#! ', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

15:04:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f00000009c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24}}, 0x24)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}}, 0x24)

[  459.580520][T16648] input: syz1 as /devices/virtual/input/input17
15:04:06 executing program 1:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
getsockname(r0, 0x0, &(0x7f0000000080))

15:04:06 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfefff010}, {0x80000006}]}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

15:04:06 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000100)='\x00')

15:04:06 executing program 4:
ioprio_set$pid(0x3, 0x0, 0x4000)

15:04:06 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfffffffffffffffc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1)

15:04:06 executing program 1:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1a0, 0x0)
connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="f8030000000000004e55befd"], 0xc)

15:04:07 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', @empty=[0x0, 0x0, 0x43]})

15:04:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, 0xe8)

15:04:07 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000003c0)={'lo\x00'})

15:04:07 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

15:04:07 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
r1 = epoll_create(0x7fff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x80000004})
epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0)

15:04:07 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0)
close(r0)

[  460.492338][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  460.498651][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  460.505177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  460.511493][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  460.518106][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  460.524456][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:04:07 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfefff010}, {0x80000006}]}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

15:04:07 executing program 0:
r0 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c)

15:04:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000300)=0x3)

[  460.652304][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  460.658635][    C1] protocol 88fb is buggy, dev hsr_slave_1
15:04:07 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:07 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

15:04:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x2b, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000)

15:04:07 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x1, [@local]}, 0x14)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:04:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000300)=0x3)

15:04:08 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000300)=0x3)

15:04:08 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:08 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

15:04:08 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

15:04:08 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfefff010}, {0x80000006}]}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

15:04:08 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000300)=0x3)

[  461.614115][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  461.621129][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:04:08 executing program 4:
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000100)=0x7ff, 0x8001, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x2000)=nil, 0x3)

15:04:09 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:09 executing program 4:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0xc08c5102, &(0x7f0000a07fff))

15:04:09 executing program 5:
r0 = socket$kcm(0x2b, 0x2000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4})
poll(&(0x7f0000000000)=[{}, {}, {}, {}], 0x20000000000000eb, 0x0)

15:04:09 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x1, [@local]}, 0x14)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:04:09 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)

15:04:09 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfbfffffffffffffc, @local, 'ip_vti0\x00'}}, 0x1e)
dup2(r0, r1)

15:04:09 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:09 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x2000001, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0)

15:04:09 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
write(r2, &(0x7f0000000000)='\a', 0x1)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x7, 0x4)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}, 0x0)

15:04:09 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfefff010}, {0x80000006}]}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

15:04:09 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

15:04:09 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x1, [@local]}, 0x14)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:04:10 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:10 executing program 4:
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b", 0x21}], 0x1)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000009ed27add4711b3fe6563c6bdb1b896bcae8f32bfc6528a62ad83c3381b614243a1f4047450bf3f2ee0f96ff26343d421f7de18cba5da75b0a14bb7b829680b1adb92f0266f905ece4c10f29fe0c2b42b2b2d0d188e85b480fb2c66c56b0d3c26e88735cc8f0dd2bd85fda1cf7b3f9436cda33b530afc683771ad9ee408670a842fc0bfed43f1f8eb9a4c140659389d1910f7c0a0ee00bd62a6cdbd9ecc"], 0x1}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:04:10 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

15:04:10 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

15:04:10 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6}}}}}, 0x0)

15:04:10 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

15:04:10 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket(0x11, 0x800000003, 0x8)
bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:10 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
unshare(0x40000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
mkdirat$cgroup(r3, &(0x7f0000000040)='0-\x00', 0x1ff)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x3f, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r2, 0x9, r3, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='0-\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f})

15:04:10 executing program 4:
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x2, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @broadcast, @dev, {[@timestamp={0x8, 0x30, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@multicast1]}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

15:04:10 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x1, [@local]}, 0x14)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:04:10 executing program 4:
r0 = socket(0x2, 0x3, 0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0)
ftruncate(r1, 0x10004)
sendfile(r0, r1, 0x0, 0x72439a6b)

[  463.590514][T16841] IPVS: ftp: loaded support on port[0] = 21
15:04:10 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='='])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))

15:04:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x40000002}]})

15:04:11 executing program 3:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1=0xe0000002]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

[  464.098206][T16852] IPVS: ftp: loaded support on port[0] = 21
15:04:11 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='='])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))

15:04:11 executing program 5:
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x1, 0x0, 0x10000001000, 0x0, [0xfffffffe]})

15:04:11 executing program 3:
r0 = timerfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000100))

15:04:11 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='='])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))

15:04:11 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
unshare(0x40000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
mkdirat$cgroup(r3, &(0x7f0000000040)='0-\x00', 0x1ff)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x3f, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r2, 0x9, r3, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='0-\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f})

[  464.613257][T16886] IPVS: ftp: loaded support on port[0] = 21
15:04:11 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='='])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))

15:04:11 executing program 1:
unshare(0x20000400)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0)

15:04:11 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0)
ioctl$int_in(r0, 0xc00000c0045005, &(0x7f00000002c0)=0x1000)
close(r0)

15:04:11 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x5)

15:04:11 executing program 1:
unshare(0x20000400)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0)

15:04:12 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x104)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfce7)

15:04:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x4b564d02, 0x4b564cfc], [0xc1]})

15:04:12 executing program 1:
unshare(0x20000400)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0)

15:04:12 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x6}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfffffffe}, 0x2)

15:04:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:12 executing program 1:
unshare(0x20000400)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0)

15:04:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x4b564d02, 0x4b564cfc], [0xc1]})

15:04:12 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
unshare(0x40000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
mkdirat$cgroup(r3, &(0x7f0000000040)='0-\x00', 0x1ff)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x3f, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r2, 0x9, r3, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='0-\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f})

15:04:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xb}})

[  465.775230][T16931] IPVS: ftp: loaded support on port[0] = 21
15:04:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="70c16e47bc49562d9bc070")
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}]}]}, 0x34}}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000340)='\x02\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x02\x00\xf3\x00\x00\x00\x00\x00', 0xfd14, 0x0)

15:04:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x5)

15:04:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x4b564d02, 0x4b564cfc], [0xc1]})

15:04:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf12aa77ad43cb41f04b02a9fdd6c1610c621c85fe3e348527bfcd7b97a9e423c81df6cf8fc782a724371bb8052178caaee5df3cd941fec8b9175ccd9eec1234ffca7ade3be0c6cd0600221809c65a8c2c267d89cde685a255cf6546823367bdc21fb9a599ae018fcffe654c71f6fb623683d6d750a5495f54ccf7f37a2cea5976c831a1a58a9faf91ea25bad05c7604a66e8686ffd31b622b5f6212d8a774524771d0ab5ab09fca51c121d31763fe134012fd4cfcad7a6c2cd8a693290ae689c054039744dff25a5ce0371fd95d08353df6a63e7cfe311a69f34756d7409626da1bf0bc18b0ca83bd72b718e7820534dbe6e258b5e8567d1dbe233b3be202a3ad65f78ad9626635b599c24d85295bac9c3bde4570d236c660310f838608a20fddc1500556b36f89cd627380546cff134cd80b940c3fc8839a909f3c2f23bff0babf186bf948fbdb70ac22fcb9b5bde685407190c8d16dcce63e4d6623c2f94b0e87fc81b7159f972cd821dbfc2acdd1fe8d62bcf63f785ac76cac05f81432230f2426b6a6d892c11a735e36c187b7d53f4ef93aae568c74157170"], 0x18}}, 0x0)
r1 = socket$kcm(0x10, 0x20000000002, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f20500d2000500fc3711407f480f0001002700000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

15:04:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:14 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
unshare(0x40000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
mkdirat$cgroup(r3, &(0x7f0000000040)='0-\x00', 0x1ff)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x3f, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r2, 0x9, r3, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='0-\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f})

[  467.762670][T16954] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  467.770929][T16954] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  467.861175][T16960] IPVS: ftp: loaded support on port[0] = 21
15:04:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x4b564d02, 0x4b564cfc], [0xc1]})

15:04:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:15 executing program 5:
unshare(0x20040600)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x80044dfe, &(0x7f0000000100))

15:04:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)=';\x00@\x00\x00\x00\x00\x00\x02', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:04:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

[  468.628403][T16990] kvm: emulating exchange as write
15:04:17 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x5)

15:04:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0)

15:04:17 executing program 1:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f00000000c0), 0x4000676, 0x0)

15:04:17 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x803, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000080)=""/16, 0x10}], 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0)

15:04:17 executing program 5:
r0 = socket$inet(0x2, 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="f4a9351111a955aaeb2f3886f50b0f9195f2a75195c075ddd04e4f71255bf147b26e7e420a0d3264cb1b66e30a123b4f3e6767ec26dd9dcbfc05075d73bfd0830296f31689f5c9f51ec869937974fd4858747fa93ccc293a67bdf6ea6fedd22569a3f14cd33316d9f4fd16ed241e9bd6d725deb700", 0x75}, {&(0x7f00000001c0)="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", 0x54c}], 0x2, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x0)

15:04:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

15:04:18 executing program 5:
r0 = socket$inet(0x2, 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="f4a9351111a955aaeb2f3886f50b0f9195f2a75195c075ddd04e4f71255bf147b26e7e420a0d3264cb1b66e30a123b4f3e6767ec26dd9dcbfc05075d73bfd0830296f31689f5c9f51ec869937974fd4858747fa93ccc293a67bdf6ea6fedd22569a3f14cd33316d9f4fd16ed241e9bd6d725deb700", 0x75}, {&(0x7f00000001c0)="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", 0x54c}], 0x2, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x0)

[  471.050918][T17011] device nr0
 entered promiscuous mode
15:04:18 executing program 2:
clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x35)

15:04:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc080aebe, &(0x7f0000000040)=ANY=[])

15:04:18 executing program 5:
r0 = socket$inet(0x2, 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="f4a9351111a955aaeb2f3886f50b0f9195f2a75195c075ddd04e4f71255bf147b26e7e420a0d3264cb1b66e30a123b4f3e6767ec26dd9dcbfc05075d73bfd0830296f31689f5c9f51ec869937974fd4858747fa93ccc293a67bdf6ea6fedd22569a3f14cd33316d9f4fd16ed241e9bd6d725deb700", 0x75}, {&(0x7f00000001c0)="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", 0x54c}], 0x2, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x0)

15:04:18 executing program 4:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f000002002808000800040004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

15:04:18 executing program 5:
r0 = socket$inet(0x2, 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="f4a9351111a955aaeb2f3886f50b0f9195f2a75195c075ddd04e4f71255bf147b26e7e420a0d3264cb1b66e30a123b4f3e6767ec26dd9dcbfc05075d73bfd0830296f31689f5c9f51ec869937974fd4858747fa93ccc293a67bdf6ea6fedd22569a3f14cd33316d9f4fd16ed241e9bd6d725deb700", 0x75}, {&(0x7f00000001c0)="038481d342a5f6c6daa83d50a744ef198d39214d71d31c8b9ff7ddead89a34a6398389622ba6587ccae4332e148aa23e3d2e258caef5c678b46fd76174ca519ac2d4edb414315c0b3839df08e4397d46c58e533b8552107cf66cee6bfad705eea904a80d8de72b0ee54a822949a74603f0c6ba66463ec0f8764f8016797687b1ae02cbb1dd68f07d6db0a38be520f4873ec901190a2301ff341d1cf29ce525a3dc718b67e85f3e86cbdf1aaef6a0802aae5b6814c5c54ab6534a8fa2ff77c7dfc202e500a6c938e11521ee2ff87e155481f2d753ac64dc02d50b4469e08c75da6c474807bca7e87c5beed51c58231309a8e4beba85e42d0854f21c93c1584c31023d6d578938abb02362e6438e0e8370246bf1f68c0b0d5c4767ddace6d87d00686299a627910e6603014291dbcbc1c0c66de92a3993687e20f64e46af08ecc30148b9a23ff6c1669a8209412488eb95cf0268ddae8d425b5ce5bf79e2449313d0ed8aebca682e4e35ddda38906efc98c919d2f890564a7285b860fa1cc8b667c7b6fe49e96852a240bf77f177bd85d5640e97b0f942d5c6eebc57ca37ba56fba8809bed1f1f45a318582640255b481fa0ddb5138283c03a52e6a64994e804048ed7fdf2038ee990f96e228282dde1005125764cabf9fc8fcc594a78a08f0025d10e47eaa248d9d1ab0b1d56133636600aa5cd3d13cb397d6e03406addce00e358f755e316772be077d23427a1f3bd184d6821786ac587ea188a4f0d212cda80762cc964b65c8f0ff33a7d67a2afce9cc9d1f6131a24da67db83aa7e5d0405297dbc5759180bb8d22211432179c6e1e0c11835dec1dacd988c78390a98e35bef1a51d6ab82a5531c039a3666bdd15e204df13afbbee6f3ce4512c8b3d3c414351c527cfd9fe8d31456b8e67584be07f396ed43ad3fb0e007111820ebbbc95847a952c3abe2564e0e00cec43c04b4011b8afbbc213f2f9b3c1007c421182a49f12348eb43faad91a685d410eff1daebf5cb483e4431c3865fe079859cf9098e8f031cd653b49b766a4070e42f9895173eeed228520ea3470deec7fdba3c38da13d2950cb69c5251055c89b1360b5ef8ae3fc00c1ba9612d7f2b0675339e68d27f1a3268c841a2a79d0b07ba488b37805b724d8076c9935e641b37a45ef3178a3be311d9b2bb02a13656b09f03a1700eae0d3c77dd3d46140cc43ea5047ac6f8e31e2e70bf166c8bf0fb72bcc8191b53805b0b4763b68f029b83e1471c3f3bd2c683e698628dcc4df7cf87a4a37e9585daa3057db5910867f40ba5fe967d7082093b509083a300177a891b5a4574a75e284a1130723924b1aaf3bf47a78197c8d10814e686896e7dd11aeb3f548f14c3120bf5417c9a4420175ee6cf2cb8a742b3acc99228ac8365c61f576afc5a7fdff29e9accd0968a626526983b1ceaee90c0bf8ac04871544760661508231584587af188a88f3a5d8ca4ec03d2451e106287863cb20fa993f127ee4e89f8107f6924a4907e14c13e3273f6557f5ad78b5c516ab93822bea2640a70388eb7942a7894e0b14fec7ef4800f39961b7dd1a25466a663208e5469268cdff86546f837de454c3fa7da859e56a37b4a7fddf4f39cc9ac2470fec0459ff5d50148e9cc0dd79c987afab2876734287a790601a884be0397fb5f95c14ada89054ec7785c5e514322712e515d7099a3f3c326f228cf97797920bcb2178d40b54429250578e0b815c34310a56c7d3dc3e4e29e1319a34adf6587f3e1656e5877cf445b53ebc09bd9a1f076d1d98c8a77df3f4226c6b3c688456145ae27e4986233ead43fd0eb0a1bbb7babff770d9157672a36204d5e757bc3dccba33dcb031278fcf3c3200a052ecfc580e4d330f3d1a073eb82019e0e6c417be433b037a873e3db8518", 0x54c}], 0x2, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x0)

[  471.363388][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  471.579066][T17047] device nr0
 entered promiscuous mode
15:04:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x5)

15:04:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc080aebe, &(0x7f0000000040)=ANY=[])

15:04:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b0000000100ff0714000000450001070000001419001a00120202000e00010020000300"/57, 0x39}], 0x1)

15:04:21 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x4a02)

15:04:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(xchacha20-generic)\x00'}, 0x58)

15:04:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0)

15:04:21 executing program 2:
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gretap\b\x00'}, 0x18)
add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff)

15:04:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x4000800, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, r0, 0x0)

15:04:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc080aebe, &(0x7f0000000040)=ANY=[])

15:04:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:04:21 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000300)="120000001200e71c75aeec3809ef007b1a3f", 0x12, 0x0, 0x0, 0x0)

[  474.403057][T17078] device lo left promiscuous mode
[  474.404945][T12803] usb 6-1: new high-speed USB device number 9 using dummy_hcd
15:04:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc080aebe, &(0x7f0000000040)=ANY=[])

[  474.772123][T12803] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  474.780548][T12803] usb 6-1: config 0 has no interface number 0
[  474.787284][T12803] usb 6-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646
[  474.797616][T12803] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8
[  474.806876][T12803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.862619][T12803] usb 6-1: config 0 descriptor??
[  474.903330][T12803] hub 6-1:0.253: ignoring external hub
[  474.913232][T12803] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.253/input/input20
[  475.582114][T12805] usb 6-1: USB disconnect, device number 9
[  476.231955][ T2931] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  476.592086][ T2931] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  476.600471][ T2931] usb 6-1: config 0 has no interface number 0
[  476.606815][ T2931] usb 6-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646
[  476.617104][ T2931] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8
[  476.626322][ T2931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.635612][ T2931] usb 6-1: config 0 descriptor??
[  476.673035][ T2931] hub 6-1:0.253: ignoring external hub
[  476.682908][ T2931] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.253/input/input21
[  476.992344][T12805] usb 6-1: USB disconnect, device number 10
15:04:24 executing program 2:
r0 = socket(0x848000000015, 0x805, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0)

15:04:24 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
listen(r0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f3e60e8530d5e8a4538f13f2309d46bc"}]}}}}}}}}, 0x0)

15:04:24 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  477.210220][T17107] net_ratelimit: 14 callbacks suppressed
[  477.210265][T17107] MD5 Hash mismatch for [::]:0->[ff02::1]:20000
15:04:28 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x4a02)

15:04:28 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0)

15:04:28 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f000045e000/0x3000)=nil, &(0x7f0000460000/0x4000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
read$FUSE(r0, &(0x7f0000000140), 0xfffffefa)

15:04:28 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2})

15:04:28 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@fadd={0x58, 0x114, 0x3, {{}, 0x0, 0x0}}], 0x58}, 0x0)

15:04:28 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:04:28 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f000045e000/0x3000)=nil, &(0x7f0000460000/0x4000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
read$FUSE(r0, &(0x7f0000000140), 0xfffffefa)

15:04:28 executing program 0:
unshare(0x40400)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ftruncate(r0, 0x0)

15:04:28 executing program 1:
socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c0001"], 0x17}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

15:04:28 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f000045e000/0x3000)=nil, &(0x7f0000460000/0x4000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
read$FUSE(r0, &(0x7f0000000140), 0xfffffefa)

15:04:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x541f, 0x0)

[  481.472030][T12805] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  481.492042][T17145] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  481.500270][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
15:04:28 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f000045e000/0x3000)=nil, &(0x7f0000460000/0x4000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
read$FUSE(r0, &(0x7f0000000140), 0xfffffefa)

[  481.832114][T12805] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  481.840568][T12805] usb 6-1: config 0 has no interface number 0
[  481.846887][T12805] usb 6-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646
[  481.857180][T12805] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8
[  481.866376][T12805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.875710][T12805] usb 6-1: config 0 descriptor??
[  481.913194][T12805] hub 6-1:0.253: ignoring external hub
[  481.923237][T12805] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.253/input/input22
[  482.592236][T12805] usb 6-1: USB disconnect, device number 11
15:04:30 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:04:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
getsockopt$inet_opts(r1, 0x0, 0x30, 0x0, &(0x7f0000000080))

15:04:30 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x4a02)

15:04:30 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0)
write$sndseq(r0, &(0x7f0000000240)=[{0x81, 0x2, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @quote={{0x81, 0x3}}}], 0x60)

15:04:30 executing program 1:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)='/dev/video1\x00')

15:04:30 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x3f, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x6f78})

15:04:30 executing program 4:
r0 = inotify_init()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x4000082)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="c89dc22ab13f1a46eb302322a85647167c3ab0f467ca3849529a39a6e52db2779b065b5b3babde64957c0d927b1964c3e80bb321122dc4229d77872e1219df96cc235ea6da6f2b42c036931a9c61da756f12df1db1f199831b60328445", 0x5d}], 0x1)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000580), 0xa19a)
fcntl$getown(0xffffffffffffffff, 0x9)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f4ffffff1f000000000000400000000000008000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))

15:04:30 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
io_setup(0x100000001, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000002540)=[&(0x7f0000002580)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

15:04:30 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)

15:04:30 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4800000000, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

[  483.323492][T17188] snd_virmidi snd_virmidi.0: control 112:0:0:�:0 is already present
15:04:30 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{}, 'port0\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000013)

[  483.364482][T12805] usb 6-1: new high-speed USB device number 12 using dummy_hcd
15:04:30 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

15:04:30 executing program 2:
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@local]}, {[@multicast2]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0)

[  483.732396][T12805] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  483.740885][T12805] usb 6-1: config 0 has no interface number 0
[  483.747642][T12805] usb 6-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646
[  483.757921][T12805] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8
[  483.767120][T12805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.810318][T12805] usb 6-1: config 0 descriptor??
[  483.854747][T12805] hub 6-1:0.253: ignoring external hub
[  483.865136][T12805] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.253/input/input23
[  484.552245][ T2931] usb 6-1: USB disconnect, device number 12
15:04:32 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae8692ea8b7fbdaea1d11d466a24f97c37ed6e39775cee6e0cb405fbe95dd7c7af3ce54b1817fcc1f57972a11ab8f8a55d02252fa46b778b79a27d34da23d94fc0d6f3f35a1cc645f58562bd2a933e6833aa32f2ab629eeffddb7a488cbe97b79b5773fc0335dc911880ebb83639fe2279da0a60a2ea269f55c728249a38be41ee722aae5a3b000054a3f7cef3856668dcc1a69b72ec7d80d9c0bfa28d7d233835591d393e115011941269eee8135bf529765035e64559ecab5844afe46ac0354c24bff50beac27223f5a9e6ddf0a30901266b324a2999d9574fadde9a5f78e3cb0c6432ff9ea15b62d4bb"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x4a02)

15:04:32 executing program 3:
r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x40000)

15:04:32 executing program 0:
r0 = socket$inet6(0xa, 0x80805, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="8a5eff487343a5b580df2dc7c18cd3b2"}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x12, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8f", 0x33c00}], 0x1}}], 0x2, 0x0)

15:04:32 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}}, 0xe8)

15:04:32 executing program 4:
r0 = inotify_init()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x4000082)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="c89dc22ab13f1a46eb302322a85647167c3ab0f467ca3849529a39a6e52db2779b065b5b3babde64957c0d927b1964c3e80bb321122dc4229d77872e1219df96cc235ea6da6f2b42c036931a9c61da756f12df1db1f199831b60328445", 0x5d}], 0x1)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000580), 0xa19a)
fcntl$getown(0xffffffffffffffff, 0x9)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f4ffffff1f000000000000400000000000008000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))

15:04:32 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{}, 'port0\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000013)

15:04:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_TTL={0x8, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0)

15:04:32 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = dup(r2)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000012ffc)=0x80fb268a)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)

15:04:32 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x80000000004, 0x8000000007}, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xdd, 0x4, 0x5, 0x0, r0}, 0x3c)

[  485.217237][T17244] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
15:04:32 executing program 0:
r0 = socket$nl_xfrm(0x11, 0x3, 0x6)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x800006}, 0x4)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x3e0, &(0x7f00000001c0)}, 0x10)

[  485.262395][T12805] usb 6-1: new high-speed USB device number 13 using dummy_hcd
15:04:32 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000000000001f})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaaae88, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f06263e0f300f01c426f30fc776130f01c5f30fc7b4cd08000000e300c4c3fd01bcfc7ff800002e0f7938f4", 0x2c}], 0x1, 0x0, 0x0, 0x309)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:04:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xf000, 0x0, 0x2, r2, 0x3})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r2, 0xffffffffffffffff})

[  485.622522][T12805] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  485.630923][T12805] usb 6-1: config 0 has no interface number 0
[  485.637255][T12805] usb 6-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646
[  485.647622][T12805] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8
[  485.656936][T12805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.696040][T12805] usb 6-1: config 0 descriptor??
[  485.746237][T12805] hub 6-1:0.253: ignoring external hub
[  485.756541][T12805] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.253/input/input24
[  486.432149][T12805] usb 6-1: USB disconnect, device number 13
15:04:33 executing program 4:
r0 = inotify_init()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x4000082)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="c89dc22ab13f1a46eb302322a85647167c3ab0f467ca3849529a39a6e52db2779b065b5b3babde64957c0d927b1964c3e80bb321122dc4229d77872e1219df96cc235ea6da6f2b42c036931a9c61da756f12df1db1f199831b60328445", 0x5d}], 0x1)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000580), 0xa19a)
fcntl$getown(0xffffffffffffffff, 0x9)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f4ffffff1f000000000000400000000000008000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))

15:04:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0x2}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0)

15:04:33 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000300)='/dev/loop#\x00', 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xfffffeea}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r2, &(0x7f0000000000)=""/17, 0xfffffcd6)

15:04:33 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{}, 'port0\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000013)

15:04:33 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

15:04:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x25, "347192f288c789f5202ddfb23ccc82ee9f3152f91d58ee9d7b7c1674e66b4e56"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

15:04:34 executing program 3:
clone(0xdfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x33, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x15)

15:04:34 executing program 0:
r0 = socket$inet6(0xa, 0x20000000080002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr="80c2a5e403cabe64c21dc16ab25d6b56", 0x0, 0x0, 0x101, 0x1}, 0x20)

15:04:34 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c)

15:04:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r1, 0xfffffbfffff3ffa6, &(0x7f0000000140))

15:04:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x25, "347192f288c789f5202ddfb23ccc82ee9f3152f91d58ee9d7b7c1674e66b4e56"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

15:04:34 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000100000000000000000000000000000000000000e7ccc3d2243450460da74b"], 0x28}}], 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0)

15:04:34 executing program 4:
r0 = inotify_init()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x4000082)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="c89dc22ab13f1a46eb302322a85647167c3ab0f467ca3849529a39a6e52db2779b065b5b3babde64957c0d927b1964c3e80bb321122dc4229d77872e1219df96cc235ea6da6f2b42c036931a9c61da756f12df1db1f199831b60328445", 0x5d}], 0x1)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000580), 0xa19a)
fcntl$getown(0xffffffffffffffff, 0x9)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f4ffffff1f000000000000400000000000008000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))

15:04:34 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c)
write$binfmt_aout(r0, 0x0, 0xff52)

15:04:34 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

15:04:34 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x3d8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x8f, 0xb7, 0x10, 0xea0, 0x6858, 0xb0a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x96, 0x0, 0x3, 0x25, 0x87, 0x6f, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0)

15:04:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x25, "347192f288c789f5202ddfb23ccc82ee9f3152f91d58ee9d7b7c1674e66b4e56"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

15:04:34 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{}, 'port0\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000013)

15:04:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6)
close(r0)

15:04:34 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

15:04:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x25, "347192f288c789f5202ddfb23ccc82ee9f3152f91d58ee9d7b7c1674e66b4e56"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

[  488.064984][ T2931] usb 3-1: new high-speed USB device number 11 using dummy_hcd
15:04:35 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

15:04:35 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

15:04:35 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

[  488.324127][ T2931] usb 3-1: Using ep0 maxpacket: 16
[  488.462316][ T2931] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[  488.470674][ T2931] usb 3-1: config 0 has no interface number 0
[  488.477082][ T2931] usb 3-1: config 0 interface 150 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.488299][ T2931] usb 3-1: config 0 interface 150 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  488.498392][ T2931] usb 3-1: config 0 interface 150 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[  488.508500][ T2931] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice=b0.a2
[  488.517721][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:04:35 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)

15:04:35 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

15:04:35 executing program 5:
unshare(0x8000400)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)

[  488.797398][ T2931] usb 3-1: config 0 descriptor??
[  488.846597][ T2931] oti6858 3-1:0.150: oti6858 converter detected
[  488.878353][ T2931] usb 3-1: oti6858 converter now attached to ttyUSB0
[  489.045907][ T2931] usb 3-1: USB disconnect, device number 11
[  489.055248][ T2931] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  489.065310][ T2931] oti6858 3-1:0.150: device disconnected
[  489.811953][T12805] usb 3-1: new high-speed USB device number 12 using dummy_hcd
15:04:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7d, &(0x7f0000000300)={<r2=>r1, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x10)

15:04:37 executing program 1:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1777, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x28002, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:04:37 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000))

15:04:37 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
sendfile(r2, r3, 0x0, 0x80000002)

15:04:37 executing program 5:
mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
pivot_root(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0)='./file0\x00')

15:04:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

[  490.052826][T12805] usb 3-1: Using ep0 maxpacket: 16
[  490.142880][T12805] usb 3-1: device descriptor read/all, error -71
15:04:37 executing program 5:
r0 = socket$unix(0x1, 0x4000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x20001)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1)

15:04:37 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0)
read$eventfd(r0, &(0x7f0000000340), 0x8)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001040)="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", 0x1000, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r3)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r4 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x1e}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, [0x42], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4100000000000}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x70)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r5})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8)

15:04:37 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001040)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = dup2(r2, r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x8000)
write$P9_RGETLOCK(r3, &(0x7f0000000000)={0x26, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 'vmnet0).'}}, 0x26)

15:04:37 executing program 0:
semop(0x0, &(0x7f0000000080)=[{0x0, 0x6}, {0x4}], 0x2)
semctl$SETALL(0x0, 0x0, 0xf, 0x0)

15:04:37 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
sendfile(r2, r3, 0x0, 0x80000002)

15:04:37 executing program 1:
setrlimit(0x2, &(0x7f0000000040))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x101}, 0x68)

[  490.401423][T17402] QAT: Invalid ioctl
15:04:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4f89}]}]}, 0x24}}, 0x0)

[  490.515210][T17419] QAT: Invalid ioctl
15:04:37 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x40000000000000d0, 0x0, 0x0)

15:04:37 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800110000000000", 0x24)

15:04:37 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0)
read$eventfd(r0, &(0x7f0000000340), 0x8)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001040)="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", 0x1000, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r3)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r4 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x1e}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, [0x42], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4100000000000}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x70)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r5})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8)

[  490.625212][T17424] openvswitch: netlink: Missing key (keys=40, expected=10000000)
15:04:37 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
sendfile(r2, r3, 0x0, 0x80000002)

15:04:37 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='uxer}eth\x1c\x83v\x15\xbd1\x8e$0\x9f\x01\xc1\x03\xf21\x00', 0x0)

15:04:37 executing program 2:
memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x5c}}, 0x0)
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000))
ptrace$setregs(0xf, r0, 0x0, &(0x7f00000002c0)="6fd30f39ce")
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0})

15:04:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$sndseq(r1, &(0x7f0000000140)=[{0x81, 0x6, 0x0, 0x0, @time, {}, {}, @queue}], 0x30)

[  490.863574][T17438] QAT: Invalid ioctl
15:04:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_FLAGS={0x8, 0x10}]]}}}]}, 0x40}}, 0x0)

15:04:38 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
sendfile(r2, r3, 0x0, 0x80000002)

15:04:38 executing program 5:
syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xac14140d}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

15:04:38 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0)
read$eventfd(r0, &(0x7f0000000340), 0x8)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001040)="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", 0x1000, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r3)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r4 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x1e}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, [0x42], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4100000000000}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x70)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r5})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8)

[  491.062672][T17457] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
15:04:38 executing program 0:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/3)

[  491.109047][T17465] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  491.141545][T17466] QAT: Invalid ioctl
15:04:38 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0)
read$eventfd(r0, &(0x7f0000000340), 0x8)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001040)="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", 0x1000, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r3)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r4 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x1e}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, [0x42], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4100000000000}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x70)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r5})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8)

15:04:38 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x59)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10)
close(r0)

15:04:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a0c1000418e00000004fcff", 0x58}], 0x1)

[  491.352671][T17479] QAT: Invalid ioctl
15:04:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="a0"], 0x2}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:04:38 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0xa, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0)

[  491.546380][T17489] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  491.579406][T17490] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
15:04:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080), 0x0)

15:04:38 executing program 4:
socketpair$tipc(0x1e, 0x2000000000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r2 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x1000000000015)
shutdown(r0, 0x2)

15:04:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x9, r1, r2)

15:04:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0)

[  491.713637][T17487] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
15:04:38 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x59)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10)
close(r0)

15:04:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

[  491.853079][T17487] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
15:04:38 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0xb7)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)

15:04:39 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:39 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xc, 0xa, 0x0, "17606e0f2b5c2bc9db5a0f9cc0fbda7643ed12de15d50361a077e48500"})

15:04:39 executing program 3:
unshare(0x20400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@reserved})

15:04:39 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x59)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10)
close(r0)

[  492.132412][ T2931] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  492.150906][T17526] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
15:04:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="1700000069000104bfa9d345e7eb8d99c1ffffff0e0400", 0x17}], 0x1}, 0x0)

[  492.391904][ T2931] usb 3-1: Using ep0 maxpacket: 16
[  492.552121][ T2931] usb 3-1: config index 0 descriptor too short (expected 58986, got 36)
[  492.560657][ T2931] usb 3-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[  492.569808][ T2931] usb 3-1: config 161 has 1 interface, different from the descriptor's value: 201
[  492.585281][ T2931] usb 3-1: config 161 has no interface number 0
[  492.591670][ T2931] usb 3-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[  492.601699][ T2931] usb 3-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[  492.611887][ T2931] usb 3-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[  492.621011][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.902488][ T2931] usb 3-1: GET_CAPABILITIES returned ffffffa0
[  492.908669][ T2931] usbtmc 3-1:161.8: can't read capabilities
[  493.105439][ T2931] usb 3-1: USB disconnect, device number 14
[  493.876021][ T2931] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  494.132182][ T2931] usb 3-1: Using ep0 maxpacket: 16
[  494.262471][ T2931] usb 3-1: config index 0 descriptor too short (expected 58986, got 36)
[  494.270939][ T2931] usb 3-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[  494.280052][ T2931] usb 3-1: config 161 has 1 interface, different from the descriptor's value: 201
[  494.289391][ T2931] usb 3-1: config 161 has no interface number 0
[  494.295820][ T2931] usb 3-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[  494.305769][ T2931] usb 3-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[  494.316219][ T2931] usb 3-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[  494.325898][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.592168][ T2931] usb 3-1: GET_CAPABILITIES returned ffffffe0
[  494.598449][ T2931] usbtmc 3-1:161.8: can't read capabilities
[  494.611338][ T2931] usb 3-1: USB disconnect, device number 15
15:04:41 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000))

15:04:41 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e187a48d30b3", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x24, 0x0, [@guehdr={0x1}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x7, 0x0, 0x0, 0x3}, @guehdr={0x1, 0x0, 0x0, 0x0, 0x2}]}}}}}, 0x0)

15:04:41 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:41 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0xb7)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)

15:04:41 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:41 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x59)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10)
close(r0)

15:04:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7c, 0x0, [0x4b564d04]})

15:04:42 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0)

[  494.973480][T17560] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  494.993280][T17554] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
15:04:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="5d7e062405", 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00', 0x4}, 0x2c)

[  495.062190][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  495.068377][    C1] protocol 88fb is buggy, dev hsr_slave_1
15:04:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:42 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0xb7)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)

15:04:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000071, 0xff00000000008505], [0xc1]})

[  495.306842][T17578] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  495.346469][T17580] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
15:04:42 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0x3c, 0x14, 0x8, 0x5ac, 0x215, 0xa4c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x2, 0x3, 0xf5, 0x2, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x8c, 0x7dd6c6e94727844f}}]}}]}}]}}, 0x0)

15:04:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="5d7e062405", 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00', 0x4}, 0x2c)

15:04:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:04:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup2(r1, r0)
syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')

15:04:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="5d7e062405", 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00', 0x4}, 0x2c)

15:04:42 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0xb7)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)

[  495.757113][T17605] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  495.778982][T17603] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
15:04:42 executing program 3:
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x200000002, 0x0, 0xfffffffffffffffd})

[  495.822622][ T2931] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  495.852338][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  495.858726][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  495.865335][    C0] protocol 88fb is buggy, dev hsr_slave_0
15:04:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="5d7e062405", 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00', 0x4}, 0x2c)

[  495.871670][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  495.878270][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  495.884640][    C0] protocol 88fb is buggy, dev hsr_slave_1
15:04:43 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000005c0)=""/18, 0x12}], 0x5)

15:04:43 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@ipv4={[], [], @local}, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

[  496.092107][ T2931] usb 3-1: Using ep0 maxpacket: 8
15:04:43 executing program 4:
rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
rt_sigtimedwait(&(0x7f00000000c0)={0xfffffffffffffffd}, 0x0, 0x0, 0x8)

[  496.231344][ T2931] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  496.240066][ T2931] usb 3-1: config 0 has no interface number 0
[  496.247511][ T2931] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  496.258802][ T2931] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice=a4.c7
[  496.268023][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.285872][ T2931] usb 3-1: config 0 descriptor??
[  496.542088][ T2931] appletouch 3-1:0.254: Failed to read mode from device.
[  496.549394][ T2931] appletouch: probe of 3-1:0.254 failed with error -5
[  496.559834][ T2931] usb 3-1: USB disconnect, device number 16
[  497.292261][T12805] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  497.531871][T12805] usb 3-1: Using ep0 maxpacket: 8
[  497.652111][T12805] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  497.660431][T12805] usb 3-1: config 0 has no interface number 0
[  497.666789][T12805] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  497.677936][T12805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice=a4.c7
[  497.687117][T12805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.696427][T12805] usb 3-1: config 0 descriptor??
[  497.952074][T12805] appletouch 3-1:0.254: Failed to read mode from device.
[  497.959333][T12805] appletouch: probe of 3-1:0.254 failed with error -5
[  497.969676][T12805] usb 3-1: USB disconnect, device number 17
15:04:45 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0x3c, 0x14, 0x8, 0x5ac, 0x215, 0xa4c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x2, 0x3, 0xf5, 0x2, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x8c, 0x7dd6c6e94727844f}}]}}]}}]}}, 0x0)

15:04:45 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]})

15:04:45 executing program 5:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x9)
remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

15:04:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x1e, &(0x7f0000000000), 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind(0xffffffffffffffff, &(0x7f0000000000)=@hci, 0x74)
r5 = dup2(r0, r2)
dup3(r5, r1, 0x0)

15:04:45 executing program 4:
io_pgetevents(0x0, 0x0, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0xffffffe7})

15:04:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, &(0x7f0000000000), 0x0, 0x0)

15:04:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002680)=""/126, 0x7e}], 0x1}, 0x0)

15:04:45 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x75}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

[  498.519562][T17649] mmap: syz-executor.5 (17649) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
15:04:45 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', 0x0)
mlock(&(0x7f0000185000/0x2000)=nil, 0x2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
sendfile(r0, r2, 0x0, 0x7ffffffd)

15:04:45 executing program 5:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x9)
remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

15:04:45 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017e79608376701001d9c0000000109022400010000000009041e0002a57fd20009050f1f000000000009058351a40ebcca0eb8a035ffa8030000000000702d6a197581afdb325576efa39effa6921a82fcce98e78940c07c6219086c0e31152db5074a502eae72adaea4d63fbf24c9feb4a4e765e5c1d961"], 0x0)

15:04:45 executing program 4:
syz_usb_connect(0x0, 0x368, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000867b3708f71d002535a9000000010902120001000000000904d70000b4fc5d00248d8e25b97f5d9313a66d26eb298868968134a0b4e239f78218"], 0x0)

[  498.784375][T12805] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  499.042013][T12805] usb 3-1: Using ep0 maxpacket: 8
[  499.112028][ T2931] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  499.142820][    T5] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  499.162163][T12805] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  499.170464][T12805] usb 3-1: config 0 has no interface number 0
[  499.176763][T12805] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  499.188043][T12805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice=a4.c7
[  499.197295][T12805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.207717][T12805] usb 3-1: config 0 descriptor??
[  499.382032][ T2931] usb 5-1: Using ep0 maxpacket: 8
[  499.392174][    T5] usb 4-1: Using ep0 maxpacket: 8
[  499.472266][T12805] appletouch 3-1:0.254: Failed to read mode from device.
[  499.479705][T12805] appletouch: probe of 3-1:0.254 failed with error -5
[  499.499250][T12805] usb 3-1: USB disconnect, device number 18
[  499.514396][ T2931] usb 5-1: config 0 has an invalid interface number: 215 but max is 0
[  499.522803][ T2931] usb 5-1: config 0 has no interface number 0
[  499.529010][ T2931] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=a9.35
[  499.538329][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.547509][    T5] usb 4-1: config 0 has an invalid interface number: 30 but max is 0
[  499.555861][    T5] usb 4-1: config 0 has no interface number 0
[  499.562161][    T5] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  499.573238][    T5] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0x83 has an invalid bInterval 188, changing to 7
[  499.584536][    T5] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0x83 has invalid maxpacket 1700, setting to 1024
[  499.595876][    T5] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=9c.1d
[  499.605095][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.618390][ T2931] usb 5-1: config 0 descriptor??
[  499.624544][    T5] usb 4-1: config 0 descriptor??
[  499.670917][    T5] cypress_m8 4-1:0.30: HID->COM RS232 Adapter converter detected
[  499.680372][    T5] cyphidcom ttyUSB0: required endpoint is missing
[  499.730957][ T2931] msi2500 5-1:0.215: Registered as swradio16
[  499.737190][ T2931] msi2500 5-1:0.215: SDR API is still slightly experimental and functionality changes may follow
[  499.864631][ T2931] usb 5-1: USB disconnect, device number 12
[  499.874316][    T5] usb 4-1: USB disconnect, device number 8
[  499.881387][    T5] cypress_m8 4-1:0.30: device disconnected
15:04:47 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0x3c, 0x14, 0x8, 0x5ac, 0x215, 0xa4c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x2, 0x3, 0xf5, 0x2, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x8c, 0x7dd6c6e94727844f}}]}}]}}]}}, 0x0)

15:04:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x20000000000089f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'v\a\x000\x00\xad\xb1\x00\x12^\x00', @ifru_map})
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

15:04:47 executing program 5:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x9)
remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

15:04:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15:04:47 executing program 5:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x9)
remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

15:04:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x49, 0x0, 0x9e], [0xc1]})

15:04:47 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af00, 0x70f000)

[  500.127097][T17703] kvm [17702]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
15:04:47 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/84)

15:04:47 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}, 0x10)

[  500.292094][T12805] usb 3-1: new high-speed USB device number 19 using dummy_hcd
15:04:47 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = socket(0x400000000000010, 0x802, 0x0)
write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0x480)

[  500.532059][T12805] usb 3-1: Using ep0 maxpacket: 8
[  500.641888][T12806] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  500.652770][T12805] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  500.661027][T12805] usb 3-1: config 0 has no interface number 0
[  500.667395][T12805] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  500.671914][ T2931] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  500.678650][T12805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice=a4.c7
[  500.695366][T12805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.705062][T12805] usb 3-1: config 0 descriptor??
[  500.902024][T12806] usb 5-1: Using ep0 maxpacket: 8
[  500.931881][ T2931] usb 4-1: Using ep0 maxpacket: 8
[  500.972334][T12805] appletouch 3-1:0.254: Failed to read mode from device.
[  500.979672][T12805] appletouch: probe of 3-1:0.254 failed with error -5
[  500.995492][T12805] usb 3-1: USB disconnect, device number 19
[  501.052177][T12806] usb 5-1: config 0 has an invalid interface number: 215 but max is 0
[  501.052513][ T2931] usb 4-1: config 0 has an invalid interface number: 30 but max is 0
[  501.060454][T12806] usb 5-1: config 0 has no interface number 0
[  501.060575][T12806] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=a9.35
[  501.068718][ T2931] usb 4-1: config 0 has no interface number 0
[  501.068809][ T2931] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  501.074925][T12806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.079415][T12806] usb 5-1: config 0 descriptor??
[  501.084286][ T2931] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0x83 has an invalid bInterval 188, changing to 7
[  501.084372][ T2931] usb 4-1: config 0 interface 30 altsetting 0 endpoint 0x83 has invalid maxpacket 1700, setting to 1024
[  501.137503][ T2931] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=9c.1d
[  501.146740][ T2931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.157059][ T2931] usb 4-1: config 0 descriptor??
[  501.186385][T12806] msi2500 5-1:0.215: Registered as swradio16
[  501.192879][T12806] msi2500 5-1:0.215: SDR API is still slightly experimental and functionality changes may follow
[  501.209956][ T2931] cypress_m8 4-1:0.30: HID->COM RS232 Adapter converter detected
[  501.219831][ T2931] cyphidcom ttyUSB0: required endpoint is missing
[  501.345303][T12805] usb 5-1: USB disconnect, device number 13
[  501.430160][ T2931] usb 4-1: USB disconnect, device number 9
[  501.437987][ T2931] cypress_m8 4-1:0.30: device disconnected
15:04:48 executing program 3:
r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000a80)='asymmetric\x00', 0x0, &(0x7f00000003c0)="ffd6", 0x2, r0)

15:04:48 executing program 4:
syz_usb_connect(0x0, 0x368, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000867b3708f71d002535a9000000010902120001000000000904d70000b4fc5d00248d8e25b97f5d9313a66d26eb298868968134a0b4e239f78218"], 0x0)

15:04:48 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:04:48 executing program 5:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x200280)
sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0)

15:04:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r1, r0)

15:04:48 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0x3c, 0x14, 0x8, 0x5ac, 0x215, 0xa4c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x2, 0x3, 0xf5, 0x2, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x8c, 0x7dd6c6e94727844f}}]}}]}}]}}, 0x0)

15:04:48 executing program 3:
capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000cc0000))
capset(&(0x7f0000000040)={0x119980330}, &(0x7f0000000080))

15:04:49 executing program 5:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "394ccf04f22ba3fa7d162838c5e304b9"}]}}}}}}}, 0x0)

15:04:49 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)

15:04:49 executing program 1:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_FLOW={0x8, 0x1e, 0x8}]}, 0x2c}}, 0x0)

15:04:49 executing program 5:
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="188d3ea1dabc", [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x6, 0x0, @loopback, @dev, [], "800000e77f000400"}}}}}}}, 0x0)

15:04:49 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:04:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
r1 = syz_open_pts(r0, 0x0)
dup2(r0, r1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd)
read(r1, 0x0, 0x0)

[  502.194260][T12805] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  502.241995][    T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  502.452152][T12805] usb 3-1: Using ep0 maxpacket: 8
[  502.502109][    T5] usb 5-1: Using ep0 maxpacket: 8
[  502.572329][T12805] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  502.580590][T12805] usb 3-1: config 0 has no interface number 0
[  502.586936][T12805] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  502.598124][T12805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice=a4.c7
[  502.607344][T12805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.616517][T12805] usb 3-1: config 0 descriptor??
[  502.652346][    T5] usb 5-1: config 0 has an invalid interface number: 215 but max is 0
[  502.660783][    T5] usb 5-1: config 0 has no interface number 0
[  502.667191][    T5] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=a9.35
[  502.676581][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.686296][    T5] usb 5-1: config 0 descriptor??
[  502.756650][    T5] msi2500 5-1:0.215: Registered as swradio16
[  502.762975][    T5] msi2500 5-1:0.215: SDR API is still slightly experimental and functionality changes may follow
[  502.872265][T12805] appletouch 3-1:0.254: Failed to read mode from device.
[  502.879647][T12805] appletouch: probe of 3-1:0.254 failed with error -5
[  502.890140][T12805] usb 3-1: USB disconnect, device number 20
[  502.939257][    T5] usb 5-1: USB disconnect, device number 14
15:04:50 executing program 4:
syz_usb_connect(0x0, 0x368, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000867b3708f71d002535a9000000010902120001000000000904d70000b4fc5d00248d8e25b97f5d9313a66d26eb298868968134a0b4e239f78218"], 0x0)

15:04:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xff33)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="d80000000000070000000035ff9b8823d673eeef156f04bf4d891900c79e318e51c7725fd84d84f5000000003d4e4bf7239c96a3cc2b35130f196d6d95cf5efa4b3f673046d12e16e55709cdf2ef721100007305e77a11c93f529bb7ead47e35ae8c801750db2f2adb5c773e5ff262302dc3eeac96af8d077bd7d41461489648abe0c4fc91c162bc9e1ac69e50be96ce00ae21112ab71ab04a6420921d32c8ef53cd68413cf1509531a104f24e50e3dd4649c4d04f6f1266a643f94447baabebb321eafcb6a47e77808414bd8f0d027b7e52a32e98dc"], 0xd8}], 0x1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:04:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x362)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00\x00\x00\x00\x00\x00\x1a\x00'}, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x0)
io_setup(0x0, 0x0)
io_setup(0x0, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_submit(0x0, 0xfffffffffffffe90, 0x0)
r4 = dup(r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

15:04:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0)

15:04:50 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

15:04:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

15:04:50 executing program 2:
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]})

15:04:50 executing program 5:
statfs(0x0, 0x0)

15:04:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x0, 0x0, 0x40000084], [0xc1]})

15:04:50 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x764}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1018}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400})

[  503.803082][    T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  503.817742][   T32] audit: type=1326 audit(1570547090.867:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17803 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000
15:04:50 executing program 5:
capset(&(0x7f0000001140)={0x19980330}, &(0x7f00009b3000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_ivalue})

15:04:51 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0})

[  504.082690][    T5] usb 5-1: Using ep0 maxpacket: 8
[  504.212605][    T5] usb 5-1: config 0 has an invalid interface number: 215 but max is 0
[  504.220941][    T5] usb 5-1: config 0 has no interface number 0
[  504.227275][    T5] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=a9.35
[  504.236495][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.246258][    T5] usb 5-1: config 0 descriptor??
[  504.317979][    T5] msi2500 5-1:0.215: Registered as swradio16
[  504.324279][    T5] msi2500 5-1:0.215: SDR API is still slightly experimental and functionality changes may follow
[  504.500271][T12805] usb 5-1: USB disconnect, device number 15
[  504.512978][   T32] audit: type=1326 audit(1570547091.567:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17803 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000
15:04:52 executing program 4:
syz_usb_connect(0x0, 0x368, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000867b3708f71d002535a9000000010902120001000000000904d70000b4fc5d00248d8e25b97f5d9313a66d26eb298868968134a0b4e239f78218"], 0x0)

15:04:52 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdr={{0x12, 0x11, 0x67}}], 0x18}}], 0x1, 0x0)

15:04:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000100)={0xfdffffff}, 0x8)

15:04:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000d0000000100000087e2d415a8999fca00000000000000000000000000000000000000000000000001"])

15:04:52 executing program 3:
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000600)}], 0x1)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246)
dup3(r0, r1, 0x0)

15:04:52 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x3700b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

15:04:52 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1)
sigaltstack(&(0x7f0000ade000/0x3000)=nil, 0x0)

15:04:52 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x37, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

15:04:52 executing program 0:
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7fff}, 0x8)
sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}, 0x0)

15:04:52 executing program 5:
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)='\n')
mlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1010, 0x3, &(0x7f0000ffc000/0x1000)=nil)

15:04:52 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001100), 0x1000)
socket$key(0xf, 0x3, 0x2)
read$FUSE(r0, 0x0, 0x0)

[  505.382694][T12805] usb 5-1: new high-speed USB device number 16 using dummy_hcd
15:04:52 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x3, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_config_ext={0x43a, 0x2}, 0xa00, 0x2, 0x200, 0x5, 0x1, 0x1b000, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000100))
r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2)
write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800060c0045005, &(0x7f0000000000)=0x40000)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x504e0819eee971e9, @empty, 0x4e20, 0x4, 'fo\x00', 0x64cbce64ffb64e2b, 0x4, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x8, 0x4}}, 0x44)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xf32)
unshare(0x40000000)
syz_genetlink_get_family_id$tipc2(0x0)
r3 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x5, 0x4}}, 0x29)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x4, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30)
write$USERIO_CMD_REGISTER(r5, &(0x7f00000002c0)={0x0, 0x7}, 0x2)

[  505.610846][T17880] IPVS: ftp: loaded support on port[0] = 21
[  505.624465][T12805] usb 5-1: Using ep0 maxpacket: 8
[  505.744236][T12805] usb 5-1: config 0 has an invalid interface number: 215 but max is 0
[  505.752635][T12805] usb 5-1: config 0 has no interface number 0
[  505.758832][T12805] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=a9.35
[  505.768115][T12805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.781534][T12805] usb 5-1: config 0 descriptor??
[  505.894010][T12805] msi2500 5-1:0.215: Registered as swradio16
[  505.900192][T12805] msi2500 5-1:0.215: SDR API is still slightly experimental and functionality changes may follow
[  506.029944][T17880] IPVS: ftp: loaded support on port[0] = 21
[  506.039869][T12805] usb 5-1: USB disconnect, device number 16
15:04:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
unshare(0x40400)
ioctl$BLKPG(r0, 0x125d, 0x0)

15:04:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x182)
r1 = semget(0x1, 0x0, 0x4)
semctl$IPC_STAT(r1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x2000005)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

15:04:53 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xff71}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

15:04:53 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x3, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_config_ext={0x43a, 0x2}, 0xa00, 0x2, 0x200, 0x5, 0x1, 0x1b000, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000100))
r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2)
write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800060c0045005, &(0x7f0000000000)=0x40000)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x504e0819eee971e9, @empty, 0x4e20, 0x4, 'fo\x00', 0x64cbce64ffb64e2b, 0x4, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x8, 0x4}}, 0x44)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xf32)
unshare(0x40000000)
syz_genetlink_get_family_id$tipc2(0x0)
r3 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x5, 0x4}}, 0x29)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x4, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30)
write$USERIO_CMD_REGISTER(r5, &(0x7f00000002c0)={0x0, 0x7}, 0x2)

15:04:53 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x7}}, 0xb8}}, 0x0)

15:04:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
unshare(0x40400)
ioctl$BLKPG(r0, 0x125d, 0x0)

[  506.753062][T17901] IPVS: ftp: loaded support on port[0] = 21
15:04:53 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x1000}, 0x18)

15:04:53 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x55, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x55, 0x0, 0x0, {}, {}, @ramp})

15:04:54 executing program 4:
r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'})
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x8}, 0x14}}, 0x0)
write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7})

15:04:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x182)
r1 = semget(0x1, 0x0, 0x4)
semctl$IPC_STAT(r1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x2000005)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

15:04:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
unshare(0x40400)
ioctl$BLKPG(r0, 0x125d, 0x0)

[  507.262240][T12805] usb 3-1: new high-speed USB device number 21 using dummy_hcd
15:04:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
unshare(0x40400)
ioctl$BLKPG(r0, 0x125d, 0x0)

[  507.602243][T12805] usb 3-1: Using ep0 maxpacket: 8
15:04:54 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfb3, 0x0, 0x0, 0x0})

15:04:54 executing program 0:
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000002000/0x3000)=nil], &(0x7f0000001040), 0x0, 0x0)

[  507.722161][T12805] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[  507.730467][T12805] usb 3-1: config 0 has no interface number 0
[  507.737103][T12805] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[  507.748346][T12805] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  507.759742][T12805] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[  507.771318][T12805] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  507.782634][T12805] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[  507.796103][T12805] usb 3-1: config 0 interface 164 has no altsetting 0
[  507.875451][T17953] vhci_hcd: vhci_hub_control:348: invalid port number 179
[  507.882918][T17953] vhci_hcd: vhci_hub_control:628: default hub control req: 0000 v0000 i00b3 l0
15:04:55 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002b008163e45ae087000000000d0f0000000000bc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0)

15:04:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x182)
r1 = semget(0x1, 0x0, 0x4)
semctl$IPC_STAT(r1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x2000005)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

15:04:55 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x8000000000141040, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0x4, 0x63, 0x0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1)

15:04:55 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x3, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_config_ext={0x43a, 0x2}, 0xa00, 0x2, 0x200, 0x5, 0x1, 0x1b000, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000100))
r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2)
write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800060c0045005, &(0x7f0000000000)=0x40000)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x504e0819eee971e9, @empty, 0x4e20, 0x4, 'fo\x00', 0x64cbce64ffb64e2b, 0x4, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x8, 0x4}}, 0x44)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xf32)
unshare(0x40000000)
syz_genetlink_get_family_id$tipc2(0x0)
r3 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x5, 0x4}}, 0x29)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x4, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30)
write$USERIO_CMD_REGISTER(r5, &(0x7f00000002c0)={0x0, 0x7}, 0x2)

15:04:55 executing program 4:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, 0x0, 0x1e)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open$dir(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0)

[  507.992219][T12805] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[  508.001462][T12805] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[  508.010256][T12805] usb 3-1: Product: syz
[  508.084681][T12805] usb 3-1: config 0 descriptor??
[  508.179316][T17958] IPVS: ftp: loaded support on port[0] = 21
[  508.842236][T12805] iforce 3-1:0.164: usb_submit_urb failed: -110
[  508.862207][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.882133][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.902511][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.922096][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.942300][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.962214][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.982309][T12805] iforce 3-1:0.164: usb_submit_urb failed: -32
[  508.989706][T12805] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input30
[  509.136977][ T2931] usb 3-1: USB disconnect, device number 21
[  509.143088][    C1] iforce 3-1:0.164: iforce_usb_irq - usb_submit_urb failed with result -19
[  509.972002][ T2931] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  510.242188][ T2931] usb 3-1: Using ep0 maxpacket: 8
[  510.402106][ T2931] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[  510.410445][ T2931] usb 3-1: config 0 has no interface number 0
[  510.418068][ T2931] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[  510.429391][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  510.440708][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[  510.452244][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  510.463540][ T2931] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[  510.476970][ T2931] usb 3-1: config 0 interface 164 has no altsetting 0
[  510.562214][ T2931] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[  510.571420][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[  510.579810][ T2931] usb 3-1: Product: syz
[  510.593724][ T2931] usb 3-1: config 0 descriptor??
15:04:57 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x55, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x55, 0x0, 0x0, {}, {}, @ramp})

15:04:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x182)
r1 = semget(0x1, 0x0, 0x4)
semctl$IPC_STAT(r1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x2000005)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

15:04:57 executing program 0:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
clock_gettime(0x0, &(0x7f00000001c0))
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0)

15:04:57 executing program 3:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x68, 0x81}}}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xcc, &(0x7f00000002c0)=@string={0xcc, 0x3, "68a2146ad779032f6bc6680fa7817a3ccc84a12153d8a39b2fd99f969683ddfb167aa999d322350159efeeca426ab502f60a979b5abc9ce856d3e6812fc6696aaafc672b57a1d4b05702de27d75465ca98cf09e82ca99ccf1b10cbdb3fd71657544116feb23391e0a6e10352608da07a3ac580c946a4f264da826f3744fd6efc3012b5bd0a141d802396d15d11a87ba2dc15213000eadbcae4c1d97f931f9f2e9d9b3d8139ce52a800118ddd31b564920745a45d191836284f5b79f85d775764849c0feed6df6edad38f"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:04:57 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x3, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_config_ext={0x43a, 0x2}, 0xa00, 0x2, 0x200, 0x5, 0x1, 0x1b000, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000100))
r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2)
write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800060c0045005, &(0x7f0000000000)=0x40000)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x504e0819eee971e9, @empty, 0x4e20, 0x4, 'fo\x00', 0x64cbce64ffb64e2b, 0x4, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x8, 0x4}}, 0x44)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0xf32)
unshare(0x40000000)
syz_genetlink_get_family_id$tipc2(0x0)
r3 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x5, 0x4}}, 0x29)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x4, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30)
write$USERIO_CMD_REGISTER(r5, &(0x7f00000002c0)={0x0, 0x7}, 0x2)

15:04:57 executing program 4:
r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0)
write(r0, &(0x7f0000000180)="a4e20c56e9ea6d534f4b8eb4cf56330c57aa5037afa23c8380207d3820d787cce91e36363238c10a19eccbfadbb4d3d79a224aef08c3986138569e2ada8966166e64093240c7f5931bd3a6ec326f6582a6a6d62301b799ed5273972cfc54950289bdfd204c66d88694d1cea15ff8c657341e86b5af214f0300c12d3bfc4984b1b75dabc48678eddc", 0x88)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0)

[  510.712086][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.742075][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.762080][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.784617][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.817363][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.842955][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.862462][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
15:04:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x3, 0x30}]]}}}]}, 0x40}}, 0x0)

[  510.888714][T17989] IPVS: ftp: loaded support on port[0] = 21
[  510.924008][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  510.980898][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.002780][T18002] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  511.017792][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.044256][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.064056][    T5] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  511.100357][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.130240][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.156601][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.209386][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
15:04:58 executing program 4:
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="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", 0x62f4)

[  511.256611][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.296746][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.334825][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.345306][T18009] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  511.376873][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
15:04:58 executing program 4:
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="fc0000001c000705ab092506b86807000aab087a0200000001000993210001c0f0020000000000010000000000039815fa2c1ec28648000000b9d95662070000bc000c00f0036cdf0d11512fd633d440000400600720d3d5bbc91a3e2e80772c05dafd5a32e273fc83ab82d718f74cec18444ef90d475ef8b29d3ef3d92c83170e5bba2e177312e081bea05d44021e8ca062914a463ae4f5df77bc4cb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0734ba3dffe5f5aa1dd1890058a10000c880ac801fe4af000041f0d48f6f0000080548deac279cc4848e3825924509260e26429fbe11017d627403050efaddd3254395c500", 0x62f4)

[  511.417112][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  511.424522][ T2931] input input31: Timeout waiting for response from device.
[  511.442469][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 104, setting to 64
15:04:58 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x22)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000080)=@newlink={0x13c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x114, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x104, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @empty}, @gre_common_policy=[@IFLA_GRE_TOS={0x8, 0x9, 0x7}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_TTL={0x8, 0x8, 0x111b}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0xffffffff}, @IFLA_GRE_LINK={0x8}], @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x633}, @IFLA_GRE_ERSPAN_HWID={0x8}, @IFLA_GRE_ERSPAN_DIR={0x8}], @IFLA_GRE_REMOTE={0x1d6, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x5}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0xff}], @gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]]}}}, @IFLA_MASTER={0x8}]}, 0x13c}}, 0x0)

[  511.536650][ T2931] usb 3-1: USB disconnect, device number 22
[  511.551386][    T5] usb 4-1: language id specifier not provided by device, defaulting to English
[  511.596200][T18016] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  511.604662][T18016] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  511.612938][T18016] netlink: 'syz-executor.1': attribute type 24 has an invalid length.
[  511.621142][T18016] netlink: 'syz-executor.1': attribute type 23 has an invalid length.
[  511.629655][T18016] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
15:04:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

[  511.690834][T18017] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  511.735132][T18022] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  511.743675][T18022] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  511.751927][T18022] netlink: 'syz-executor.1': attribute type 24 has an invalid length.
[  511.760312][T18022] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
15:04:58 executing program 4:
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="fc0000001c000705ab092506b86807000aab087a0200000001000993210001c0f0020000000000010000000000039815fa2c1ec28648000000b9d95662070000bc000c00f0036cdf0d11512fd633d440000400600720d3d5bbc91a3e2e80772c05dafd5a32e273fc83ab82d718f74cec18444ef90d475ef8b29d3ef3d92c83170e5bba2e177312e081bea05d44021e8ca062914a463ae4f5df77bc4cb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0734ba3dffe5f5aa1dd1890058a10000c880ac801fe4af000041f0d48f6f0000080548deac279cc4848e3825924509260e26429fbe11017d627403050efaddd3254395c500", 0x62f4)

[  512.042182][ T2931] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  512.192190][    T5] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40
[  512.201317][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.209609][    T5] usb 4-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄迓
[  512.292075][ T2931] usb 3-1: Using ep0 maxpacket: 8
[  512.412143][ T2931] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[  512.420507][ T2931] usb 3-1: config 0 has no interface number 0
[  512.426815][ T2931] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[  512.438141][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  512.449520][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[  512.461608][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  512.472907][ T2931] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[  512.486540][ T2931] usb 3-1: config 0 interface 164 has no altsetting 0
[  512.592611][    T5] usbhid 4-1:1.0: can't add hid device: -22
[  512.598898][    T5] usbhid: probe of 4-1:1.0 failed with error -22
[  512.607891][ T2931] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[  512.617187][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[  512.625598][ T2931] usb 3-1: Product: syz
[  512.631611][    T5] usb 4-1: USB disconnect, device number 10
[  512.640674][ T2931] usb 3-1: config 0 descriptor??
[  512.812118][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -110
[  512.832170][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.853054][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.872198][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.902378][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.922015][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.952153][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.972124][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  512.992462][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  513.012191][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  513.032404][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  513.053064][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.082069][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.112996][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.142061][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.172249][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.202389][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.222080][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.252240][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.272061][    T5] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  513.279913][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -71
[  513.286296][ T2931] input input32: Timeout waiting for response from device.
[  513.296924][ T2931] usb 3-1: USB disconnect, device number 23
15:05:00 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x55, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x55, 0x0, 0x0, {}, {}, @ramp})

15:05:00 executing program 5:
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="20f314699852c7f81da57684a1672cc894e9197132408a26eac71997d08187d029", 0x21}], 0x1}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})

15:05:00 executing program 1:
unshare(0x400)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20})

[  513.642265][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 104, setting to 64
[  513.692568][    T5] usb 4-1: language id specifier not provided by device, defaulting to English
[  513.942236][ T2931] usb 3-1: new high-speed USB device number 24 using dummy_hcd
15:05:01 executing program 3:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x68, 0x81}}}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xcc, &(0x7f00000002c0)=@string={0xcc, 0x3, "68a2146ad779032f6bc6680fa7817a3ccc84a12153d8a39b2fd99f969683ddfb167aa999d322350159efeeca426ab502f60a979b5abc9ce856d3e6812fc6696aaafc672b57a1d4b05702de27d75465ca98cf09e82ca99ccf1b10cbdb3fd71657544116feb23391e0a6e10352608da07a3ac580c946a4f264da826f3744fd6efc3012b5bd0a141d802396d15d11a87ba2dc15213000eadbcae4c1d97f931f9f2e9d9b3d8139ce52a800118ddd31b564920745a45d191836284f5b79f85d775764849c0feed6df6edad38f"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:05:01 executing program 4:
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="fc0000001c000705ab092506b86807000aab087a0200000001000993210001c0f0020000000000010000000000039815fa2c1ec28648000000b9d95662070000bc000c00f0036cdf0d11512fd633d440000400600720d3d5bbc91a3e2e80772c05dafd5a32e273fc83ab82d718f74cec18444ef90d475ef8b29d3ef3d92c83170e5bba2e177312e081bea05d44021e8ca062914a463ae4f5df77bc4cb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0734ba3dffe5f5aa1dd1890058a10000c880ac801fe4af000041f0d48f6f0000080548deac279cc4848e3825924509260e26429fbe11017d627403050efaddd3254395c500", 0x62f4)

15:05:01 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3e, 0x59, 0x0, {0x1, @sdr={0x32314d48, 0x8}}})
r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x802)
r2 = dup(r1)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/9, 0x9}], 0x1)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)

15:05:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x8001, 0x0, 0x9, 0x3f}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x4, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2120400}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x104, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb8db}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffc70e}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x104}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000008c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfb], 0x5000})
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:05:01 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl(r0, 0x4001000008912, &(0x7f0000000580)="0800b5056c0bcfe87b0071")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x21)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000001c0), &(0x7f00000001c0)=""/108}, 0x48)

[  514.082578][    T5] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40
[  514.092079][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
15:05:01 executing program 0:
bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x5, 0x6, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x5f, 0x5f, 0x854d]}, 0x26)

15:05:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0x1}, [@typed={0x14, 0x6, @ipv6=@empty}]}, 0x28}}, 0x0)

[  514.153446][    T5] usb 4-1: can't set config #1, error -71
[  514.190606][    T5] usb 4-1: USB disconnect, device number 11
[  514.197760][ T2931] usb 3-1: Using ep0 maxpacket: 8
15:05:01 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef)

[  514.334157][ T2931] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[  514.342654][ T2931] usb 3-1: config 0 has no interface number 0
[  514.348893][ T2931] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[  514.360205][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  514.371599][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
15:05:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5", 0x8)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x0}, 0x10)

[  514.383185][ T2931] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  514.394626][ T2931] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[  514.408577][ T2931] usb 3-1: config 0 interface 164 has no altsetting 0
[  514.423029][T18068] device nr0
 entered promiscuous mode
[  514.448649][T18071] sock: sock_set_timeout: `syz-executor.0' (pid 18071) tries to set negative timeout
[  514.460731][T18072] sock: sock_set_timeout: `syz-executor.0' (pid 18072) tries to set negative timeout
[  514.573816][ T2931] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[  514.583070][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[  514.591312][ T2931] usb 3-1: Product: syz
[  514.604702][ T2931] usb 3-1: config 0 descriptor??
[  514.658620][T18069] device nr0
 entered promiscuous mode
[  514.672097][    T5] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  514.787700][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -110
[  514.812578][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  514.832689][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  514.862301][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.032365][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -110
[  515.062268][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 104, setting to 64
[  515.074055][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.092453][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.112188][    T5] usb 4-1: language id specifier not provided by device, defaulting to English
[  515.121507][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.152565][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.172122][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.192279][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.212465][ T2931] iforce 3-1:0.164: usb_submit_urb failed: -32
[  515.220311][ T2931] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input33
[  515.325339][ T2931] usb 3-1: USB disconnect, device number 24
[  515.642217][    T5] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40
[  515.651387][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.659609][    T5] usb 4-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄迓
15:05:02 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x55, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x55, 0x0, 0x0, {}, {}, @ramp})

15:05:02 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x1, 0x2c6})

15:05:02 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f000000a700)={0x0, 0x8, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '0:,Y'}, 0x0, 0x0, @fd, 0x4})

[  516.022959][    T5] usbhid 4-1:1.0: can't add hid device: -22
[  516.029136][    T5] usbhid: probe of 4-1:1.0 failed with error -22
[  516.038077][    T5] usb 4-1: USB disconnect, device number 12
[  516.202029][   T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd
15:05:03 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7510bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xffffffffffffffaf)

15:05:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f00000000c0)="1f0000000104ff007d4354c007110040f305010008000100010423daffdf00", 0x1f)
write(r1, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000010d10300cf", 0x1f)

15:05:03 executing program 3:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x68, 0x81}}}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xcc, &(0x7f00000002c0)=@string={0xcc, 0x3, "68a2146ad779032f6bc6680fa7817a3ccc84a12153d8a39b2fd99f969683ddfb167aa999d322350159efeeca426ab502f60a979b5abc9ce856d3e6812fc6696aaafc672b57a1d4b05702de27d75465ca98cf09e82ca99ccf1b10cbdb3fd71657544116feb23391e0a6e10352608da07a3ac580c946a4f264da826f3744fd6efc3012b5bd0a141d802396d15d11a87ba2dc15213000eadbcae4c1d97f931f9f2e9d9b3d8139ce52a800118ddd31b564920745a45d191836284f5b79f85d775764849c0feed6df6edad38f"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:05:03 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 'syo0\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00'})

15:05:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000))

[  516.442062][   T31] usb 3-1: Using ep0 maxpacket: 8
[  516.517697][T18096] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  516.545169][T18096] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  516.599800][   T31] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[  516.608464][   T31] usb 3-1: config 0 has no interface number 0
[  516.614739][   T31] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[  516.625946][   T31] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  516.637307][   T31] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
15:05:03 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x1, 0x8000, 0xfffffffffffffffc})

15:05:03 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

15:05:03 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r1, &(0x7f0000001680)=[{&(0x7f0000000500)="b9bf9fe25a7f4b3f884d8b0e6a4d3d1eedb6a2ac99cf6c50ce61955d816121b362afaf7eab47ada06f8c445cc72f0ebab2a860d9caf8090c976e637cd9a2dca05c933d306b2c9cb31022c72077f5e50257a8c259f84397b55ecb36424a4629a85d913b91c60cd04c5915061cc7b5187cfac52f70ba49eefd2a6938ce3cda712d0af8308eb0e4a669ff8d2730b3d07bab374781240b98b195cce5307cde96d940b5f43c20259b9136402f643697aad7074af0a537210cbbf9a77d8fe34adac8e9125b2df20a842e38b991f1b53cae7a1bedbeba87a514a2ebd40c49e889d7579ff9b07e0292d7a9f759f48e6d44c456f70c8c6120ced4b973f0be7563470fc224c61e2aebd6dc8df9da4d6be2f0866aa9a3bccb03338cfc52c8e02b0ca3e45757b8b0f8e35fda412e2b2717976633a82aadd3568a8926d0ef6fa9bba1b43123b867631c3a9d77e7628ccfebbbb078e6140378c823f09fc935e3ed6f4ac478e75eaf8bc15ee0f4c027d321709747c93e2b95b6b3d739468bbd0f9d3d4ed564dd2cad12ded7da64bbdd45a2ba48de07a13397395d3015e9a932ffbd03e3ba8a7af1470da2b1932b09eb1d59850e02802936f93db63f41fbb23906db1bf7f650918f39bded57a2a077b7357dce9c2d37dd376147c93f49a99970566693a46b088f14788ba15b7c98102445320f1d554398f506dfbe7ddea7639a5080ef40c900a1d08e8be6be1e26a3fd2356f75fd5222107c316c57e9c96ce6109c4a3c2647c6f3caf3dab2ee7c6eb037816dc3e945b70c311bd6ddca7b3092c0de783789240e827e1e39e21e17f04f526646939b440c763fc84823c8b649395a1023cf509a2119fd4a35b22a23bde51836ffcd9980197d51552385b2d4d458e89687ef1f8697ca0db44355f1fe7e6fb4a53f9047de41f8fd40eeca8cfe471524ca81e93eabba8fec7d569c95db29dba55c7dd7bd99f8cd2990a669bf42ae167b6549bcf542b2987c835ce7c4b11480b4f0cf7e3ac0ecc8b55692ea7a1919ea2206e4c0a779e65e82f92d57a23ef1399fd7e964775e6b3c65cfab0adf32d2edd0976afeeb42e844de942ffe3196fdda4c9b4b787eaa008ecc133c308cada204a7ab239413a9d0c3363f109d003cbce87f3fa7adf70df975cfa69c550438ab2bf10c1ff6515ebfa6a7490c0ffb450aa62209b54c73de837f5b443036cf59bf2f4b49cc8b04877648e82266f5918195e6ee30ce42c7c734bb55ba0a68eaf9f8da732ae7b9fbdef594f850e3597366f7b70b5a000e425a1942a7432cfbf86efd755a505f4ad35a19d87f2f0488a20b747fe223763ce0cd0d0ab778ff85a6926e780a7c412a2f3c0fe3c5e5b68478fb552b48927ebe3999257be3e7b0d08c3d7cf57a88c5acd48893b7a9e3440090c5c6fe344dab62b1219d2fd218cc2ea63cd221257016150d2efd7fbd3feab43d8fd184b368f84b16fde657e8a9f8241dfcca9e37fe5acadd77b3041aaae8a66a8429155c7484f677917d56d7a2c3053799d3b25ed879fe5e8fff410e89cc541e954aef7f21fdf54a9ade00049320d9ea717eafae310dc1ec8deb9c5819a0122939998164babfb9dd3697f28a548a50cefe77a673286ce49a9ebb0faf307cf8e549aa305be0eed10fa2eb26a0cf2eadc4b3f9c8958381993250dc9750d1253b03e8ae4fdba0e3ea9eefd04990b752dd4efb44de8005e2d6c701e70a44ed2b29a9548786befa49daaa38b95138e96b79694d543db1d0718e44d1533320273da2cefaad319aaa191d8b167190f898bdd10ed7dafbb8b626ea1e6ba1899d28b561f9c008777d9357c3bf05fc271053a99a06dba65cfa0d25ed8dd98662db3591cce5327d7f9f077c858bba40785abd8552cf847e4b1c31453c705deff04ff50a754428c3639a483ce14cc9cc5500b984ab96f1731b86da10d94822dfbca434916270d84bbb4af9b97c6bfd0cb7af844a2ccfdb3e313c985ec353bdf9de219ae18a8d7be6e6d62ad663f284048ab64b8571218065ab3c7bd7302fbf59826faccf29f2df5a2bd25ad00567b5d037db9117f494c317f989a83bf8720538b86c07ace46ed4d2230f5e48ba9dfbcd4cc45f561613a22efaa1a6b435a99fdda1a21c42eed061045f87b1eec3e86e13fa764d232601bc7ff781e9f4fc67a4fee0c00d116fdc7347bd1f2ef317b72b6668f28cae5bf4684812f3bebd770fbee9c21cd6e812955bf6eeef68cb6f76b3456a4a8c061dfa6227e80854a4411e2f61ea6b9ebe26288672a288c7a3f65e1d7dc2191c23b0b21659f8e3a06d4a104a497994fb7dc23b688636747f1537d72e8ac8669c58af5f3b7683a995b486f42ef12752983ab4b0e8e08ab5c18ec664d114d180f4901924613e45bf401934f3e1d5130472afa4166c7fe4cd2a6111db0dcf6e259086b99b618f086cd01cbc83535228418ba3413e2e448ca43952192f19f7b30ce6687be2d67b454b6c32d34958fb7c7d31483b6fcdd27aeb8077b3e894c68e70d0ca0792ca29a9e3194b1124c4f574db9b88271eb00c4ba875d483dc47fe9fa812da505b1141d7c301f5ca299e25bb462da657a07bef071d4d9957afb91022ab8840416fe999b8cf60f71030d9e67591883ec5089793b29211623f678fb06a83196fccfdf3822b68bfb1b2520f970aeace7e1d80ba9dd78c3b741c500c7169dd3e9574add1c58043aa6ca3015d9155fdf8694dd1dcbb058b162b404134975bd4e7fafa392f340ccbfafe0f2454d154d69b69e441f7d4d88dfc3165feb046e5dc992e36a5897806beee03a944aaca73a2b6f30791e72cca02165c88b9800b01bc9bb8731c6c5f8115030cb5d728e8194dfe70f5f7c9bd517021d035675dd3b1c802b279cbc5690ee6c2c0a7734217363b400abce6fcf5fbf4b31ea2d6f4fcc105e3901cfa36a995e3d47e469904f06a97550739352d4441260bcc93c5f6dafa1a9c43c9f9cf7680adc17342f78d6ac24efe6720a27449116aae34df7e44d45cc2b4be4081789f25ac971dd9d45670706794794c3045b0a14a5bc768ddc8689997891a7275d8dd918649a273cb49ce8e30c5513ad0a4c0b4f90f19d35656b7dbe2040663a009c4b36a3f67397fb32f02ea930e1380abd1bcd46ff15c1c9216ea60fa4c1bfaabe0b878eb3641b03839dbe14a6b59af3bcffc75d415dad7cf6321000b665243086ac65fc69d40a7aab76d99f750696c0cf71542a3c96186ebfa790dee179557260f7ca19956c4174c70e82477b6c8d64bba363957e49ba542b04cc6c1f9962e660552dc117fa206292d4e5cb924ce3b3eb35ddf45fd9d5080c80d510fc0ea1fb0729fbd68ef15ecc173583b52d7a397dc4a621115856bd7be1bdb9308f609fadc1e2c3ab5cf59a463b9aff84aebccf09dc447ab712afa21c2e6289341f4d46d821d73b33015f0f70373beb74dd0bafe64dfeadf2fa1522cdb6c7a068106b1246a5d8015f01f4abd3ccc595410d91f0b33cc56d4dc6ecec9201da22c5a500c1712c73a7c8622535bb3acf1a8ef17ccd698737ce3fcf7865e2192171a76cf093b74bc03a6e2772728692561197949482efe1df5ec7b16ee754ef68c4594f189989009c30040a2edb65830c10477c2698d2bfe8d68d2ff45845e224d7152ae5c525e4269144d0129467fb65303c9d99b7d4b301769289a2932013ad9ea052c413a9abfc850dbfbc4c648aa060bc1f5c8b3cd01e2b19d9e5673c0733b5aeddca378f0eb3124e1cd08adfee4472b9dc5dcf6e0c802ef5968964e9134cf938857d5f3aa33b82c19c7b40f222d8d7daa8b39f1a1c3338f8fd3ebe7d1fd8e5afb07da8a64f57dbc526298df979dab686da1b9356d8bc83e5adf9d9f81899f0e02616a97aa6968fde2b6432539a08546a5969041d7c4118643fef01bc44d348ab3619d95a439f9b68660c2c01cbfd2dc6bb19fadfc29a502b0b5cd8de04507751fdce951e3b1882553b486919451e12f53b882356a5cee2301accf8fdd32a1cb4083cd056de47768af14bf8dce3a0397dcbc5d88125ac83d3a27e8f8b990c65e6a2c1ca3e8119fee066941d3e97ed4d13a7e884e31a0027c1a4d72a0b0b1b7e413674ceeb339a37c0851b592f4a8a7a301b6b2ef23372499098d724b6e3bbb192533e4430c3394245f0b6ecf6bef9178b8569314b6f802fe19a71844c73f7e8d4e849aea643180ac7e95b0ad5b2a28e122aeafb6d4d7169341be3a46fb6330b46e67ac954399c67dfda47401593181d9e9df61f85be204ea18ecd8160b5243d73b79f4126f4b8751ac34f5f39f7304726b7e5ff2759f092957d89dae3c96b653e32cd60a0b8c4f95220b730a5a39a9284e3ed82d1e4a865494127db6bf367e3b7f6fcf950c94c964455508732cceeb90e31d5a5578eac864603562d12fd5448a56e5e7c24425f1aab46150522e2aaa3fa7b25b1ab1de0e1af4e4de90da75c469c2c4072857f4b0432f0803dae181b62fa68ce478ed40a2867b4de603b53229fa516e1901218c4b61aa32d3e201b13f84e2b0b13f7313acccbe883d7ffa45c996a509912dd47f48eef9ee7d50fedd3b4083074857ec56e31e3ac5197110968516cdc61790a215fbf8604a6c393b429ede8a4b6e8d5d56792fd693f3054618c51a21cfd31c3c141e1ea1dcfbfa4398dfee52756ba5d5a2db0725882cc7f12dce0f8a4608b4f7e35b6b8bf0b8253be7ff2405ac524395c3ca9a74bf9af493e947bb99a8c672967748791ad737a767347d13d20fb197691e2b1d634570ccc06149aef270b30e8f72915ed523058f90f2b1a03bf693e3ebe938a26081ef3097259fca0c91043ecc4a0351cf8b7672e2bb95181244f971753627b1efee87d10d935d06b37382525d64b9519b2adba44dc8da06a6aee62b5be9c98589833b8d72c81fa9a0ff64994102f1a326005c16eecf16f4153d47c2cdd6fb633c7c8f2e02b6b15ea7cfe5fb919fc2eb7fe0680e29b84986cd70a53ac7c6af0575d295da64f65bc4127e8e6ac0f17ad82b45536ef4d7918d60b4d48a043f1237c5ba21b329c2261e72ed5fdfd7664f49acd63577f22a1ef0ae29fced8c0e869d29c647b3987cac6d9bb23195dd5c41b84ee8b0f42615b3218afba122649b515155e2ed4309ab0bb88dd62210e2e06fd7425949003fc4e3b51d427328ad989bf93762c132164756a4dd12009f702b8e5aadd38c397a405dddf8e4ce1289529e97743d3225b950f70487d1e9f6064eaa7d16f861b4afe92430141dc8fb3d15c919870e0bfb89824330ec9e613a415d847de6d9d559a82d07b76c0c1a16774f1df69804a1268ca338d9c82c559fb78e2a1a7b404770bfc8e667db9c48d33c44164e3955f42d4053a29af4d681d6b71328493849b4a78ba48b3e74c3ae018e7dbe395058b55da4be7e3686f1e2a9095d2e0c16331b10806502a915bb454c26ba748a1eb657461e7730dcc6b5caaef387f6e6e795ff72f6375b26a8fa4f9eec567c284c41fdf71cfb2fe4f16e07ed3672ba033e41ed20ebe9896e2de97bf7b3bde7956f7f113a2e0dc46dfb26076b1bf8f417e9ef980d2a156b6c412f5596633ac6031a48c82022b1fbe786cf575499c1cba96ebbe4996a2674d91439794314315c0db287b52215f98826a0c72c586dde74ae3c8c9d9cee4b328f2780825d2389fff50fd61a7c8f37e70448604ad6507aa0ed720e7793e221cb4b2eb19ddad5df3019f9031155040ccf99eb5dee9637e595b179050a41e61a5a5939eb01edb080a8b1dc63d7276f9b5e3c3dd96cff148020e439ac7fa42ccbb28", 0x1000}, {&(0x7f0000001500)='K', 0x1}], 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

[  516.648860][   T31] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  516.660261][   T31] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[  516.673703][   T31] usb 3-1: config 0 interface 164 has no altsetting 0
[  516.788299][T18108] input: syz1 as /devices/virtual/input/input34
[  516.802133][    T5] usb 4-1: new full-speed USB device number 13 using dummy_hcd
15:05:04 executing program 1:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0xffffffffffffffdf, &(0x7f0000000200)=0xbaa)
splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0)
write$FUSE_OPEN(r3, &(0x7f0000000340)={0xf3a295d2a088994b}, 0xfffffe59)
read$FUSE(r2, &(0x7f0000001340), 0x1000)
close(r1)

[  516.934677][   T31] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[  516.943885][   T31] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[  516.952180][   T31] usb 3-1: Product: syz
[  516.960882][   T31] usb 3-1: config 0 descriptor??
[  516.993692][T18114] input: syz1 as /devices/virtual/input/input35
[  517.162507][   T31] iforce 3-1:0.164: usb_submit_urb failed: -110
[  517.162774][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 104, setting to 64
[  517.182788][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.202170][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.213120][    T5] usb 4-1: language id specifier not provided by device, defaulting to English
[  517.232790][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.392015][   T31] iforce 3-1:0.164: usb_submit_urb failed: -110
[  517.412052][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.432282][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.452185][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.472909][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.492304][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.512059][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.532149][   T31] iforce 3-1:0.164: usb_submit_urb failed: -32
[  517.539614][   T31] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input36
[  517.685310][ T2931] usb 3-1: USB disconnect, device number 25
[  517.772799][    T5] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40
[  517.782025][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.790104][    T5] usb 4-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄迓
[  518.152196][    T5] usbhid 4-1:1.0: can't add hid device: -22
[  518.158441][    T5] usbhid: probe of 4-1:1.0 failed with error -22
[  518.167387][    T5] usb 4-1: USB disconnect, device number 13
15:05:05 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7510bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xffffffffffffffaf)

15:05:05 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x11, 0x68, &(0x7f0000000000), 0x4)
close(r0)

15:05:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc)
getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000140)=0x9)

15:05:05 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0xe88}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1004}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x26, &(0x7f0000003700)={0x77359400})

15:05:05 executing program 3:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x68, 0x81}}}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xcc, &(0x7f00000002c0)=@string={0xcc, 0x3, "68a2146ad779032f6bc6680fa7817a3ccc84a12153d8a39b2fd99f969683ddfb167aa999d322350159efeeca426ab502f60a979b5abc9ce856d3e6812fc6696aaafc672b57a1d4b05702de27d75465ca98cf09e82ca99ccf1b10cbdb3fd71657544116feb23391e0a6e10352608da07a3ac580c946a4f264da826f3744fd6efc3012b5bd0a141d802396d15d11a87ba2dc15213000eadbcae4c1d97f931f9f2e9d9b3d8139ce52a800118ddd31b564920745a45d191836284f5b79f85d775764849c0feed6df6edad38f"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:05:05 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba007a9b80000806", 0xe}], 0x1}, 0x0)

15:05:05 executing program 2:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc)

15:05:05 executing program 4:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000b40)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @rand_addr="e10c8ffd9d48c5ddcbac3b70d4ec45c6"}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000002c0)="fd", 0x1}], 0x1, &(0x7f0000000000)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}], 0x40}], 0x1, 0x4000040)

15:05:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x4, 0x0, &(0x7f00000002c0)})

15:05:05 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x4101)

15:05:05 executing program 1:
r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'})
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x327, @time={0x77359400}})

15:05:05 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
symlink(&(0x7f0000000080)='./file1/file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

15:05:05 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7510bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xffffffffffffffaf)

15:05:05 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba007a9b80000806", 0xe}], 0x1}, 0x0)

15:05:06 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x40, 0x4)
mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)=0xfffffffffffffe52)

15:05:06 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
symlink(&(0x7f0000000080)='./file1/file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

[  518.922560][    T5] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  519.317150][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 104, setting to 64
[  519.372252][    T5] usb 4-1: language id specifier not provided by device, defaulting to English
[  519.912138][    T5] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40
[  519.921294][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.929491][    T5] usb 4-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄迓
[  520.272185][    T5] usbhid 4-1:1.0: can't add hid device: -22
[  520.278322][    T5] usbhid: probe of 4-1:1.0 failed with error -22
[  520.287101][    T5] usb 4-1: USB disconnect, device number 14
15:05:07 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7510bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xffffffffffffffaf)

15:05:07 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x4101)

15:05:07 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
symlink(&(0x7f0000000080)='./file1/file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

15:05:07 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba007a9b80000806", 0xe}], 0x1}, 0x0)

15:05:07 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x34424752, 0x0, @stepwise})

15:05:07 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="200000006900130800000000a9030000020000000000080005000200000000000001f36b6744254ffe2e4173a157dcc278a994bac286d3bfc6afb407dcb7d4380144abbbb4bc9481b435845656e6f859b78cc7d5ece9a6f60d9485b06f1ffb80abb4b501000000000c6d757a3cc10ed9abb13edfa687bdd02808a5605d1b73d76ea549e2012287087c9acc01ec20b742f70000000000000076dc99133f08000000232b01303419e8f6f900f8a14c6fd77505d76a2b093170ef015aa5a0e80a088ea01a35d1379de0190f43ea540e8966dd6b696733139b64e8d84d2864c9c9aa8dfcaf0000", @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:05:07 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
symlink(&(0x7f0000000080)='./file1/file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

15:05:07 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x4101)

15:05:07 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba007a9b80000806", 0xe}], 0x1}, 0x0)

15:05:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0xef0c940e34340735)

15:05:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040))
read(r0, &(0x7f00003fefff)=""/1, 0x1)

15:05:08 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x3f, 0x41, 0x8000000001}, 0x3c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20)

15:05:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x30)
close(r1)

15:05:08 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x4101)

15:05:08 executing program 1:
signalfd(0xffffffffffffffff, 0x0, 0x0)

15:05:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:05:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040))
read(r0, &(0x7f00003fefff)=""/1, 0x1)

15:05:08 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c)
close(r0)

15:05:08 executing program 1:
r0 = semget$private(0x0, 0x20000000107, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1000}, {0x0, 0xf9a4}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{0x3}, {0x0, 0x4, 0x1000}], 0x2, 0x0)

15:05:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040))
read(r0, &(0x7f00003fefff)=""/1, 0x1)

15:05:08 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd})

15:05:08 executing program 2:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/107, 0x1e)
getdents(r0, 0x0, 0x447)

15:05:08 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:05:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]')
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x80000000000003)

15:05:08 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='map\x00\x02N\xd1\x1de\xf2-R\xc6\f\x86\xdf\xc9\xfc\x8c]\x02\xc3B\vg\x8f\xa5\x04\x00\x00\x00\xd8\x00\xb2a\xf0\xfa\xcb\xa03\x15\xcd\a\xfb\x140\x12\xd4z\x1b-\xcb&\xdcY\x92\xf6j\xae\x80\x0f\x836\xaf\xd3g\xf8Z\x19\x96o\x9c\xe8\v\xcf\xd6\x9c\'f\xc9\xb3\f\xf8n:\x16!e\x83\xa8\xde\x11~\xf3\xa8\x05\xbc\x14{\xa8\x03\x04\xb1\xcb\aV\x83\xf5\xcd)Z\x05\x98\xd1\n\xf7\x88\x0f\xc40\x1b\xa6\xce\xff\xf6=D\x05\x8bC\xd5\x12\x02\x00\x00\xa7\xedW\xba?M\xdeuir\xaa@M\x9b\xee\"\xff\xe9t\xef\xbc\xce\x8d\xa6\xae\xa6&\x8c\x96\xfb\xce\xc2W\xf3\xa5j{G\xa8d2\x87#\xd4Q\xb6u\x8dT(\xc0\x00\x1d\x00\x00\xe3\x00\x00\x00\xec\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002!\xd7cK\x1d\xc0\x06\x18\xb6/\r\xf9\x95D\x18\xe3\xe6!I\x81\xe39\xe8\x0ez\x95n\xd8\x93\xf9\xcbt\xedF\xaf\xb1\x02\x11u{q\xf2\x13;\x83\x00'}, 0x10)

15:05:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040))
read(r0, &(0x7f00003fefff)=""/1, 0x1)

15:05:08 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011f79a08070ada0048ad000000010902240001000000000904b90002c750dc000905850b1d0d00000009050103c600000000"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

15:05:09 executing program 0:
r0 = socket$inet6(0xa, 0x1100000000003, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000000)={'gretap0\x00', 0x0})

15:05:09 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
socket(0x10, 0x2, 0x0)
r3 = userfaultfd(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r5 = memfd_create(&(0x7f0000000040)='/eth1bdev\x00', 0x0)
r6 = dup2(r5, r4)
dup3(r6, r3, 0x0)

15:05:09 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000100)="fc0000004a000700ab092500090007000aab80ff000000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032000048b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d3f000000000000003b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b00417cc821d9565187dc48deac270e33429fd3000175e63fb8d38a873cf10000000000f7", 0xfc)

15:05:09 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

15:05:09 executing program 3:
unshare(0x20400)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0)
fcntl$getflags(r0, 0x3)

15:05:09 executing program 5:
unshare(0x8020000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
setns(r0, 0x0)

[  522.230741][T18284] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'.
15:05:09 executing program 3:
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='.\x00')

15:05:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f00000000c0)={0x6, 0x0, [{0x80000000, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x10000000000400}, {0xc68e80cd546b4603, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}]})

[  522.353210][ T2931] usb 3-1: new high-speed USB device number 26 using dummy_hcd
15:05:09 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0)

[  522.603079][ T2931] usb 3-1: Using ep0 maxpacket: 8
15:05:09 executing program 5:
r0 = memfd_create(&(0x7f0000000240)='\x00\x00\xda\x89\x038f\x19\xfa\x0e]\x85', 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0)
r1 = socket$inet6(0xa, 0x200000000000001, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast1}})
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000180)=0x40)
setsockopt$inet_buf(r1, 0x0, 0x100000040, &(0x7f0000000040), 0x0)

15:05:09 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000001140)='/dev/loop#\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

[  522.762360][ T2931] usb 3-1: config 0 has an invalid interface number: 185 but max is 0
[  522.770662][ T2931] usb 3-1: config 0 has no interface number 0
[  522.777273][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  522.788474][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has invalid maxpacket 1309, setting to 1024
[  522.799891][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  522.813181][ T2931] usb 3-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=ad.48
[  522.822404][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.889328][ T2931] usb 3-1: config 0 descriptor??
[  522.948139][ T2931] adutux 3-1:0.185: ADU218  now attached to /dev/usb/adutux0
[  523.012080][T12683] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  523.135927][   T31] usb 3-1: USB disconnect, device number 26
[  523.294088][T12683] usb 4-1: Using ep0 maxpacket: 8
[  523.422194][T12683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.433302][T12683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  523.446297][T12683] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  523.455453][T12683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.465080][T12683] usb 4-1: config 0 descriptor??
[  523.921997][   T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  523.949668][T12683] samsung 0003:0419:0001.0007: unknown main item tag 0x0
[  523.968027][T12683] samsung 0003:0419:0001.0007: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0
[  524.162008][   T31] usb 3-1: Using ep0 maxpacket: 8
[  524.169546][T12683] usb 4-1: USB disconnect, device number 15
[  524.282171][   T31] usb 3-1: config 0 has an invalid interface number: 185 but max is 0
[  524.290455][   T31] usb 3-1: config 0 has no interface number 0
[  524.296782][   T31] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  524.308012][   T31] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has invalid maxpacket 1309, setting to 1024
[  524.319504][   T31] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  524.330633][   T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=ad.48
[  524.339850][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.349135][   T31] usb 3-1: config 0 descriptor??
[  524.398693][   T31] adutux 3-1:0.185: ADU218  now attached to /dev/usb/adutux0
[  524.593944][   T31] usb 3-1: USB disconnect, device number 27
[  524.941972][T12683] usb 4-1: new high-speed USB device number 16 using dummy_hcd
15:05:12 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011f79a08070ada0048ad000000010902240001000000000904b90002c750dc000905850b1d0d00000009050103c600000000"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

15:05:12 executing program 0:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)

15:05:12 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

15:05:12 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

15:05:12 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
socket(0x10, 0x2, 0x0)
r3 = userfaultfd(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r5 = memfd_create(&(0x7f0000000040)='/eth1bdev\x00', 0x0)
r6 = dup2(r5, r4)
dup3(r6, r3, 0x0)

[  525.095711][T18339] sctp: [Deprecated]: syz-executor.5 (pid 18339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  525.095711][T18339] Use struct sctp_sack_info instead
15:05:12 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x400000000000002)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, 0x0}, 0x0)

15:05:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0)
ioctl$KDGKBLED(r2, 0x4004510d, &(0x7f0000000040))

[  525.234590][T12683] usb 4-1: Using ep0 maxpacket: 8
15:05:12 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
socket(0x10, 0x2, 0x0)
r3 = userfaultfd(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r5 = memfd_create(&(0x7f0000000040)='/eth1bdev\x00', 0x0)
r6 = dup2(r5, r4)
dup3(r6, r3, 0x0)

[  525.402830][T12683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.414219][T12683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  525.427284][T12683] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  525.436576][T12683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.445569][ T2931] usb 3-1: new high-speed USB device number 28 using dummy_hcd
15:05:12 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0x28}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

[  525.627019][T12683] usb 4-1: config 0 descriptor??
[  525.702690][ T2931] usb 3-1: Using ep0 maxpacket: 8
15:05:12 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0)

15:05:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:05:12 executing program 4:
unshare(0x20600)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fstat(r0, &(0x7f00000000c0))

[  525.835606][ T2931] usb 3-1: config 0 has an invalid interface number: 185 but max is 0
[  525.843972][ T2931] usb 3-1: config 0 has no interface number 0
[  525.850161][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  525.861466][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has invalid maxpacket 1309, setting to 1024
[  525.872831][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  525.883944][ T2931] usb 3-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=ad.48
[  525.893119][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.918841][T12683] usbhid 4-1:0.0: can't add hid device: -71
[  525.925160][T12683] usbhid: probe of 4-1:0.0 failed with error -71
[  525.991050][T12683] usb 4-1: USB disconnect, device number 16
[  526.079251][ T2931] usb 3-1: config 0 descriptor??
[  526.132402][ T2931] adutux 3-1:0.185: ADU218  now attached to /dev/usb/adutux0
[  526.329916][ T2931] usb 3-1: USB disconnect, device number 28
[  526.471959][T12683] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  526.731925][T12683] usb 4-1: Using ep0 maxpacket: 8
15:05:13 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011f79a08070ada0048ad000000010902240001000000000904b90002c750dc000905850b1d0d00000009050103c600000000"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

15:05:13 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000200), 0x10)
setsockopt(r3, 0x65, 0x10000000002, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)

15:05:13 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @dev}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x62}, {}, {}, 0x0, 0x0, 0x400000000001}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@multicast2}}, 0xe8)
connect$inet6(r0, &(0x7f0000000080), 0x1c)

15:05:13 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
socket(0x10, 0x2, 0x0)
r3 = userfaultfd(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r5 = memfd_create(&(0x7f0000000040)='/eth1bdev\x00', 0x0)
r6 = dup2(r5, r4)
dup3(r6, r3, 0x0)

15:05:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  526.853847][T12683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.864969][T12683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  526.878173][T12683] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  526.887360][T12683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
15:05:14 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
r1 = socket$l2tp(0x18, 0x1, 0x1)
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, r0})

[  527.010777][T12683] usb 4-1: config 0 descriptor??
15:05:14 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$TIOCSBRK(r0, 0x40044591)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0)

15:05:14 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="6544d7b66dc1624b5a17eda821992804", 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x0)

[  527.242845][ T2931] usb 3-1: new high-speed USB device number 29 using dummy_hcd
15:05:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  527.488097][ T2931] usb 3-1: Using ep0 maxpacket: 8
[  527.500842][T12683] samsung 0003:0419:0001.0008: unknown main item tag 0x0
[  527.547723][T12683] samsung 0003:0419:0001.0008: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0
[  527.627830][ T2931] usb 3-1: config 0 has an invalid interface number: 185 but max is 0
[  527.636470][ T2931] usb 3-1: config 0 has no interface number 0
[  527.642772][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  527.653999][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x85 has invalid maxpacket 1309, setting to 1024
[  527.665377][ T2931] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  527.676522][ T2931] usb 3-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=ad.48
[  527.685823][ T2931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.707192][ T2931] usb 3-1: config 0 descriptor??
[  527.736546][T12683] usb 4-1: USB disconnect, device number 17
[  527.769085][ T2931] adutux 3-1:0.185: ADU218  now attached to /dev/usb/adutux0
[  527.959968][T12683] usb 3-1: USB disconnect, device number 29
[  527.973379][T12683] =====================================================
[  527.980361][T12683] BUG: KMSAN: use-after-free in usb_unbind_interface+0x3a2/0xdd0
[  527.988070][T12683] CPU: 0 PID: 12683 Comm: kworker/0:3 Not tainted 5.3.0-rc7+ #0
[  527.995800][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  528.005898][T12683] Workqueue: usb_hub_wq hub_event
[  528.010902][T12683] Call Trace:
[  528.014239][T12683]  dump_stack+0x191/0x1f0
[  528.018563][T12683]  kmsan_report+0x17d/0x2f0
[  528.023056][T12683]  __msan_warning+0x73/0xe0
[  528.027545][T12683]  adu_disconnect+0x302/0x360
[  528.032224][T12683]  ? adu_probe+0x1160/0x1160
[  528.036809][T12683]  usb_unbind_interface+0x3a2/0xdd0
[  528.042020][T12683]  ? usb_driver_release_interface+0x2a0/0x2a0
[  528.048086][T12683]  device_release_driver_internal+0x911/0xd20
[  528.054589][T12683]  device_release_driver+0x4b/0x60
[  528.059686][T12683]  bus_remove_device+0x4bf/0x670
[  528.064610][T12683]  device_del+0xcd5/0x1d10
[  528.069019][T12683]  usb_disable_device+0x567/0x1150
[  528.074124][T12683]  usb_disconnect+0x51e/0xd60
[  528.078793][T12683]  hub_event+0x3fd0/0x72f0
[  528.083230][T12683]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[  528.089138][T12683]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[  528.095015][T12683]  ? led_work+0x720/0x720
[  528.099331][T12683]  ? led_work+0x720/0x720
[  528.103645][T12683]  process_one_work+0x1572/0x1ef0
[  528.108675][T12683]  worker_thread+0x111b/0x2460
[  528.113437][T12683]  kthread+0x4b5/0x4f0
[  528.117487][T12683]  ? process_one_work+0x1ef0/0x1ef0
[  528.122682][T12683]  ? kthread_blkcg+0xf0/0xf0
[  528.127299][T12683]  ret_from_fork+0x35/0x40
[  528.131733][T12683] 
[  528.134049][T12683] Uninit was created at:
[  528.138272][T12683]  kmsan_internal_poison_shadow+0x60/0x120
[  528.144063][T12683]  kmsan_slab_free+0x8d/0x100
[  528.148721][T12683]  kfree+0x4c1/0x2db0
[  528.152694][T12683]  adu_release+0x95f/0xa50
[  528.157112][T12683]  __fput+0x4c9/0xba0
[  528.161082][T12683]  ____fput+0x37/0x40
[  528.165046][T12683]  task_work_run+0x22e/0x2a0
[  528.169615][T12683]  prepare_exit_to_usermode+0x39d/0x4d0
[  528.175152][T12683]  syscall_return_slowpath+0x90/0x610
[  528.180512][T12683]  do_syscall_64+0xe2/0xf0
[  528.184909][T12683]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  528.190786][T12683] =====================================================
[  528.197705][T12683] Disabling lock debugging due to kernel taint
[  528.203841][T12683] Kernel panic - not syncing: panic_on_warn set ...
[  528.210413][T12683] CPU: 0 PID: 12683 Comm: kworker/0:3 Tainted: G    B             5.3.0-rc7+ #0
[  528.219499][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  528.229550][T12683] Workqueue: usb_hub_wq hub_event
[  528.234555][T12683] Call Trace:
[  528.237834][T12683]  dump_stack+0x191/0x1f0
[  528.242169][T12683]  panic+0x3c9/0xc1e
[  528.246074][T12683]  kmsan_report+0x2e5/0x2f0
[  528.250564][T12683]  __msan_warning+0x73/0xe0
[  528.255053][T12683]  adu_disconnect+0x302/0x360
[  528.259717][T12683]  ? adu_probe+0x1160/0x1160
[  528.264294][T12683]  usb_unbind_interface+0x3a2/0xdd0
[  528.269502][T12683]  ? usb_driver_release_interface+0x2a0/0x2a0
[  528.275569][T12683]  device_release_driver_internal+0x911/0xd20
[  528.281625][T12683]  device_release_driver+0x4b/0x60
[  528.286781][T12683]  bus_remove_device+0x4bf/0x670
[  528.291731][T12683]  device_del+0xcd5/0x1d10
[  528.296158][T12683]  usb_disable_device+0x567/0x1150
[  528.301267][T12683]  usb_disconnect+0x51e/0xd60
[  528.305938][T12683]  hub_event+0x3fd0/0x72f0
[  528.310362][T12683]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[  528.316343][T12683]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[  528.322230][T12683]  ? led_work+0x720/0x720
[  528.326575][T12683]  ? led_work+0x720/0x720
[  528.330888][T12683]  process_one_work+0x1572/0x1ef0
[  528.335936][T12683]  worker_thread+0x111b/0x2460
[  528.340711][T12683]  kthread+0x4b5/0x4f0
[  528.344764][T12683]  ? process_one_work+0x1ef0/0x1ef0
[  528.349962][T12683]  ? kthread_blkcg+0xf0/0xf0
[  528.354548][T12683]  ret_from_fork+0x35/0x40
[  528.360391][T12683] Kernel Offset: disabled
[  528.364716][T12683] Rebooting in 86400 seconds..