7eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:05 executing program 2:
r0 = socket(0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:05 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x400040)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x8}) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:16:05 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x11)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xffffffffda1b30f9, 0x6, 0x400000003, 0x2, 0xffffffffffffb3fd, 0xfff, 0x6, 0x6, 0x24, 0x8, 0x7, 0x9, 0x8, 0xfffffffffffff56a, 0xfff, 0x1], 0x100000, 0x4d140})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0x81a0ae8c, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000007c0)={r7, 0x0, 0x6})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000400)={r7, 0x7, 0x2, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x11) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xffffffffda1b30f9, 0x6, 0x400000003, 0x2, 0xffffffffffffb3fd, 0xfff, 0x6, 0x6, 0x24, 0x8, 0x7, 0x9, 0x8, 0xfffffffffffff56a, 0xfff, 0x1], 0x100000, 0x4d140}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r5, 0x81a0ae8c, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000007c0)={r7, 0x0, 0x6}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000400)={r7, 0x7, 0x2, 0x1}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:16:05 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000184000/0x4000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  878.865922][   T14] usb 1-1: USB disconnect, device number 29
00:16:05 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:05 executing program 2:
r0 = socket(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:05 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7f8f7da82587dde3, &(0x7f00002c7000/0x4000)=nil)
mlock2(&(0x7f00001fc000/0x14000)=nil, 0x14000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fff, <r3=>r0})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x8524, 0xffffffff, 0x3, 0xffffffffffff1338, 0xc9, 0x5, 0x3, 0xa, 0x7fffffffffffffff, 0x8000, 0x8, 0x8001, 0x586f, 0x2, 0x3], 0x2000, 0x8000})

00:16:05 executing program 2:
r0 = socket(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:05 executing program 2:
r0 = socket(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:05 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  879.007980][T29223] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  879.340223][   T14] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  879.580197][   T14] usb 1-1: Using ep0 maxpacket: 8
[  879.700364][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  879.708462][   T14] usb 1-1: config 0 has no interface number 0
[  879.715028][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  879.724204][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.734398][   T14] usb 1-1: config 0 descriptor??
[  879.771300][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  881.740334][   T14] gspca_spca1528: reg_r err -32
[  881.745325][   T14] spca1528: probe of 1-1:0.1 failed with error -32
00:16:09 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000184000/0x4000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:09 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:09 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7f8f7da82587dde3, &(0x7f00002c7000/0x4000)=nil)
mlock2(&(0x7f00001fc000/0x14000)=nil, 0x14000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fff, <r3=>r0})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x8524, 0xffffffff, 0x3, 0xffffffffffff1338, 0xc9, 0x5, 0x3, 0xa, 0x7fffffffffffffff, 0x8000, 0x8, 0x8001, 0x586f, 0x2, 0x3], 0x2000, 0x8000})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7f8f7da82587dde3, &(0x7f00002c7000/0x4000)=nil) (async)
mlock2(&(0x7f00001fc000/0x14000)=nil, 0x14000, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fff, r0}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x8524, 0xffffffff, 0x3, 0xffffffffffff1338, 0xc9, 0x5, 0x3, 0xa, 0x7fffffffffffffff, 0x8000, 0x8, 0x8001, 0x586f, 0x2, 0x3], 0x2000, 0x8000}) (async)

00:16:09 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:09 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  882.727560][T13685] usb 1-1: USB disconnect, device number 30
00:16:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000184000/0x4000)=nil) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:09 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:09 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7f8f7da82587dde3, &(0x7f00002c7000/0x4000)=nil)
mlock2(&(0x7f00001fc000/0x14000)=nil, 0x14000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fff, <r3=>r0})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x8524, 0xffffffff, 0x3, 0xffffffffffff1338, 0xc9, 0x5, 0x3, 0xa, 0x7fffffffffffffff, 0x8000, 0x8, 0x8001, 0x586f, 0x2, 0x3], 0x2000, 0x8000})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7f8f7da82587dde3, &(0x7f00002c7000/0x4000)=nil) (async)
mlock2(&(0x7f00001fc000/0x14000)=nil, 0x14000, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fff, r0}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x8524, 0xffffffff, 0x3, 0xffffffffffff1338, 0xc9, 0x5, 0x3, 0xa, 0x7fffffffffffffff, 0x8000, 0x8, 0x8001, 0x586f, 0x2, 0x3], 0x2000, 0x8000}) (async)

[  883.240205][T13685] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  883.480202][T13685] usb 1-1: Using ep0 maxpacket: 8
[  883.600391][T13685] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  883.608475][T13685] usb 1-1: config 0 has no interface number 0
[  883.614663][T13685] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  883.623775][T13685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.633013][T13685] usb 1-1: config 0 descriptor??
[  883.671439][T13685] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  885.640224][T13685] gspca_spca1528: reg_r err -32
[  885.645224][T13685] spca1528: probe of 1-1:0.1 failed with error -32
00:16:13 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:13 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (rerun: 32)

00:16:13 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:13 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000244000/0x2000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:13 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000000c0)=0x80ff)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x3b}, {0x200, 0x400}]}, 0x18, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000140), 0x220400, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:16:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

[  886.627250][    T7] usb 1-1: USB disconnect, device number 31
00:16:13 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:16:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:13 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000244000/0x2000)=nil) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  887.090165][    T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  887.350328][    T7] usb 1-1: Using ep0 maxpacket: 8
[  887.470777][    T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  887.478806][    T7] usb 1-1: config 0 has no interface number 0
[  887.485157][    T7] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  887.494391][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.503878][    T7] usb 1-1: config 0 descriptor??
[  887.541374][    T7] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  889.500239][    T7] gspca_spca1528: reg_r err -32
[  889.505155][    T7] spca1528: probe of 1-1:0.1 failed with error -32
00:16:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:16 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:16 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000244000/0x2000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:16 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000004b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e134145983360fc79f010000000f01cb0f07640f2b69263e3e0f01df2667f086710a66ba4200b828000000ef0f019df70000000f08", 0x36}], 0x1, 0x0, &(0x7f0000000180)=[@flags={0x3, 0x53d1dc64584d74bc}, @flags={0x3, 0x8040}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000040)={{r1}, 0x6, 0x5e49, 0x15})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:16 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3}) (async, rerun: 64)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (rerun: 64)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264) (async)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000000c0)=0x80ff) (async)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x3b}, {0x200, 0x400}]}, 0x18, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000140), 0x220400, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  890.486569][   T14] usb 1-1: USB disconnect, device number 32
00:16:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:16 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000000c0)=0x80ff) (async)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x3b}, {0x200, 0x400}]}, 0x18, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000140), 0x220400, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32)

00:16:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:17 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffe)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000010000003878e7609f0b46fd1ce445f8e2b0100e87004a0000", @ANYRES32=<r2=>r1, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file0\x00'])
mmap(&(0x7f00000e4000/0x4000)=nil, 0x4000, 0x100000c, 0x50, r2, 0x21cd6000)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/117, 0x75}, &(0x7f0000000100)=0x40)

00:16:17 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

[  890.910248][   T14] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  891.150143][   T14] usb 1-1: Using ep0 maxpacket: 8
[  891.270233][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  891.278326][   T14] usb 1-1: config 0 has no interface number 0
[  891.285071][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  891.294335][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.303734][   T14] usb 1-1: config 0 descriptor??
[  891.341420][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  893.310303][   T14] gspca_spca1528: reg_r err -32
[  893.315316][   T14] spca1528: probe of 1-1:0.1 failed with error -32
00:16:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffe)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000010000003878e7609f0b46fd1ce445f8e2b0100e87004a0000", @ANYRES32=<r2=>r1, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 32)
mmap(&(0x7f00000e4000/0x4000)=nil, 0x4000, 0x100000c, 0x50, r2, 0x21cd6000) (rerun: 32)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/117, 0x75}, &(0x7f0000000100)=0x40)

00:16:20 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:20 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240)={0x0, 0x17, 0xfc, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:20 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:16:20 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]}) (async)
r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000004b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e134145983360fc79f010000000f01cb0f07640f2b69263e3e0f01df2667f086710a66ba4200b828000000ef0f019df70000000f08", 0x36}], 0x1, 0x0, &(0x7f0000000180)=[@flags={0x3, 0x53d1dc64584d74bc}, @flags={0x3, 0x8040}], 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000040)={{r1}, 0x6, 0x5e49, 0x15}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  894.295076][   T14] usb 1-1: USB disconnect, device number 33
00:16:20 executing program 2:
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffe)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000010000003878e7609f0b46fd1ce445f8e2b0100e87004a0000", @ANYRES32=<r2=>r1, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file0\x00'])
mmap(&(0x7f00000e4000/0x4000)=nil, 0x4000, 0x100000c, 0x50, r2, 0x21cd6000)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/117, 0x75}, &(0x7f0000000100)=0x40)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffe) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000010000003878e7609f0b46fd1ce445f8e2b0100e87004a0000", @ANYRES32=r1, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
mmap(&(0x7f00000e4000/0x4000)=nil, 0x4000, 0x100000c, 0x50, r2, 0x21cd6000) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/117, 0x75}, &(0x7f0000000100)=0x40) (async)

00:16:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:20 executing program 2:
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xd25f81dd6cd90285, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  894.720261][   T14] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  894.960165][   T14] usb 1-1: Using ep0 maxpacket: 8
[  895.080265][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  895.088372][   T14] usb 1-1: config 0 has no interface number 0
[  895.094917][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  895.104196][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.116648][   T14] usb 1-1: config 0 descriptor??
[  895.162470][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  897.775702][ T3696] usb 1-1: USB disconnect, device number 34
00:16:24 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000004b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e134145983360fc79f010000000f01cb0f07640f2b69263e3e0f01df2667f086710a66ba4200b828000000ef0f019df70000000f08", 0x36}], 0x1, 0x0, &(0x7f0000000180)=[@flags={0x3, 0x53d1dc64584d74bc}, @flags={0x3, 0x8040}], 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000040)={{r1}, 0x6, 0x5e49, 0x15}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:24 executing program 2:
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:24 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240)={0x0, 0x17, 0xfc, "8b5c0f4ebdd724eeaaf4dbf116c1c94f2292ad600b4f1a2a07753bc8bcc4735d2e2b6a5e25a415267be00ed4b1a2f9cb114928f45bf0351eaec0f58a101cd7b49ebce6c8a1447769a95e6ce8788e23205e97de12f66e7491e49606ed4f806c19e99117cdf4ee2a108ace93b4f55a8a06c8ef0eed391bd2a4276253acb7885d30767b1f79c09bb65f702f260e9dbeea1667bc9555750a6e49837a01f21a5c77280a75eba41fa8dcf8933ebe3ebf7904e845a30894ec9f50bcbdff0d16a1b05f9c3cb4d3df516329af6500713adcb348146e8b6ecd6e74ac0a1d70c1024be8ccfd834158adc8b060ad0e11a87c078e05cf44b7fea82175a439fd6fd630"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:24 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:16:24 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xd25f81dd6cd90285, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

00:16:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

00:16:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

00:16:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:24 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x1, 0x100000001, 0x9, 0x3ff, 0x8000000000000000, 0x1000, 0x7, 0x8, 0x4800000000000000, 0xda39, 0x3ff, 0x6, 0x800, 0xa4ab, 0x5183], 0xd000, 0x2000})

00:16:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

[  898.590202][   T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  898.830173][   T14] usb 1-1: Using ep0 maxpacket: 8
[  898.950608][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  898.958615][   T14] usb 1-1: config 0 has no interface number 0
[  898.965194][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  898.974461][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.983569][   T14] usb 1-1: config 0 descriptor??
[  899.022169][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  901.635850][   T22] usb 1-1: USB disconnect, device number 35
00:16:28 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240)={0x0, 0x0, 0xfc, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:28 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xd25f81dd6cd90285, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:28 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

00:16:28 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000251000/0x4000)=nil, 0x4000, 0x12)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:28 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x1, 0x100000001, 0x9, 0x3ff, 0x8000000000000000, 0x1000, 0x7, 0x8, 0x4800000000000000, 0xda39, 0x3ff, 0x6, 0x800, 0xa4ab, 0x5183], 0xd000, 0x2000})

00:16:28 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

00:16:28 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x1, 0x100000001, 0x9, 0x3ff, 0x8000000000000000, 0x1000, 0x7, 0x8, 0x4800000000000000, 0xda39, 0x3ff, 0x6, 0x800, 0xa4ab, 0x5183], 0xd000, 0x2000})

00:16:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:28 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

00:16:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  902.450246][   T14] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  902.690206][   T14] usb 1-1: Using ep0 maxpacket: 8
[  902.810308][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  902.818316][   T14] usb 1-1: config 0 has no interface number 0
[  902.824668][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  902.833759][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.842700][   T14] usb 1-1: config 0 descriptor??
[  902.881972][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  905.495811][   T22] usb 1-1: USB disconnect, device number 36
00:16:32 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:32 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
madvise(&(0x7f0000251000/0x4000)=nil, 0x4000, 0x12) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$FITHAW(r0, 0xc0045878) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:32 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

00:16:32 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x11a000, 0x2000, &(0x7f00003e4000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:32 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f00001ba000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x80000001, 0x6, 0x8, 0x3, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:32 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

00:16:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:32 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:32 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x11a000, 0x2000, &(0x7f00003e4000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

[  906.360166][ T3696] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  906.600176][ T3696] usb 1-1: Using ep0 maxpacket: 8
[  906.741496][ T3696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  906.749607][ T3696] usb 1-1: config 0 has no interface number 0
[  906.757124][ T3696] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  906.766843][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.775853][ T3696] usb 1-1: config 0 descriptor??
[  906.831820][ T3696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  909.413630][ T3696] usb 1-1: USB disconnect, device number 37
00:16:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x11a000, 0x2000, &(0x7f00003e4000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:36 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000251000/0x4000)=nil, 0x4000, 0x12)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
madvise(&(0x7f0000251000/0x4000)=nil, 0x4000, 0x12) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$FITHAW(r0, 0xc0045878) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:16:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:36 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:36 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f00001ba000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264) (async)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x80000001, 0x6, 0x8, 0x3, 0x8}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2", 0x1ad}], 0x1)

00:16:36 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f00001ba000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x80000001, 0x6, 0x8, 0x3, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f00001ba000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r3, r2, 0x0, 0x264) (async)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x80000001, 0x6, 0x8, 0x3, 0x8}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:16:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000020a000/0x1000)=nil})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:36 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000027000/0x1000)=nil)
shmat(r4, &(0x7f00000ec000/0x3000)=nil, 0x8000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)

00:16:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

[  910.230191][   T14] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  910.480186][   T14] usb 1-1: Using ep0 maxpacket: 8
[  910.600877][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  910.609609][   T14] usb 1-1: config 0 has no interface number 0
[  910.615972][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  910.625545][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.635380][   T14] usb 1-1: config 0 descriptor??
[  910.681512][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  913.295819][   T14] usb 1-1: USB disconnect, device number 38
00:16:40 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x63, "0d3695d9966053835857fffcae3742e155ebc8033b50bfa7450be1e7ca0e49702804b4b0ad13819f27c3396d8172eb123b2502c1caecfb8617a068aa8aabafe22e9f906da47d2b6cdd58bfd6a29aa082af705be27a67dc72e50f589c13548746d492f8"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:40 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:40 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:40 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000027000/0x1000)=nil)
shmat(r4, &(0x7f00000ec000/0x3000)=nil, 0x8000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)

00:16:40 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000020a000/0x1000)=nil})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000020a000/0x1000)=nil}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:16:40 executing program 3:
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x480440, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:40 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:40 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:40 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:40 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:40 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000020a000/0x1000)=nil})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:40 executing program 3:
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x480440, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
madvise(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x13) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x480440, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

[  914.160388][   T14] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  914.400218][   T14] usb 1-1: Using ep0 maxpacket: 8
[  914.520329][   T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  914.528374][   T14] usb 1-1: config 0 has no interface number 0
[  914.534733][   T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  914.544066][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.553451][   T14] usb 1-1: config 0 descriptor??
[  914.591265][   T14] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  917.204940][   T14] usb 1-1: USB disconnect, device number 39
00:16:44 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa2}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:44 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:44 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000027000/0x1000)=nil)
shmat(r4, &(0x7f00000ec000/0x3000)=nil, 0x8000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)

00:16:44 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:44 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000))

00:16:44 executing program 3:
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x13) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x480440, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:44 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:44 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0)
mremap(&(0x7f00000c9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002b7000/0x4000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4198, 0x7c2b, 0x5, 0x90, 0xc0, 0xe0, 0x0, 0xfc, 0x8, 0x8, 0x0, 0x40, 0x5}, {0xf76, 0xffff, 0x0, 0xfa, 0x6, 0x8, 0x2, 0xff, 0x4, 0x9, 0x3f, 0x81, 0x7f}, {0x4de867cf, 0x5, 0x7f, 0x47, 0x81, 0x1, 0x3, 0x9, 0x1, 0x3f, 0x7f, 0x81, 0x9}], 0x400})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x11)

00:16:44 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:44 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000680))
mmap(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0xf637a000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:16:44 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

00:16:44 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1dc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1dc}}, 0x0)

[  918.030274][   T22] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  918.290300][   T22] usb 1-1: Using ep0 maxpacket: 8
[  918.430388][   T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  918.440270][   T22] usb 1-1: config 0 has no interface number 0
[  918.446433][   T22] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  918.456054][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.467378][   T22] usb 1-1: config 0 descriptor??
[  918.511215][   T22] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  921.085619][ T3267] usb 1-1: USB disconnect, device number 40
00:16:47 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:47 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x1d0}}, 0x0)

00:16:47 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:47 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) (async)

00:16:47 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000680))
mmap(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0xf637a000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000680)) (async)
mmap(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0xf637a000) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:16:47 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) (rerun: 32)
mremap(&(0x7f00000c9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002b7000/0x4000)=nil) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4198, 0x7c2b, 0x5, 0x90, 0xc0, 0xe0, 0x0, 0xfc, 0x8, 0x8, 0x0, 0x40, 0x5}, {0xf76, 0xffff, 0x0, 0xfa, 0x6, 0x8, 0x2, 0xff, 0x4, 0x9, 0x3f, 0x81, 0x7f}, {0x4de867cf, 0x5, 0x7f, 0x47, 0x81, 0x1, 0x3, 0x9, 0x1, 0x3f, 0x7f, 0x81, 0x9}], 0x400}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x11)

00:16:47 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x1d0}}, 0x0)

00:16:48 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0)
mremap(&(0x7f00000c9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002b7000/0x4000)=nil) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4198, 0x7c2b, 0x5, 0x90, 0xc0, 0xe0, 0x0, 0xfc, 0x8, 0x8, 0x0, 0x40, 0x5}, {0xf76, 0xffff, 0x0, 0xfa, 0x6, 0x8, 0x2, 0xff, 0x4, 0x9, 0x3f, 0x81, 0x7f}, {0x4de867cf, 0x5, 0x7f, 0x47, 0x81, 0x1, 0x3, 0x9, 0x1, 0x3f, 0x7f, 0x81, 0x9}], 0x400}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x11)

00:16:48 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x1d0}}, 0x0)

00:16:48 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x8001, &(0x7f00001af000/0x1000)=nil, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  921.900203][ T3267] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  922.140132][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  922.260225][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  922.268347][ T3267] usb 1-1: config 0 has no interface number 0
[  922.274974][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  922.284578][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.293652][ T3267] usb 1-1: config 0 descriptor??
[  922.331319][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  924.925256][ T3267] usb 1-1: USB disconnect, device number 41
00:16:51 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:51 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000))

00:16:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x44}}, 0x0)

00:16:51 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000680))
mmap(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0xf637a000) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:16:51 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:51 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x8001, &(0x7f00001af000/0x1000)=nil, 0x4) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:51 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000226000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-:\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:51 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x8001, &(0x7f00001af000/0x1000)=nil, 0x4) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:16:51 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:16:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x44}}, 0x0)

00:16:51 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, 0x0, 0x0)

00:16:51 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
remap_file_pages(&(0x7f0000152000/0x2000)=nil, 0x2000, 0x2000000, 0x1, 0x800)

00:16:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x44}}, 0x0)

00:16:51 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0200000000000078f735851140be9f13dbbfff13191e68002e2f66696c6530005ed47212ce074071ec840026d1beecdf62f9299c6ede16a0463b96fe83f3aa729a27c270e9484bdc1eb901f71fe9af4694777e8cca19c3dbb8a1ebbbb56d29"])
fallocate(r2, 0x0, 0x7fff, 0x71f)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000173000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="0f2217ba2100b083ee660fc7b30088d18a008066b8000000000f23d00f21f86635200000070f23f8642665f30fb8827b003eef66b98404000066b80080000066ba000000000f30de3c26f30f705e0040", 0x50}], 0x1, 0x22, &(0x7f0000000140), 0x0)

00:16:52 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1b8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1b8}}, 0x0)

00:16:52 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, 0x0, 0x0)

[  925.790356][   T22] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  926.040170][   T22] usb 1-1: Using ep0 maxpacket: 8
[  926.162436][   T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  926.175823][   T22] usb 1-1: config 0 has no interface number 0
[  926.182399][   T22] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  926.194882][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.211516][   T22] usb 1-1: config 0 descriptor??
[  926.253614][   T22] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  928.640293][   T22] gspca_spca1528: reg_r err -71
[  928.645235][   T22] spca1528: probe of 1-1:0.1 failed with error -71
[  928.653643][   T22] usb 1-1: USB disconnect, device number 42
00:16:55 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1b8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1b8}}, 0x0)

00:16:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, 0x0, 0x0)

00:16:55 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0200000000000078f735851140be9f13dbbfff13191e68002e2f66696c6530005ed47212ce074071ec840026d1beecdf62f9299c6ede16a0463b96fe83f3aa729a27c270e9484bdc1eb901f71fe9af4694777e8cca19c3dbb8a1ebbbb56d29"]) (async)
fallocate(r2, 0x0, 0x7fff, 0x71f) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000173000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="0f2217ba2100b083ee660fc7b30088d18a008066b8000000000f23d00f21f86635200000070f23f8642665f30fb8827b003eef66b98404000066b80080000066ba000000000f30de3c26f30f705e0040", 0x50}], 0x1, 0x22, &(0x7f0000000140), 0x0)

00:16:55 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
remap_file_pages(&(0x7f0000152000/0x2000)=nil, 0x2000, 0x2000000, 0x1, 0x800)

00:16:55 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000226000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-:\x00') (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140), 0x0)

00:16:55 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000226000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-:\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000226000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-:\x00') (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:16:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1b8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1b8}}, 0x0)

00:16:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140), 0x0)

00:16:55 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
remap_file_pages(&(0x7f0000152000/0x2000)=nil, 0x2000, 0x2000000, 0x1, 0x800)

00:16:55 executing program 3:
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mlock2(&(0x7f000019c000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000002, 0xffffffffffffffff)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  929.480441][ T3267] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  929.720145][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  929.840240][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  929.848352][ T3267] usb 1-1: config 0 has no interface number 0
[  929.854697][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  929.864094][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.875963][ T3267] usb 1-1: config 0 descriptor??
[  929.921886][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  931.361143][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  931.367450][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  932.320354][ T3267] gspca_spca1528: reg_r err -71
[  932.325255][ T3267] spca1528: probe of 1-1:0.1 failed with error -71
[  932.333312][ T3267] usb 1-1: USB disconnect, device number 43
00:16:59 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:16:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1d8}}, 0x0)

00:16:59 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140), 0x0)

00:16:59 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:16:59 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0200000000000078f735851140be9f13dbbfff13191e68002e2f66696c6530005ed47212ce074071ec840026d1beecdf62f9299c6ede16a0463b96fe83f3aa729a27c270e9484bdc1eb901f71fe9af4694777e8cca19c3dbb8a1ebbbb56d29"])
fallocate(r2, 0x0, 0x7fff, 0x71f)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000173000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="0f2217ba2100b083ee660fc7b30088d18a008066b8000000000f23d00f21f86635200000070f23f8642665f30fb8827b003eef66b98404000066b80080000066ba000000000f30de3c26f30f705e0040", 0x50}], 0x1, 0x22, &(0x7f0000000140), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0200000000000078f735851140be9f13dbbfff13191e68002e2f66696c6530005ed47212ce074071ec840026d1beecdf62f9299c6ede16a0463b96fe83f3aa729a27c270e9484bdc1eb901f71fe9af4694777e8cca19c3dbb8a1ebbbb56d29"]) (async)
fallocate(r2, 0x0, 0x7fff, 0x71f) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r4) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000173000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="0f2217ba2100b083ee660fc7b30088d18a008066b8000000000f23d00f21f86635200000070f23f8642665f30fb8827b003eef66b98404000066b80080000066ba000000000f30de3c26f30f705e0040", 0x50}], 0x1, 0x22, &(0x7f0000000140), 0x0) (async)

00:16:59 executing program 3:
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mlock2(&(0x7f000019c000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000002, 0xffffffffffffffff)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
umount2(&(0x7f0000000000)='./file0\x00', 0x2) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mlock2(&(0x7f000019c000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000002, 0xffffffffffffffff) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:16:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1d8}}, 0x0)

00:16:59 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{0x0}], 0x1)

00:16:59 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{0x0}], 0x1)

00:16:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1d8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1d8}}, 0x0)

00:16:59 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{0x0}], 0x1)

00:16:59 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)}], 0x1)

[  933.170378][ T3267] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  933.430454][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  933.550414][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  933.558513][ T3267] usb 1-1: config 0 has no interface number 0
[  933.564866][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  933.573975][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.584258][ T3267] usb 1-1: config 0 descriptor??
[  933.621334][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  936.030349][ T3267] gspca_spca1528: reg_r err -71
[  936.035366][ T3267] spca1528: probe of 1-1:0.1 failed with error -71
[  936.049056][ T3267] usb 1-1: USB disconnect, device number 44
00:17:02 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)}], 0x1)

00:17:02 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (rerun: 32)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:02 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1ac, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1ac}}, 0x0)

00:17:02 executing program 3:
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mlock2(&(0x7f000019c000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000002, 0xffffffffffffffff)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
umount2(&(0x7f0000000000)='./file0\x00', 0x2) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mlock2(&(0x7f000019c000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000002, 0xffffffffffffffff) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:17:02 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unshare(0x26060600)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
setns(r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:17:02 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1a8}}, 0x0)

00:17:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)}], 0x1)

00:17:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6ff01000000000000808272a31857cc3c337cae9410ccbb01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af", 0xd7}], 0x1)

00:17:03 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1a8}}, 0x0)

00:17:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

00:17:03 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
unshare(0x26060600) (async, rerun: 64)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
setns(r2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32)

[  936.840259][T13685] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  937.080182][T13685] usb 1-1: Using ep0 maxpacket: 8
[  937.200409][T13685] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  937.208457][T13685] usb 1-1: config 0 has no interface number 0
[  937.214801][T13685] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  937.224000][T13685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.236907][T13685] usb 1-1: config 0 descriptor??
[  937.283573][T13685] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  939.460259][T13685] gspca_spca1528: reg_r err -32
[  939.465177][T13685] spca1528: probe of 1-1:0.1 failed with error -32
00:17:06 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:06 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x1a8}}, 0x0)

00:17:06 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

00:17:06 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unshare(0x26060600) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
setns(r2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:17:06 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00001ea000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1, 0x81, 0x10001, 0x5, 0x7fffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  940.450738][ T3267] usb 1-1: USB disconnect, device number 45
00:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

00:17:06 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x17c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x17c}}, 0x0)

00:17:06 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee4457", 0x6c}], 0x1)

00:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

00:17:06 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x178, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x178}}, 0x0)

00:17:07 executing program 1:
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bb000/0x1000)=nil})
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000158000/0x1000)=nil, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:07 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

[  940.930189][ T3267] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  941.173080][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  941.292091][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  941.301365][ T3267] usb 1-1: config 0 has no interface number 0
[  941.307473][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  941.322291][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.341371][ T3267] usb 1-1: config 0 descriptor??
[  941.381288][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  943.570317][ T3267] gspca_spca1528: reg_r err -32
[  943.575233][ T3267] spca1528: probe of 1-1:0.1 failed with error -32
00:17:10 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x178, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x178}}, 0x0)

00:17:10 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00001ea000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1, 0x81, 0x10001, 0x5, 0x7fffffff}) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (rerun: 32)

00:17:10 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:10 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e8", 0x1}], 0x1)

00:17:10 executing program 1:
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bb000/0x1000)=nil})
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000158000/0x1000)=nil, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bb000/0x1000)=nil}) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000158000/0x1000)=nil, 0x1000}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:10 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00001ea000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1, 0x81, 0x10001, 0x5, 0x7fffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  944.556088][T12366] usb 1-1: USB disconnect, device number 46
00:17:10 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e", 0x37}], 0x1)

00:17:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x178, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x178}}, 0x0)

00:17:11 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:11 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e", 0x37}], 0x1)

00:17:11 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x158, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x158}}, 0x0)

[  945.050345][T12366] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  945.290298][T12366] usb 1-1: Using ep0 maxpacket: 8
[  945.420287][T12366] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  945.428618][T12366] usb 1-1: config 0 has no interface number 0
[  945.435798][T12366] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  945.445123][T12366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.455586][T12366] usb 1-1: config 0 descriptor??
[  945.501402][T12366] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  947.690238][T12366] gspca_spca1528: reg_r err -32
[  947.696805][T12366] spca1528: probe of 1-1:0.1 failed with error -32
00:17:15 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:15 executing program 1:
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bb000/0x1000)=nil})
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000158000/0x1000)=nil, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bb000/0x1000)=nil}) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000158000/0x1000)=nil, 0x1000}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e", 0x37}], 0x1)

00:17:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x154}}, 0x0)

00:17:15 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/s2255drv', 0x800, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:15 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000224000/0x2000)=nil, 0x2000, 0xd)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x154}}, 0x0)

00:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f579", 0x52}], 0x1)

[  948.676801][   T22] usb 1-1: USB disconnect, device number 47
00:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f579", 0x52}], 0x1)

00:17:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x154}}, 0x0)

00:17:15 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/s2255drv', 0x800, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_io_uring_complete(0x0) (async)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/s2255drv', 0x800, 0x2) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:17:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x130, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x130}}, 0x0)

[  949.163290][   T22] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  949.430253][   T22] usb 1-1: Using ep0 maxpacket: 8
[  949.580376][   T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  949.588658][   T22] usb 1-1: config 0 has no interface number 0
[  949.594903][   T22] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  949.604010][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.613858][   T22] usb 1-1: config 0 descriptor??
[  949.651669][   T22] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  951.830685][   T22] gspca_spca1528: reg_r err -32
[  951.835766][ T3688] kworker/dying (3688) used greatest stack depth: 21880 bytes left
[  951.843984][   T22] spca1528: probe of 1-1:0.1 failed with error -32
00:17:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f579", 0x52}], 0x1)

00:17:19 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000224000/0x2000)=nil, 0x2000, 0xd)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000224000/0x2000)=nil, 0x2000, 0xd) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x12c}}, 0x0)

00:17:19 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:19 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/s2255drv', 0x800, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_io_uring_complete(0x0) (async)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/s2255drv', 0x800, 0x2) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:17:19 executing program 1:
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff})
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x488d5)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x2, 0xfff2}, {0x9, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

00:17:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x12c}}, 0x0)

00:17:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66", 0x5f}], 0x1)

[  952.826777][   T22] usb 1-1: USB disconnect, device number 48
00:17:19 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000136000/0x2000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x6000, 0x1000, &(0x7f00001cf000/0x1000)=nil})
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

00:17:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66", 0x5f}], 0x1)

00:17:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x12c}}, 0x0)

00:17:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66", 0x5f}], 0x1)

00:17:19 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000136000/0x2000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x6000, 0x1000, &(0x7f00001cf000/0x1000)=nil}) (async)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

00:17:19 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000224000/0x2000)=nil, 0x2000, 0xd)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000224000/0x2000)=nil, 0x2000, 0xd) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x10c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x10c}}, 0x0)

[  953.300205][   T22] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  953.550194][   T22] usb 1-1: Using ep0 maxpacket: 8
[  953.671078][   T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  953.679159][   T22] usb 1-1: config 0 has no interface number 0
[  953.685399][   T22] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  953.694470][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.704040][   T22] usb 1-1: config 0 descriptor??
[  953.741367][   T22] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  955.900175][   T22] gspca_spca1528: reg_r err -32
[  955.905095][   T22] spca1528: probe of 1-1:0.1 failed with error -32
00:17:23 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:23 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000136000/0x2000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x6000, 0x1000, &(0x7f00001cf000/0x1000)=nil}) (async)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

00:17:23 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x108}}, 0x0)

00:17:23 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ff9000/0x4000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:23 executing program 1:
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}) (async)
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x9) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x488d5)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x2, 0xfff2}, {0x9, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264) (async)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

00:17:23 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x108}}, 0x0)

[  956.897123][T12366] usb 1-1: USB disconnect, device number 49
00:17:23 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x0, 0xbbdf, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x108}}, 0x0)

00:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0", 0x69}], 0x1)

00:17:23 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000173000/0x3000)=nil)
mremap(&(0x7f0000174000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002ce000/0x3000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r3, &(0x7f00001d7000/0x4000)=nil, 0xb000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000173000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a93000/0x2000)=nil], &(0x7f0000000040)=[0x0, 0x6, 0x5], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2)

[  957.350149][T12366] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  957.600406][T12366] usb 1-1: Using ep0 maxpacket: 8
[  957.730572][T12366] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  957.738798][T12366] usb 1-1: config 0 has no interface number 0
[  957.745564][T12366] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  957.754959][T12366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.764331][T12366] usb 1-1: config 0 descriptor??
[  957.801328][T12366] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  959.990325][T12366] gspca_spca1528: reg_r err -32
[  959.995344][T12366] spca1528: probe of 1-1:0.1 failed with error -32
00:17:27 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xe0, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xe0}}, 0x0)

00:17:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:27 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ff9000/0x4000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:27 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000173000/0x3000)=nil)
mremap(&(0x7f0000174000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002ce000/0x3000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r3, &(0x7f00001d7000/0x4000)=nil, 0xb000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000173000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a93000/0x2000)=nil], &(0x7f0000000040)=[0x0, 0x6, 0x5], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000173000/0x3000)=nil) (async)
mremap(&(0x7f0000174000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002ce000/0x3000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) (async)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}}) (async)
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0) (async)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
shmat(r3, &(0x7f00001d7000/0x4000)=nil, 0xb000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000173000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a93000/0x2000)=nil], &(0x7f0000000040)=[0x0, 0x6, 0x5], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2) (async)

00:17:27 executing program 1:
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff})
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x488d5)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x2, 0xfff2}, {0x9, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1}) (async)
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x9) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x488d5) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x2, 0xfff2}, {0x9, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r7, r6, 0x0, 0x264) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)

00:17:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xdc}}, 0x0)

[  960.976197][T14225] usb 1-1: USB disconnect, device number 50
00:17:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xdc}}, 0x0)

00:17:27 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ff9000/0x4000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224", 0x66}], 0x1)

00:17:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xdc}}, 0x0)

[  961.440301][T14225] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  961.710250][T14225] usb 1-1: Using ep0 maxpacket: 8
[  961.870490][T14225] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  961.878633][T14225] usb 1-1: config 0 has no interface number 0
[  961.884887][T14225] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  961.894123][T14225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.905763][T14225] usb 1-1: config 0 descriptor??
[  961.952132][T14225] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  964.370256][T14225] gspca_spca1528: reg_r err -71
[  964.375181][T14225] spca1528: probe of 1-1:0.1 failed with error -71
[  964.389697][T14225] usb 1-1: USB disconnect, device number 51
00:17:31 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:31 executing program 1:
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@deltclass={0x434, 0x29, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0xc, 0x9}, {0xa, 0xfff3}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x200, 0x8, 0x0, 0x80000000, 0x2, 0x101, 0x100, 0x4, 0x2, 0x80, 0x3f, 0x41d, 0xb, 0x947a, 0xffff, 0x25a5d884, 0x8, 0x6, 0x6, 0x81, 0x2, 0x7fff, 0x8, 0x7fff, 0x8, 0x88, 0x80, 0x6, 0x5, 0x2, 0x1, 0x2, 0xfff, 0x0, 0xfffffffe, 0x2, 0x3e6, 0x0, 0x4, 0x2, 0x5, 0x1, 0x289, 0x9, 0x4, 0xd6ee, 0x681c, 0x9, 0x4000, 0x1, 0x0, 0x80000001, 0x5, 0x8, 0x7, 0x5, 0x7, 0x6, 0xc7, 0x8, 0xfffff1eb, 0x1, 0xf24, 0x7fff, 0xd0000000, 0xffffffff, 0x4, 0x100, 0x0, 0x9, 0x382, 0x1, 0x7, 0x1833, 0x200, 0x70, 0x9, 0xca2, 0x30, 0x8, 0x3ff, 0x70000, 0x0, 0x80000001, 0x1, 0x7fffffff, 0x1000, 0x3, 0x7, 0x100, 0x9, 0x2, 0xfffff97d, 0x9, 0x400, 0x80, 0x87, 0x0, 0xffff, 0x98b, 0x5, 0x81, 0x80000001, 0x4, 0x400, 0x3e6, 0x1, 0x6, 0x1, 0x5, 0x7, 0x4, 0x9, 0x5, 0xfffffffd, 0x8, 0xd58, 0x4, 0x4, 0x3, 0x4, 0x200, 0x5, 0x34, 0x40, 0xfffffffa, 0x7fff, 0x3, 0x401, 0x4, 0x8000, 0x9, 0x0, 0x8, 0x0, 0x10001, 0x4, 0x5, 0x1000, 0x165f, 0xffff, 0x3ff, 0x5, 0xc86, 0x17, 0x2, 0x3, 0x746, 0x1, 0x3b, 0x3, 0xfffffff9, 0x8, 0x1, 0x3, 0x58, 0x5, 0xffffff80, 0x5, 0xb69000, 0x8, 0x81, 0x7f, 0xfffff1af, 0x5, 0x10000, 0x3, 0xf264, 0x17, 0x7ff, 0x6, 0x4, 0x4, 0x1c0, 0x0, 0x3, 0x6, 0xffff8001, 0x3, 0x5, 0x7, 0xfffffffc, 0x8, 0x4, 0x20, 0x7f, 0x2, 0x3, 0x1, 0x100, 0x7, 0x2, 0x0, 0x1f, 0x3, 0x8, 0x7, 0x7, 0xfff, 0x8, 0x5, 0xb0f9, 0x5, 0x1, 0xa9, 0xfffffffd, 0x20, 0x2, 0x6, 0x7, 0x7, 0x874, 0x1ff, 0x5, 0x3e, 0xfe00000, 0x3ff, 0xffffff00, 0x9, 0x401, 0x4, 0x6, 0x9, 0x8, 0x5, 0xffff, 0x800, 0x1000, 0x1000, 0xffffff16, 0x2, 0x7ff, 0x10000, 0x8, 0x2, 0xffffffff, 0x7fe000, 0x2, 0x80000001, 0x567, 0x5, 0x7, 0x8001, 0x2, 0xe2, 0x1, 0x4, 0x9, 0x20, 0x6, 0xfff, 0xfffffffd, 0x83, 0x8000, 0x1f]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x800}, 0x16880)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680))
splice(r8, &(0x7f00000002c0)=0x9, r5, &(0x7f0000000300)=0x10000, 0x9, 0x8)
syz_io_uring_setup(0x641e, &(0x7f0000000180)={0x0, 0x3eeb, 0x0, 0x2, 0x53}, &(0x7f000017a000/0xb000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240))
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffff7e, 0x0, 0x0, 0x4, 0x1}, 0x10000)

00:17:31 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000173000/0x3000)=nil) (async)
mremap(&(0x7f0000174000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002ce000/0x3000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0) (async)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
shmat(r3, &(0x7f00001d7000/0x4000)=nil, 0xb000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000173000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a93000/0x2000)=nil], &(0x7f0000000040)=[0x0, 0x6, 0x5], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2)

00:17:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xbc}}, 0x0)

00:17:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbab", 0x68}], 0x1)

00:17:31 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00003ef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x1, &(0x7f0000000140)=""/190, 0xbe}, &(0x7f0000000200)=0x40)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xb8}}, 0x0)

00:17:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbab", 0x68}], 0x1)

00:17:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xb8}}, 0x0)

00:17:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5f5, 0x4, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0xb8}}, 0x0)

00:17:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbab", 0x68}], 0x1)

00:17:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x90}}, 0x0)

[  965.240145][T14225] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  965.480140][T14225] usb 1-1: Using ep0 maxpacket: 8
[  965.610418][T14225] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  965.618453][T14225] usb 1-1: config 0 has no interface number 0
[  965.625293][T14225] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  965.634723][T14225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.646092][T14225] usb 1-1: config 0 descriptor??
[  965.691678][T14225] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  968.080344][T14225] gspca_spca1528: reg_r err -71
[  968.085272][T14225] spca1528: probe of 1-1:0.1 failed with error -71
[  968.098726][T14225] usb 1-1: USB disconnect, device number 52
00:17:34 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0})

00:17:34 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00003ef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x1, &(0x7f0000000140)=""/190, 0xbe}, &(0x7f0000000200)=0x40)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x8c}}, 0x0)

00:17:34 executing program 3:
madvise(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x15)
mbind(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x80000001, 0x5, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:34 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000880)="1498bf1185c518e6e94b2876dafaf87c62283257b05a8256ab12112bf6709089f21e862a42d36713f1267800c5ae7a6c23341a510048610e77e0edf0afd86b692aae2b6b5765d8e5395a113e18776a216c6dce48ebf38267001efb281136785a231ab5d3640205a71f3beeb985f735a1b3a0b07a6476", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)="db45aa9dfda7865b0978521f25ccadd6d4008add6e1690b08360ae429b4fc0ece18d6d50b15378e6b23cb5835a4c42204bac0da6662ddf05792a3e1c2353e552bbfcb99810e95f270be025dacb3c04ae", 0x50}, {&(0x7f0000000a00)="fc98a470e412937d171a833f48f2cee1f0d71d35f714", 0x16}, {&(0x7f00000005c0)="a28ac7843f054fe203437de5763836410c", 0x11}], 0x3}}], 0x2, 0x0)
sendmsg(r0, &(0x7f0000000300)={0x0, 0xa001, &(0x7f00000002c0)=[{&(0x7f0000000080)="8fe76a24e47a386b3bc66420aae00911d6057bcdd71038a7a4d3bb42feaf0529018efe211acdc3f81380ed278e5777bd97caea198bb798332b00d96ca210f9c0", 0x7b69}, {&(0x7f0000000180)="e1e92b420fb2ba5f3c5597f215064d75abb89b84910f8e554252f5ec076441258e58479d5bc7038fb71d66ebf6f7d658a8e198213ced1ff5130ccf0225d21a794d77f0c817955093f571131b41e301f69ed63f33124e0297f334", 0x5a}, {&(0x7f0000000200)="faff80e719b2dacf2325afe3acc06fbac934fe4d9e343e9815c6399b4d2d3b67d9", 0x21}, {&(0x7f0000000240)="271dab486c8ae84a5d2f3d3f30501e347819acb362dbc097e644882adb5daaece9a48b4a273a9c65bd", 0x29}], 0x4}, 0x0)

00:17:34 executing program 1:
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0) (async, rerun: 64)
r2 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64)
syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@deltclass={0x434, 0x29, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0xc, 0x9}, {0xa, 0xfff3}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x200, 0x8, 0x0, 0x80000000, 0x2, 0x101, 0x100, 0x4, 0x2, 0x80, 0x3f, 0x41d, 0xb, 0x947a, 0xffff, 0x25a5d884, 0x8, 0x6, 0x6, 0x81, 0x2, 0x7fff, 0x8, 0x7fff, 0x8, 0x88, 0x80, 0x6, 0x5, 0x2, 0x1, 0x2, 0xfff, 0x0, 0xfffffffe, 0x2, 0x3e6, 0x0, 0x4, 0x2, 0x5, 0x1, 0x289, 0x9, 0x4, 0xd6ee, 0x681c, 0x9, 0x4000, 0x1, 0x0, 0x80000001, 0x5, 0x8, 0x7, 0x5, 0x7, 0x6, 0xc7, 0x8, 0xfffff1eb, 0x1, 0xf24, 0x7fff, 0xd0000000, 0xffffffff, 0x4, 0x100, 0x0, 0x9, 0x382, 0x1, 0x7, 0x1833, 0x200, 0x70, 0x9, 0xca2, 0x30, 0x8, 0x3ff, 0x70000, 0x0, 0x80000001, 0x1, 0x7fffffff, 0x1000, 0x3, 0x7, 0x100, 0x9, 0x2, 0xfffff97d, 0x9, 0x400, 0x80, 0x87, 0x0, 0xffff, 0x98b, 0x5, 0x81, 0x80000001, 0x4, 0x400, 0x3e6, 0x1, 0x6, 0x1, 0x5, 0x7, 0x4, 0x9, 0x5, 0xfffffffd, 0x8, 0xd58, 0x4, 0x4, 0x3, 0x4, 0x200, 0x5, 0x34, 0x40, 0xfffffffa, 0x7fff, 0x3, 0x401, 0x4, 0x8000, 0x9, 0x0, 0x8, 0x0, 0x10001, 0x4, 0x5, 0x1000, 0x165f, 0xffff, 0x3ff, 0x5, 0xc86, 0x17, 0x2, 0x3, 0x746, 0x1, 0x3b, 0x3, 0xfffffff9, 0x8, 0x1, 0x3, 0x58, 0x5, 0xffffff80, 0x5, 0xb69000, 0x8, 0x81, 0x7f, 0xfffff1af, 0x5, 0x10000, 0x3, 0xf264, 0x17, 0x7ff, 0x6, 0x4, 0x4, 0x1c0, 0x0, 0x3, 0x6, 0xffff8001, 0x3, 0x5, 0x7, 0xfffffffc, 0x8, 0x4, 0x20, 0x7f, 0x2, 0x3, 0x1, 0x100, 0x7, 0x2, 0x0, 0x1f, 0x3, 0x8, 0x7, 0x7, 0xfff, 0x8, 0x5, 0xb0f9, 0x5, 0x1, 0xa9, 0xfffffffd, 0x20, 0x2, 0x6, 0x7, 0x7, 0x874, 0x1ff, 0x5, 0x3e, 0xfe00000, 0x3ff, 0xffffff00, 0x9, 0x401, 0x4, 0x6, 0x9, 0x8, 0x5, 0xffff, 0x800, 0x1000, 0x1000, 0xffffff16, 0x2, 0x7ff, 0x10000, 0x8, 0x2, 0xffffffff, 0x7fe000, 0x2, 0x80000001, 0x567, 0x5, 0x7, 0x8001, 0x2, 0xe2, 0x1, 0x4, 0x9, 0x20, 0x6, 0xfff, 0xfffffffd, 0x83, 0x8000, 0x1f]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x800}, 0x16880) (rerun: 64)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680))
splice(r8, &(0x7f00000002c0)=0x9, r5, &(0x7f0000000300)=0x10000, 0x9, 0x8) (async, rerun: 64)
syz_io_uring_setup(0x641e, &(0x7f0000000180)={0x0, 0x3eeb, 0x0, 0x2, 0x53}, &(0x7f000017a000/0xb000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffff7e, 0x0, 0x0, 0x4, 0x1}, 0x10000)

00:17:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x8c}}, 0x0)

00:17:35 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000880)="1498bf1185c518e6e94b2876dafaf87c62283257b05a8256ab12112bf6709089f21e862a42d36713f1267800c5ae7a6c23341a510048610e77e0edf0afd86b692aae2b6b5765d8e5395a113e18776a216c6dce48ebf38267001efb281136785a231ab5d3640205a71f3beeb985f735a1b3a0b07a6476", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)="db45aa9dfda7865b0978521f25ccadd6d4008add6e1690b08360ae429b4fc0ece18d6d50b15378e6b23cb5835a4c42204bac0da6662ddf05792a3e1c2353e552bbfcb99810e95f270be025dacb3c04ae", 0x50}, {&(0x7f0000000a00)="fc98a470e412937d171a833f48f2cee1f0d71d35f714", 0x16}, {&(0x7f00000005c0)="a28ac7843f054fe203437de5763836410c", 0x11}], 0x3}}], 0x2, 0x0)
sendmsg(r0, &(0x7f0000000300)={0x0, 0xa001, &(0x7f00000002c0)=[{&(0x7f0000000080)="8fe76a24e47a386b3bc66420aae00911d6057bcdd71038a7a4d3bb42feaf0529018efe211acdc3f81380ed278e5777bd97caea198bb798332b00d96ca210f9c0", 0x7b69}, {&(0x7f0000000180)="e1e92b420fb2ba5f3c5597f215064d75abb89b84910f8e554252f5ec076441258e58479d5bc7038fb71d66ebf6f7d658a8e198213ced1ff5130ccf0225d21a794d77f0c817955093f571131b41e301f69ed63f33124e0297f334", 0x5a}, {&(0x7f0000000200)="faff80e719b2dacf2325afe3acc06fbac934fe4d9e343e9815c6399b4d2d3b67d9", 0x21}, {&(0x7f0000000240)="271dab486c8ae84a5d2f3d3f30501e347819acb362dbc097e644882adb5daaece9a48b4a273a9c65bd", 0x29}], 0x4}, 0x0)

00:17:35 executing program 1:
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@deltclass={0x434, 0x29, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0xc, 0x9}, {0xa, 0xfff3}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x200, 0x8, 0x0, 0x80000000, 0x2, 0x101, 0x100, 0x4, 0x2, 0x80, 0x3f, 0x41d, 0xb, 0x947a, 0xffff, 0x25a5d884, 0x8, 0x6, 0x6, 0x81, 0x2, 0x7fff, 0x8, 0x7fff, 0x8, 0x88, 0x80, 0x6, 0x5, 0x2, 0x1, 0x2, 0xfff, 0x0, 0xfffffffe, 0x2, 0x3e6, 0x0, 0x4, 0x2, 0x5, 0x1, 0x289, 0x9, 0x4, 0xd6ee, 0x681c, 0x9, 0x4000, 0x1, 0x0, 0x80000001, 0x5, 0x8, 0x7, 0x5, 0x7, 0x6, 0xc7, 0x8, 0xfffff1eb, 0x1, 0xf24, 0x7fff, 0xd0000000, 0xffffffff, 0x4, 0x100, 0x0, 0x9, 0x382, 0x1, 0x7, 0x1833, 0x200, 0x70, 0x9, 0xca2, 0x30, 0x8, 0x3ff, 0x70000, 0x0, 0x80000001, 0x1, 0x7fffffff, 0x1000, 0x3, 0x7, 0x100, 0x9, 0x2, 0xfffff97d, 0x9, 0x400, 0x80, 0x87, 0x0, 0xffff, 0x98b, 0x5, 0x81, 0x80000001, 0x4, 0x400, 0x3e6, 0x1, 0x6, 0x1, 0x5, 0x7, 0x4, 0x9, 0x5, 0xfffffffd, 0x8, 0xd58, 0x4, 0x4, 0x3, 0x4, 0x200, 0x5, 0x34, 0x40, 0xfffffffa, 0x7fff, 0x3, 0x401, 0x4, 0x8000, 0x9, 0x0, 0x8, 0x0, 0x10001, 0x4, 0x5, 0x1000, 0x165f, 0xffff, 0x3ff, 0x5, 0xc86, 0x17, 0x2, 0x3, 0x746, 0x1, 0x3b, 0x3, 0xfffffff9, 0x8, 0x1, 0x3, 0x58, 0x5, 0xffffff80, 0x5, 0xb69000, 0x8, 0x81, 0x7f, 0xfffff1af, 0x5, 0x10000, 0x3, 0xf264, 0x17, 0x7ff, 0x6, 0x4, 0x4, 0x1c0, 0x0, 0x3, 0x6, 0xffff8001, 0x3, 0x5, 0x7, 0xfffffffc, 0x8, 0x4, 0x20, 0x7f, 0x2, 0x3, 0x1, 0x100, 0x7, 0x2, 0x0, 0x1f, 0x3, 0x8, 0x7, 0x7, 0xfff, 0x8, 0x5, 0xb0f9, 0x5, 0x1, 0xa9, 0xfffffffd, 0x20, 0x2, 0x6, 0x7, 0x7, 0x874, 0x1ff, 0x5, 0x3e, 0xfe00000, 0x3ff, 0xffffff00, 0x9, 0x401, 0x4, 0x6, 0x9, 0x8, 0x5, 0xffff, 0x800, 0x1000, 0x1000, 0xffffff16, 0x2, 0x7ff, 0x10000, 0x8, 0x2, 0xffffffff, 0x7fe000, 0x2, 0x80000001, 0x567, 0x5, 0x7, 0x8001, 0x2, 0xe2, 0x1, 0x4, 0x9, 0x20, 0x6, 0xfff, 0xfffffffd, 0x83, 0x8000, 0x1f]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x800}, 0x16880) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680)) (async)
splice(r8, &(0x7f00000002c0)=0x9, r5, &(0x7f0000000300)=0x10000, 0x9, 0x8) (async)
syz_io_uring_setup(0x641e, &(0x7f0000000180)={0x0, 0x3eeb, 0x0, 0x2, 0x53}, &(0x7f000017a000/0xb000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffff7e, 0x0, 0x0, 0x4, 0x1}, 0x10000)

00:17:35 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000880)="1498bf1185c518e6e94b2876dafaf87c62283257b05a8256ab12112bf6709089f21e862a42d36713f1267800c5ae7a6c23341a510048610e77e0edf0afd86b692aae2b6b5765d8e5395a113e18776a216c6dce48ebf38267001efb281136785a231ab5d3640205a71f3beeb985f735a1b3a0b07a6476", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)="db45aa9dfda7865b0978521f25ccadd6d4008add6e1690b08360ae429b4fc0ece18d6d50b15378e6b23cb5835a4c42204bac0da6662ddf05792a3e1c2353e552bbfcb99810e95f270be025dacb3c04ae", 0x50}, {&(0x7f0000000a00)="fc98a470e412937d171a833f48f2cee1f0d71d35f714", 0x16}, {&(0x7f00000005c0)="a28ac7843f054fe203437de5763836410c", 0x11}], 0x3}}], 0x2, 0x0)
sendmsg(r0, &(0x7f0000000300)={0x0, 0xa001, &(0x7f00000002c0)=[{&(0x7f0000000080)="8fe76a24e47a386b3bc66420aae00911d6057bcdd71038a7a4d3bb42feaf0529018efe211acdc3f81380ed278e5777bd97caea198bb798332b00d96ca210f9c0", 0x7b69}, {&(0x7f0000000180)="e1e92b420fb2ba5f3c5597f215064d75abb89b84910f8e554252f5ec076441258e58479d5bc7038fb71d66ebf6f7d658a8e198213ced1ff5130ccf0225d21a794d77f0c817955093f571131b41e301f69ed63f33124e0297f334", 0x5a}, {&(0x7f0000000200)="faff80e719b2dacf2325afe3acc06fbac934fe4d9e343e9815c6399b4d2d3b67d9", 0x21}, {&(0x7f0000000240)="271dab486c8ae84a5d2f3d3f30501e347819acb362dbc097e644882adb5daaece9a48b4a273a9c65bd", 0x29}], 0x4}, 0x0)

00:17:35 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x8c}}, 0x0)

00:17:35 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f000038e000/0x3000)=nil, 0x3000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  969.000142][T14225] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  969.250192][T14225] usb 1-1: Using ep0 maxpacket: 8
[  969.390374][T14225] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  969.398487][T14225] usb 1-1: config 0 has no interface number 0
[  969.404952][T14225] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  969.414250][T14225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.425550][T14225] usb 1-1: config 0 descriptor??
[  969.471296][T14225] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  971.880231][T14225] gspca_spca1528: reg_r err -71
[  971.885186][T14225] spca1528: probe of 1-1:0.1 failed with error -71
[  971.893705][T14225] usb 1-1: USB disconnect, device number 53
00:17:38 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000880)="1498bf1185c518e6e94b2876dafaf87c62283257b05a8256ab12112bf6709089f21e862a42d36713f1267800c5ae7a6c23341a510048610e77e0edf0afd86b692aae2b6b5765d8e5395a113e18776a216c6dce48ebf38267001efb281136785a231ab5d3640205a71f3beeb985f735a1b3a0b07a6476", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)="db45aa9dfda7865b0978521f25ccadd6d4008add6e1690b08360ae429b4fc0ece18d6d50b15378e6b23cb5835a4c42204bac0da6662ddf05792a3e1c2353e552bbfcb99810e95f270be025dacb3c04ae", 0x50}, {&(0x7f0000000a00)="fc98a470e412937d171a833f48f2cee1f0d71d35f714", 0x16}, {&(0x7f00000005c0)="a28ac7843f054fe203437de5763836410c", 0x11}], 0x3}}], 0x2, 0x0)

00:17:38 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00003ef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x1, &(0x7f0000000140)=""/190, 0xbe}, &(0x7f0000000200)=0x40) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:38 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x6c}}, 0x0)

00:17:38 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
munmap(&(0x7f000038e000/0x3000)=nil, 0x3000) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)

00:17:38 executing program 3:
madvise(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x15)
mbind(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x80000001, 0x5, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1)

00:17:38 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f000038e000/0x3000)=nil, 0x3000) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64)

00:17:38 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x68}}, 0x0)

00:17:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)

00:17:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)

00:17:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

[  972.760204][ T3267] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  973.000187][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  973.120253][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  973.128674][ T3267] usb 1-1: config 0 has no interface number 0
[  973.135158][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  973.144386][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.154061][ T3267] usb 1-1: config 0 descriptor??
[  973.193774][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  975.590382][ T3267] gspca_spca1528: reg_r err -71
[  975.595288][ T3267] spca1528: probe of 1-1:0.1 failed with error -71
[  975.603940][ T3267] usb 1-1: USB disconnect, device number 54
00:17:42 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:42 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f00001e3000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x8c63}, 0x16, 0x3)

00:17:42 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x68}}, 0x0)

00:17:42 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:42 executing program 3:
madvise(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x15) (async)
mbind(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x80000001, 0x5, 0x2) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:17:42 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x68}}, 0x0)

00:17:42 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:42 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x448100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x4, 0x0, 0xe6, 0x0, 0x20, 0x3f, 0x4, 0xf4, 0x3, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x0, 0x2, 0x38, 0x1, 0x6a, 0x9, 0x1f, 0x9, 0x24, 0xca, 0x200}, {0x2, 0xcbcb, 0x7, 0xff, 0x1, 0x7f, 0x81, 0x7, 0xc1, 0x2, 0x0, 0x5}], 0x411bd32a})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000286000/0x4000)=nil, 0x4000, 0x2000003, r5)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:42 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x58}}, 0x0)

00:17:42 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:42 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f00001e3000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x8c63}, 0x16, 0x3)

[  976.400718][ T3696] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  976.680127][ T3696] usb 1-1: Using ep0 maxpacket: 8
[  976.820448][ T3696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  976.828494][ T3696] usb 1-1: config 0 has no interface number 0
[  976.835882][ T3696] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  976.845107][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.854383][ T3696] usb 1-1: config 0 descriptor??
[  976.902301][ T3696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  979.290252][ T3696] gspca_spca1528: reg_r err -71
[  979.295269][ T3696] spca1528: probe of 1-1:0.1 failed with error -71
[  979.303444][ T3696] usb 1-1: USB disconnect, device number 55
00:17:46 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

00:17:46 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x34}}, 0x0)

00:17:46 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f00001e3000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x8c63}, 0x16, 0x3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f00001e3000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x8c63}, 0x16, 0x3) (async)

00:17:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x448100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x4, 0x0, 0xe6, 0x0, 0x20, 0x3f, 0x4, 0xf4, 0x3, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x0, 0x2, 0x38, 0x1, 0x6a, 0x9, 0x1f, 0x9, 0x24, 0xca, 0x200}, {0x2, 0xcbcb, 0x7, 0xff, 0x1, 0x7f, 0x81, 0x7, 0xc1, 0x2, 0x0, 0x5}], 0x411bd32a})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000286000/0x4000)=nil, 0x4000, 0x2000003, r5) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:46 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:17:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x34}}, 0x0)

00:17:46 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x448100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x4, 0x0, 0xe6, 0x0, 0x20, 0x3f, 0x4, 0xf4, 0x3, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x0, 0x2, 0x38, 0x1, 0x6a, 0x9, 0x1f, 0x9, 0x24, 0xca, 0x200}, {0x2, 0xcbcb, 0x7, 0xff, 0x1, 0x7f, 0x81, 0x7, 0xc1, 0x2, 0x0, 0x5}], 0x411bd32a}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r5 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000286000/0x4000)=nil, 0x4000, 0x2000003, r5) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x34}}, 0x0)

00:17:46 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  980.120168][ T3696] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  980.381346][ T3696] usb 1-1: Using ep0 maxpacket: 8
[  980.502880][ T3696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  980.511065][ T3696] usb 1-1: config 0 has no interface number 0
[  980.517314][ T3696] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  980.526665][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.536171][ T3696] usb 1-1: config 0 descriptor??
[  980.582051][ T3696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  982.990384][ T3696] gspca_spca1528: reg_r err -71
[  982.995337][ T3696] spca1528: probe of 1-1:0.1 failed with error -71
[  983.004559][ T3696] usb 1-1: USB disconnect, device number 56
00:17:49 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})

00:17:49 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000131000/0x1000)=nil, 0x1000, 0x14)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x1800000, 0x7, 0xc019, 0x0, [{0x2, 0x7f, 0x80, '\x00', 0x5}, {0x8, 0x81, 0x48, '\x00', 0x6}, {0x1, 0x40, 0x20, '\x00', 0x1}, {0x7, 0x3f, 0x0, '\x00', 0x46}, {0xd9, 0x20, 0xae, '\x00', 0x3}, {0x40, 0x4c, 0x5, '\x00', 0x6}, {0x8, 0x81, 0x81, '\x00', 0xff}, {0x3f, 0x83, 0x80, '\x00', 0x9}, {0x8, 0x2, 0x2, '\x00', 0x2}, {0x8f, 0x7, 0x1f}, {0x60, 0x64, 0x6, '\x00', 0x1}, {0x2f, 0x2, 0xb0, '\x00', 0x4}, {0x1, 0x36, 0x3, '\x00', 0x1}, {0x9, 0xfd, 0x20, '\x00', 0xb4}, {0x3f, 0x6, 0x7, '\x00', 0xff}, {0x6f, 0x6, 0xeb, '\x00', 0x80}, {0x3, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x20, 0x29, '\x00', 0x4}, {0x5, 0xe7, 0x80, '\x00', 0x1f}, {0x1f, 0x7a, 0x8, '\x00', 0x7}, {0x6, 0x8, 0x0, '\x00', 0x9}, {0x9, 0x6, 0xbf, '\x00', 0xfb}, {0x6, 0x2, 0x8, '\x00', 0x40}, {0x6, 0x40, 0x4, '\x00', 0x8}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:49 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}}, 0x0)

00:17:49 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r5, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:17:49 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:17:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}}, 0x0)

00:17:49 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:49 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}}, 0x0)

00:17:50 executing program 2:
syz_clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)

00:17:50 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  983.841305][T30315] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  984.100158][T30315] usb 1-1: Using ep0 maxpacket: 8
[  984.230374][T30315] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  984.239066][T30315] usb 1-1: config 0 has no interface number 0
[  984.245320][T30315] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  984.254547][T30315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.264680][T30315] usb 1-1: config 0 descriptor??
[  984.301244][T30315] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  986.680273][T30315] gspca_spca1528: reg_r err -71
[  986.685329][T30315] spca1528: probe of 1-1:0.1 failed with error -71
[  986.701582][T30315] usb 1-1: USB disconnect, device number 57
00:17:53 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})

00:17:53 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

00:17:53 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:53 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
madvise(&(0x7f0000131000/0x1000)=nil, 0x1000, 0x14)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x1800000, 0x7, 0xc019, 0x0, [{0x2, 0x7f, 0x80, '\x00', 0x5}, {0x8, 0x81, 0x48, '\x00', 0x6}, {0x1, 0x40, 0x20, '\x00', 0x1}, {0x7, 0x3f, 0x0, '\x00', 0x46}, {0xd9, 0x20, 0xae, '\x00', 0x3}, {0x40, 0x4c, 0x5, '\x00', 0x6}, {0x8, 0x81, 0x81, '\x00', 0xff}, {0x3f, 0x83, 0x80, '\x00', 0x9}, {0x8, 0x2, 0x2, '\x00', 0x2}, {0x8f, 0x7, 0x1f}, {0x60, 0x64, 0x6, '\x00', 0x1}, {0x2f, 0x2, 0xb0, '\x00', 0x4}, {0x1, 0x36, 0x3, '\x00', 0x1}, {0x9, 0xfd, 0x20, '\x00', 0xb4}, {0x3f, 0x6, 0x7, '\x00', 0xff}, {0x6f, 0x6, 0xeb, '\x00', 0x80}, {0x3, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x20, 0x29, '\x00', 0x4}, {0x5, 0xe7, 0x80, '\x00', 0x1f}, {0x1f, 0x7a, 0x8, '\x00', 0x7}, {0x6, 0x8, 0x0, '\x00', 0x9}, {0x9, 0x6, 0xbf, '\x00', 0xfb}, {0x6, 0x2, 0x8, '\x00', 0x40}, {0x6, 0x40, 0x4, '\x00', 0x8}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:53 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
msync(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:53 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0xffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

00:17:53 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000131000/0x1000)=nil, 0x1000, 0x14)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x1800000, 0x7, 0xc019, 0x0, [{0x2, 0x7f, 0x80, '\x00', 0x5}, {0x8, 0x81, 0x48, '\x00', 0x6}, {0x1, 0x40, 0x20, '\x00', 0x1}, {0x7, 0x3f, 0x0, '\x00', 0x46}, {0xd9, 0x20, 0xae, '\x00', 0x3}, {0x40, 0x4c, 0x5, '\x00', 0x6}, {0x8, 0x81, 0x81, '\x00', 0xff}, {0x3f, 0x83, 0x80, '\x00', 0x9}, {0x8, 0x2, 0x2, '\x00', 0x2}, {0x8f, 0x7, 0x1f}, {0x60, 0x64, 0x6, '\x00', 0x1}, {0x2f, 0x2, 0xb0, '\x00', 0x4}, {0x1, 0x36, 0x3, '\x00', 0x1}, {0x9, 0xfd, 0x20, '\x00', 0xb4}, {0x3f, 0x6, 0x7, '\x00', 0xff}, {0x6f, 0x6, 0xeb, '\x00', 0x80}, {0x3, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x20, 0x29, '\x00', 0x4}, {0x5, 0xe7, 0x80, '\x00', 0x1f}, {0x1f, 0x7a, 0x8, '\x00', 0x7}, {0x6, 0x8, 0x0, '\x00', 0x9}, {0x9, 0x6, 0xbf, '\x00', 0xfb}, {0x6, 0x2, 0x8, '\x00', 0x40}, {0x6, 0x40, 0x4, '\x00', 0x8}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
madvise(&(0x7f0000131000/0x1000)=nil, 0x1000, 0x14) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x1800000, 0x7, 0xc019, 0x0, [{0x2, 0x7f, 0x80, '\x00', 0x5}, {0x8, 0x81, 0x48, '\x00', 0x6}, {0x1, 0x40, 0x20, '\x00', 0x1}, {0x7, 0x3f, 0x0, '\x00', 0x46}, {0xd9, 0x20, 0xae, '\x00', 0x3}, {0x40, 0x4c, 0x5, '\x00', 0x6}, {0x8, 0x81, 0x81, '\x00', 0xff}, {0x3f, 0x83, 0x80, '\x00', 0x9}, {0x8, 0x2, 0x2, '\x00', 0x2}, {0x8f, 0x7, 0x1f}, {0x60, 0x64, 0x6, '\x00', 0x1}, {0x2f, 0x2, 0xb0, '\x00', 0x4}, {0x1, 0x36, 0x3, '\x00', 0x1}, {0x9, 0xfd, 0x20, '\x00', 0xb4}, {0x3f, 0x6, 0x7, '\x00', 0xff}, {0x6f, 0x6, 0xeb, '\x00', 0x80}, {0x3, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x20, 0x29, '\x00', 0x4}, {0x5, 0xe7, 0x80, '\x00', 0x1f}, {0x1f, 0x7a, 0x8, '\x00', 0x7}, {0x6, 0x8, 0x0, '\x00', 0x9}, {0x9, 0x6, 0xbf, '\x00', 0xfb}, {0x6, 0x2, 0x8, '\x00', 0x40}, {0x6, 0x40, 0x4, '\x00', 0x8}]}}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:53 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x1000}, 0x1c)

00:17:53 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
msync(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x2) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:53 executing program 2:
syz_io_uring_setup(0x6e31, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

00:17:53 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
msync(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
msync(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x2) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24001, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:53 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

[  987.510312][T30315] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  987.764374][T30315] usb 1-1: Using ep0 maxpacket: 8
[  987.893559][T30315] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  987.901820][T30315] usb 1-1: config 0 has no interface number 0
[  987.908341][T30315] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  987.918314][T30315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.928828][T30315] usb 1-1: config 0 descriptor??
[  987.971755][T30315] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  990.350283][T30315] gspca_spca1528: reg_r err -71
[  990.355187][T30315] spca1528: probe of 1-1:0.1 failed with error -71
[  990.366243][T30315] usb 1-1: USB disconnect, device number 58
00:17:57 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})

00:17:57 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xe3, &(0x7f0000000140)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:17:57 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x135541, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1000000, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x4)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:57 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x4}, 0x8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

00:17:57 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:57 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0xffff}}, './file0\x00'}) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 32)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (rerun: 32)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264) (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

00:17:57 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000b40)=@string={0x2}}, {0x2, &(0x7f0000000b80)=@string={0x2}}]})

00:17:57 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x135541, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1000000, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x4)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x135541, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
pkey_alloc(0x0, 0x2) (async)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1000000, r3) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x4) (async)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1, r3) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:17:57 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:57 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:17:57 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x135541, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
r3 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1000000, r3) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 32)
pkey_mprotect(&(0x7f00003ea000/0x3000)=nil, 0x3000, 0x1, r3) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:17:57 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

[  991.170311][ T3267] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  991.220224][T30315] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  991.410254][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  991.470319][T30315] usb 3-1: Using ep0 maxpacket: 8
[  991.530321][ T3267] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  991.538451][ T3267] usb 1-1: config 0 has no interface number 0
[  991.544860][ T3267] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05
[  991.554128][ T3267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.567437][ T3267] usb 1-1: config 0 descriptor??
[  991.602476][T30315] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  991.612703][ T3267] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  991.660509][T30315] usb 3-1: language id specifier not provided by device, defaulting to English
[  991.810344][T30315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  991.819594][T30315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.828003][T30315] usb 3-1: Product: syz
[  991.832450][T30315] usb 3-1: SerialNumber: syz
[  992.086223][T30315] usb 3-1: USB disconnect, device number 18
[  992.791140][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  992.797436][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  994.020480][ T3267] gspca_spca1528: reg_r err -71
[  994.025399][ T3267] spca1528: probe of 1-1:0.1 failed with error -71
[  994.036360][ T3267] usb 1-1: USB disconnect, device number 59
00:18:00 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002cd000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x3000, 0x2000, &(0x7f00001a7000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mremap(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00002bb000/0x1000)=nil)

00:18:00 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0xffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264) (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

00:18:00 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:00 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x4}, 0x8) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

00:18:00 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)

00:18:00 executing program 2:
r0 = socket(0x18, 0x0, 0x1)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0xf0ff7f00000000}}, 0x0)

00:18:00 executing program 2:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x1e, &(0x7f00000000c0), 0x45)

00:18:00 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000340)={'bond_slave_0\x00'})

00:18:00 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:00 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000100)='syzkaller\x00', 0xffff, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:00 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)

00:18:01 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f00000001c0))

00:18:01 executing program 2:
clock_gettime(0x2, 0x0)
sched_rr_get_interval(0x0, &(0x7f00000000c0))
unshare(0x42020000)

00:18:01 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x4}, 0x8) (async, rerun: 64)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

00:18:01 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xac, <r2=>r1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002cd000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x3000, 0x2000, &(0x7f00001a7000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mremap(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00002bb000/0x1000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002cd000/0x1000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r2) (async)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x3000, 0x2000, &(0x7f00001a7000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
mremap(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00002bb000/0x1000)=nil) (async)

00:18:01 executing program 0:
unshare(0x400)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0)

00:18:01 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000180))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000013c0)={0x0, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x7fffffff00000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x2, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0xffffffff, 0x80000000, 0xacdc, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe463, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mlock(&(0x7f00002cf000/0x1000)=nil, 0x1000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x7, 0x101, 0x3, 0x454b, 0x8, 0x30, 0x8cd, 0x40, 0xffffffffffffff81, 0x4aaa, 0x9, 0x9cf, 0x8, 0x9, 0x6], 0xd000, 0x9002})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)=0x1000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:18:01 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 0:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

00:18:01 executing program 2:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000080)={'batadv_slave_1\x00'})

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002cd000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x3000, 0x2000, &(0x7f00001a7000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mremap(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00002bb000/0x1000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002cd000/0x1000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r2) (async)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x3000, 0x2000, &(0x7f00001a7000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
mremap(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00002bb000/0x1000)=nil) (async)

00:18:01 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xac, <r2=>r1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xac, r1, 0x2}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:01 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0)

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 2:
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0xf9002af6e376477d)

00:18:01 executing program 2:
socketpair(0x2, 0x0, 0x7ff, &(0x7f00000011c0))

[  995.380685][ T3267] usb 1-1: new high-speed USB device number 60 using dummy_hcd
00:18:01 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000180)) (async, rerun: 64)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000013c0)={0x0, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x7fffffff00000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x2, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0xffffffff, 0x80000000, 0xacdc, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe463, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]}) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mlock(&(0x7f00002cf000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x7, 0x101, 0x3, 0x454b, 0x8, 0x30, 0x8cd, 0x40, 0xffffffffffffff81, 0x4aaa, 0x9, 0x9cf, 0x8, 0x9, 0x6], 0xd000, 0x9002}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)=0x1000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:18:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:01 executing program 2:
pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xe182}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8})

[  995.750266][ T3267] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  995.920220][ T3267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  995.929307][ T3267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.937648][ T3267] usb 1-1: Product: syz
[  995.942090][ T3267] usb 1-1: Manufacturer: syz
[  995.946802][ T3267] usb 1-1: SerialNumber: syz
[  996.240966][ T3267] cdc_ether: probe of 1-1:1.0 failed with error -22
[  996.257014][ T3267] usb 1-1: USB disconnect, device number 60
00:18:03 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x212080, 0x0)

00:18:03 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f000009d000/0x2000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000270000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:03 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xac, <r2=>r1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xac, r1, 0x2}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:03 executing program 2:
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20002008})

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

00:18:03 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000180)) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000013c0)={0x0, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x7fffffff00000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x2, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0xffffffff, 0x80000000, 0xacdc, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe463, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mlock(&(0x7f00002cf000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x7, 0x101, 0x3, 0x454b, 0x8, 0x30, 0x8cd, 0x40, 0xffffffffffffff81, 0x4aaa, 0x9, 0x9cf, 0x8, 0x9, 0x6], 0xd000, 0x9002}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)=0x1000) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

00:18:03 executing program 0:
prctl$PR_GET_PDEATHSIG(0x22, 0x0)

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

00:18:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

00:18:03 executing program 0:
socketpair(0x10, 0x0, 0x8, &(0x7f0000000180))

00:18:03 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:03 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x3, 0xffffffffffffffff, 0x0)

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)

00:18:03 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6440, 0x0)

00:18:03 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f000009d000/0x2000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000270000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
mremap(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f000009d000/0x2000)=nil) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000270000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:03 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mbind(&(0x7f0000375000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3ff, 0x8, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:03 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x73f7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

00:18:03 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x6}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)

00:18:03 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:03 executing program 0:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000080)={'batadv_slave_1\x00'})

00:18:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)

00:18:03 executing program 0:
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0)

00:18:03 executing program 0:
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0xffffffffffffffff)

00:18:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:03 executing program 4:
pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8})

00:18:03 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f000009d000/0x2000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000270000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
mremap(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f000009d000/0x2000)=nil) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000270000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

[  997.381297][T14225] usb 3-1: new high-speed USB device number 19 using dummy_hcd
00:18:04 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mbind(&(0x7f0000375000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3ff, 0x8, 0x4) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

[  997.760345][T14225] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  997.940700][T14225] usb 3-1: New USB device found, idVendor=0eef, idProduct=73f7, bcdDevice= 0.40
[  997.954590][T14225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  997.971629][T14225] usb 3-1: Product: syz
[  997.980289][T14225] usb 3-1: Manufacturer: syz
[  997.989418][T14225] usb 3-1: SerialNumber: syz
[  998.044254][T14225] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  998.247392][T14225] usb 3-1: USB disconnect, device number 19
00:18:05 executing program 2:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
getdents(r0, 0x0, 0x0)

00:18:05 executing program 4:
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={r0, r1/1000+10000})

00:18:05 executing program 0:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000b40)=@string={0x2}}, {0xb2, &(0x7f0000000b80)=@string={0xb2, 0x3, "7af0fe0dd7e11167eaaeace97f53f15a58ac68c752301d2b811bdaf1ec793d937349c283153b4352a193e17704178b0bac97ccc2cd5e8066ffc21678a8387a1d1e02da3e3cb40c3c50f7b61bb4744511ea24d409f61036c81f21b56085cd5c1113e6f6a2db7b765cc0ef4a1c110d4b3e9a72a35bcaf291e62eef967bd0e3d12fad88770b0f303dc853b56e5d00c6e2d40f6576fa8c86db0a8c2e5314421cea78ed8de2b6a1fee63abeec545f1a0c68d9"}}]})

00:18:05 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:05 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000182000/0x3000)=nil, 0x3000, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x84e7062762721e51, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1}, 0x0, 0x40000000, 0x1}, 0x5)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000241000/0x3000)=nil, &(0x7f0000246000/0x1000)=nil, 0x3000, 0x3})
r5 = pidfd_getfd(r3, r1, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x80000000, 0x4, 0x6, 0x9, 0x1a, "e61ccd2080f73fa30bd78623106abc619cc252"})
mbind(&(0x7f0000269000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000002c0)=0x4, 0x10001, 0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:05 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mbind(&(0x7f0000375000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3ff, 0x8, 0x4) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (rerun: 32)

00:18:05 executing program 4:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000080)={'batadv_slave_1\x00'})

00:18:05 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xd, 0x0, 0x0)

00:18:05 executing program 2:
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0)

00:18:05 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0)

00:18:05 executing program 4:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x7, &(0x7f00000000c0), 0x45)

00:18:05 executing program 2:
syz_genetlink_get_family_id$wireguard(0xfffffffffffffffe, 0xffffffffffffffff)

00:18:05 executing program 4:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000e80))

00:18:05 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000182000/0x3000)=nil, 0x3000, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x84e7062762721e51, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1}, 0x0, 0x40000000, 0x1}, 0x5)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000241000/0x3000)=nil, &(0x7f0000246000/0x1000)=nil, 0x3000, 0x3})
r5 = pidfd_getfd(r3, r1, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x80000000, 0x4, 0x6, 0x9, 0x1a, "e61ccd2080f73fa30bd78623106abc619cc252"})
mbind(&(0x7f0000269000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000002c0)=0x4, 0x10001, 0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
madvise(&(0x7f0000182000/0x3000)=nil, 0x3000, 0xc) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x84e7062762721e51, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1}, 0x0, 0x40000000, 0x1}, 0x5) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000241000/0x3000)=nil, &(0x7f0000246000/0x1000)=nil, 0x3000, 0x3}) (async)
pidfd_getfd(r3, r1, 0x0) (async)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x80000000, 0x4, 0x6, 0x9, 0x1a, "e61ccd2080f73fa30bd78623106abc619cc252"}) (async)
mbind(&(0x7f0000269000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000002c0)=0x4, 0x10001, 0x5) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

[  999.040352][ T3267] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  999.290212][ T3267] usb 1-1: Using ep0 maxpacket: 8
[  999.410261][ T3267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  999.419940][ T3267] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  999.429846][ T3267] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  999.480224][ T3267] usb 1-1: language id specifier not provided by device, defaulting to English
[  999.600889][ T3267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  999.609939][ T3267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.618104][ T3267] usb 1-1: Product: syz
[  999.622364][ T3267] usb 1-1: Manufacturer: ෾朑껪卿嫱걘읨げ⬝ᮁ秬錽䥳菂㬕剃鎡矡ᜄ஋鞬싌廍暀싿砖㢨ᵺȞ㻚됼㰌᮶璴ᅅ⓪৔ჶ젶℟悵춅ᅜꋶ篛屶᱊഑㹋犚宣箖⿑袭୷』젽땓嵮였퓢攏勇蚌૛⺌ᑓ᱂磪跭뛢ﺡ㫦彔చ
[  999.649813][ T3267] usb 1-1: SerialNumber: syz
[  999.912056][ T3267] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  999.931374][ T3267] usb 1-1: USB disconnect, device number 61
[  999.938501][ T3267] usblp0: removed
00:18:06 executing program 0:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000080)={'batadv_slave_1\x00'})

00:18:06 executing program 4:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8)

00:18:06 executing program 2:
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gretap0\x00'})
pipe2(&(0x7f0000000040), 0x0)

00:18:06 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x20000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000000), 0x4, r3, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:06 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:06 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
madvise(&(0x7f0000182000/0x3000)=nil, 0x3000, 0xc) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x84e7062762721e51, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1}, 0x0, 0x40000000, 0x1}, 0x5) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000241000/0x3000)=nil, &(0x7f0000246000/0x1000)=nil, 0x3000, 0x3})
r5 = pidfd_getfd(r3, r1, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x80000000, 0x4, 0x6, 0x9, 0x1a, "e61ccd2080f73fa30bd78623106abc619cc252"}) (async)
mbind(&(0x7f0000269000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000002c0)=0x4, 0x10001, 0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:06 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xc2)

00:18:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)

00:18:06 executing program 2:
socket$inet(0x2, 0x1, 0xa0)

00:18:06 executing program 0:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8)

[ 1000.527702][T30945] binder: 30941:30945 ioctl 40046205 0 returned -22
00:18:06 executing program 0:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3, 0x6, 0x8}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8})

00:18:06 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

00:18:06 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0x4) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:07 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
r2 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x400000, 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000e8dab99234bb312e00000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000e2ffffffffffffff018203040506070b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"])
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', 0x7fffffff})

00:18:07 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)

[ 1000.696960][T30958] bridge_slave_0: mtu greater than device maximum
00:18:07 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x20000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000000), 0x4, r3, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x20000) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000000), 0x4, r3, 0x5}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:07 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, [@mdlm={0x15}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x34, &(0x7f0000000480)={0x5, 0xf, 0x34, 0x4, [@generic={0xa, 0x10, 0x3, "f8fcc85f33cca6"}, @ss_cap={0xa}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}]}, 0x1, [{0x2, &(0x7f0000000300)=@string={0x2}}]})

00:18:07 executing program 0:
socketpair(0xa, 0x1, 0x5, &(0x7f0000000040))

00:18:07 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
munlock(&(0x7f0000206000/0x1000)=nil, 0x1000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x227d, &(0x7f0000000680))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1})
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680))
r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x0, <r7=>0xee01}}, '.\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0xc0, 0x21, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0xc, 0x32, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @fd}]}, @generic="528c265e2892cec9ace02f1258b9d06e428081c91db4e806198d21eda4de34a7c38a81b26a74e638682385f0b0624b0ef5e71104ca97848be57065da56694a8381dee5b834c13e49ed87007f9d425951f232e3d302dfe932d754129c4f67152403133cf8ff20b291f7e0f214fcaf57993af5e0088f6aee8560ae23604f6d8baaadd22837e6d714f9d0b83bd0e70ef2de7451ea7b2aa6a533db873f6e0638661a59bf43d7"]}, 0xc0}], 0x1, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, r2, r3, r4, r5, r6]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}], 0xd4, 0x4004000}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:07 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mprotect(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0x4) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:07 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

00:18:07 executing program 5:
madvise(&(0x7f00003cb000/0x4000)=nil, 0x4000, 0x16)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1000, &(0x7f000003d000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x349040, 0x12)
openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x107e})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/clear_refs\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264)
sendto$inet6(r6, &(0x7f0000000300)="8c170c869249be65c642821c3767bacc09b5eb470282afda70f3596ab8b22d3018eb5682099f3bc36369ac98ced59294599546348aaf2b7822f8546ecda26f8e7acd444dfb1707cfc1a0a6ab5b7d46ac80995cff65c81b92012c21ee8375ac57a644f322f45925ac1cb309b3d066e6447793b57ff31f4aa02cb3b498249f54f2502744b333ea8f70acd9b20ba2badd14cd8f65abf574e7a33f0a51dd2bd97f3ecae258a33f4863f12d9e304a8b2090a0ab29a080c524bc7b7d2ac6", 0xbb, 0x4, &(0x7f00000003c0)={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00', 0x800}, 0x1c)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0x7, 0x3d, 0x0, 0x0, 0x5, 0x2000, 0x100000, '\x00', 0x1000})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000000001a94c5216c499ae80b6f65fa00006a0a000000000000e0ff1f000000f5c7270300000000000000f81b69da6b4832889c92ed84c49d4949901e8feedc03ae317d58fbf888f019fa140872b53c484815f164544f7a1287a59eb13691df05137b6567024266df7d04e23a3e5429b3a9e516ee063e67b583ac77e50a746025ea7dd050e8b67353a1f6a9c019a8391292f965ef81011b386ebd0389453062bb"])

00:18:07 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
munlock(&(0x7f0000206000/0x1000)=nil, 0x1000) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x227d, &(0x7f0000000680)) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1}) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680)) (async)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x0, <r7=>0xee01}}, '.\x00'}) (rerun: 64)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0xc0, 0x21, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0xc, 0x32, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @fd}]}, @generic="528c265e2892cec9ace02f1258b9d06e428081c91db4e806198d21eda4de34a7c38a81b26a74e638682385f0b0624b0ef5e71104ca97848be57065da56694a8381dee5b834c13e49ed87007f9d425951f232e3d302dfe932d754129c4f67152403133cf8ff20b291f7e0f214fcaf57993af5e0088f6aee8560ae23604f6d8baaadd22837e6d714f9d0b83bd0e70ef2de7451ea7b2aa6a533db873f6e0638661a59bf43d7"]}, 0xc0}], 0x1, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, r2, r3, r4, r5, r6]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}], 0xd4, 0x4004000}, 0x4000000) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:07 executing program 0:
socket(0x1e, 0x0, 0x3)

00:18:07 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
munlock(&(0x7f0000206000/0x1000)=nil, 0x1000) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x227d, &(0x7f0000000680)) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1}) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680)) (async)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x0, <r7=>0xee01}}, '.\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0xc0, 0x21, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0xc, 0x32, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @fd}]}, @generic="528c265e2892cec9ace02f1258b9d06e428081c91db4e806198d21eda4de34a7c38a81b26a74e638682385f0b0624b0ef5e71104ca97848be57065da56694a8381dee5b834c13e49ed87007f9d425951f232e3d302dfe932d754129c4f67152403133cf8ff20b291f7e0f214fcaf57993af5e0088f6aee8560ae23604f6d8baaadd22837e6d714f9d0b83bd0e70ef2de7451ea7b2aa6a533db873f6e0638661a59bf43d7"]}, 0xc0}], 0x1, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, r2, r3, r4, r5, r6]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}], 0xd4, 0x4004000}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:07 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000400000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x7}, 0x10)
recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1}}], 0x1, 0x0, 0x0)

[ 1001.550449][    T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd
00:18:07 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fsync(r3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:08 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x20000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000000), 0x4, r3, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x20000) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000000), 0x4, r3, 0x5}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

[ 1001.990322][    T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1002.040485][    T7] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1002.170554][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1002.179724][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.188042][    T7] usb 3-1: Product: syz
[ 1002.192419][    T7] usb 3-1: Manufacturer: syz
[ 1002.197004][    T7] usb 3-1: SerialNumber: syz
[ 1002.242268][    T7] cdc_ether: probe of 3-1:1.0 failed with error -22
[ 1002.447356][ T3696] usb 3-1: USB disconnect, device number 20
00:18:09 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r0)

00:18:09 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

00:18:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fsync(r3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
fsync(r3) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:09 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)

00:18:09 executing program 5:
madvise(&(0x7f00003cb000/0x4000)=nil, 0x4000, 0x16)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1000, &(0x7f000003d000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x349040, 0x12) (async, rerun: 64)
openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x107e})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 64)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/clear_refs\x00', 0x1, 0x0) (rerun: 64)
sendfile(r7, r6, 0x0, 0x264) (async, rerun: 32)
sendto$inet6(r6, &(0x7f0000000300)="8c170c869249be65c642821c3767bacc09b5eb470282afda70f3596ab8b22d3018eb5682099f3bc36369ac98ced59294599546348aaf2b7822f8546ecda26f8e7acd444dfb1707cfc1a0a6ab5b7d46ac80995cff65c81b92012c21ee8375ac57a644f322f45925ac1cb309b3d066e6447793b57ff31f4aa02cb3b498249f54f2502744b333ea8f70acd9b20ba2badd14cd8f65abf574e7a33f0a51dd2bd97f3ecae258a33f4863f12d9e304a8b2090a0ab29a080c524bc7b7d2ac6", 0xbb, 0x4, &(0x7f00000003c0)={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00', 0x800}, 0x1c) (async, rerun: 32)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0x7, 0x3d, 0x0, 0x0, 0x5, 0x2000, 0x100000, '\x00', 0x1000}) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000000001a94c5216c499ae80b6f65fa00006a0a000000000000e0ff1f000000f5c7270300000000000000f81b69da6b4832889c92ed84c49d4949901e8feedc03ae317d58fbf888f019fa140872b53c484815f164544f7a1287a59eb13691df05137b6567024266df7d04e23a3e5429b3a9e516ee063e67b583ac77e50a746025ea7dd050e8b67353a1f6a9c019a8391292f965ef81011b386ebd0389453062bb"])

00:18:09 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, r3)
pkey_mprotect(&(0x7f0000503000/0x3000)=nil, 0x3000, 0xc, r3)
pkey_mprotect(&(0x7f0000648000/0x4000)=nil, 0x4000, 0x200000b, r3)
pkey_mprotect(&(0x7f00003c1000/0x14000)=nil, 0x14000, 0x0, r3)
r4 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00002d0000/0x4000)=nil, 0x4000, 0x2000004, r4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:09 executing program 0:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x9, &(0x7f00000000c0), 0x45)

00:18:09 executing program 2:
pipe2(0x0, 0x40880)

00:18:09 executing program 5:
madvise(&(0x7f00003cb000/0x4000)=nil, 0x4000, 0x16) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1000, &(0x7f000003d000/0x1000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x349040, 0x12) (async, rerun: 32)
openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x107e})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/clear_refs\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x264) (async)
sendto$inet6(r6, &(0x7f0000000300)="8c170c869249be65c642821c3767bacc09b5eb470282afda70f3596ab8b22d3018eb5682099f3bc36369ac98ced59294599546348aaf2b7822f8546ecda26f8e7acd444dfb1707cfc1a0a6ab5b7d46ac80995cff65c81b92012c21ee8375ac57a644f322f45925ac1cb309b3d066e6447793b57ff31f4aa02cb3b498249f54f2502744b333ea8f70acd9b20ba2badd14cd8f65abf574e7a33f0a51dd2bd97f3ecae258a33f4863f12d9e304a8b2090a0ab29a080c524bc7b7d2ac6", 0xbb, 0x4, &(0x7f00000003c0)={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00', 0x800}, 0x1c) (async)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0x7, 0x3d, 0x0, 0x0, 0x5, 0x2000, 0x100000, '\x00', 0x1000}) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000000001a94c5216c499ae80b6f65fa00006a0a000000000000e0ff1f000000f5c7270300000000000000f81b69da6b4832889c92ed84c49d4949901e8feedc03ae317d58fbf888f019fa140872b53c484815f164544f7a1287a59eb13691df05137b6567024266df7d04e23a3e5429b3a9e516ee063e67b583ac77e50a746025ea7dd050e8b67353a1f6a9c019a8391292f965ef81011b386ebd0389453062bb"])

00:18:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fsync(r3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
fsync(r3) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:09 executing program 0:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0)

00:18:09 executing program 2:
prctl$PR_GET_PDEATHSIG(0x39, &(0x7f0000000040))

00:18:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:09 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

00:18:09 executing program 0:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x1c, &(0x7f00000000c0), 0x45)

00:18:09 executing program 2:
unshare(0x400)
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

00:18:09 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, r3)
pkey_mprotect(&(0x7f0000503000/0x3000)=nil, 0x3000, 0xc, r3) (async, rerun: 32)
pkey_mprotect(&(0x7f0000648000/0x4000)=nil, 0x4000, 0x200000b, r3) (rerun: 32)
pkey_mprotect(&(0x7f00003c1000/0x14000)=nil, 0x14000, 0x0, r3)
r4 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00002d0000/0x4000)=nil, 0x4000, 0x2000004, r4) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (rerun: 64)

00:18:09 executing program 0:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff)

00:18:09 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xc400, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000008f000/0x2000)=nil, &(0x7f000014b000/0x3000)=nil, 0x2000, 0x3})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000375000/0xd000)=nil, 0xd000, 0x4000, 0x7, &(0x7f00002ab000/0x4000)=nil)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile64(r3, r1, &(0x7f0000000040)=0x4, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

00:18:09 executing program 0:
getgroups(0x1, &(0x7f0000000100)=[0xee01])

00:18:09 executing program 2:
r0 = socket$inet(0xa, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002a00)={'batadv_slave_0\x00'})

00:18:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:09 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0x11, 0x0, 0x0)

00:18:09 executing program 2:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)

00:18:09 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, r3)
pkey_mprotect(&(0x7f0000503000/0x3000)=nil, 0x3000, 0xc, r3)
pkey_mprotect(&(0x7f0000648000/0x4000)=nil, 0x4000, 0x200000b, r3)
pkey_mprotect(&(0x7f00003c1000/0x14000)=nil, 0x14000, 0x0, r3)
r4 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f00002d0000/0x4000)=nil, 0x4000, 0x2000004, r4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
pkey_alloc(0x0, 0x3) (async)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, r3) (async)
pkey_mprotect(&(0x7f0000503000/0x3000)=nil, 0x3000, 0xc, r3) (async)
pkey_mprotect(&(0x7f0000648000/0x4000)=nil, 0x4000, 0x200000b, r3) (async)
pkey_mprotect(&(0x7f00003c1000/0x14000)=nil, 0x14000, 0x0, r3) (async)
pkey_alloc(0x0, 0x2) (async)
pkey_mprotect(&(0x7f00002d0000/0x4000)=nil, 0x4000, 0x2000004, r4) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4)

00:18:09 executing program 2:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x14, &(0x7f00000000c0), 0x45)

00:18:09 executing program 4:
setitimer(0x2, &(0x7f0000000200)={{}, {0x0, 0x2710}}, &(0x7f0000000240))

00:18:09 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xc400, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000008f000/0x2000)=nil, &(0x7f000014b000/0x3000)=nil, 0x2000, 0x3})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000375000/0xd000)=nil, 0xd000, 0x4000, 0x7, &(0x7f00002ab000/0x4000)=nil) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile64(r3, r1, &(0x7f0000000040)=0x4, 0x3) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32)

00:18:09 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))

00:18:10 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0x22, &(0x7f0000000200)={0x10}, 0x8)

00:18:10 executing program 0:
select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x5}, 0x0, &(0x7f0000000140))

00:18:10 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x0, 0x40002)
write$FUSE_POLL(r0, &(0x7f0000000240)={0x18}, 0x20000258)
pipe2(&(0x7f0000005100), 0x0)

00:18:10 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680))
r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r7, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x6000, 0x1000, &(0x7f0000155000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

00:18:10 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x264)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x4000, r3}, 0x0)

00:18:10 executing program 0:
prctl$PR_GET_PDEATHSIG(0x34, &(0x7f0000000040))

00:18:10 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xc400, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000008f000/0x2000)=nil, &(0x7f000014b000/0x3000)=nil, 0x2000, 0x3})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000375000/0xd000)=nil, 0xd000, 0x4000, 0x7, &(0x7f00002ab000/0x4000)=nil)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile64(r3, r1, &(0x7f0000000040)=0x4, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xc400, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000008f000/0x2000)=nil, &(0x7f000014b000/0x3000)=nil, 0x2000, 0x3}) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
mremap(&(0x7f0000375000/0xd000)=nil, 0xd000, 0x4000, 0x7, &(0x7f00002ab000/0x4000)=nil) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
sendfile64(r3, r1, &(0x7f0000000040)=0x4, 0x3) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

00:18:10 executing program 0:
prctl$PR_GET_PDEATHSIG(0x3d, 0x0)

00:18:10 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200302, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)

00:18:10 executing program 4:
select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x1}, &(0x7f0000000140))

00:18:10 executing program 0:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0xffff)
bpf$BPF_PROG_GET_NEXT_ID(0x22, &(0x7f00000000c0), 0x45)

00:18:10 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x5e4]}, 0x45c)

00:18:10 executing program 0:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, [@mdlm={0x15}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x34, &(0x7f0000000480)={0x5, 0xf, 0x34, 0x4, [@generic={0xa, 0x10, 0x3, "f8fcc85f33cca6"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}, @ss_cap={0xa}]}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:18:10 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680)) (async)
r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r7, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x6000, 0x1000, &(0x7f0000155000/0x1000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

[ 1004.310175][ T3696] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1004.790227][ T3696] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1004.960465][ T3696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1004.969552][ T3696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.981282][ T3696] usb 1-1: Product: syz
[ 1004.985485][ T3696] usb 1-1: Manufacturer: syz
[ 1004.992413][ T3696] usb 1-1: SerialNumber: syz
[ 1005.250956][ T3696] cdc_ether: probe of 1-1:1.0 failed with error -22
[ 1005.465015][ T3696] usb 1-1: USB disconnect, device number 62
00:18:16 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:16 executing program 4:
unshare(0x80)

00:18:16 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x6438, 0x10, 0x2, 0x186}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000000e000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
dup(r0)
openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
openat$bsg(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180), 0x101282, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
write(r4, &(0x7f0000000000)="1037f7f72aac2eef9782f3c8b7919f", 0xf)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:16 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680)) (async)
r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000013c0)={r7, 0x0, 0x1, [0x0, 0x400, 0xd08, 0x0, 0x6], [0x1, 0x1f, 0x708, 0x1000, 0x9, 0x1, 0xdb, 0x4f0, 0x1ff, 0x1, 0x6f6, 0x8, 0x0, 0x101, 0x40, 0xce, 0x1ff, 0x0, 0x7, 0x100000001, 0x1000, 0xb911, 0x7, 0xe8b, 0x3, 0x1, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xf7b, 0x0, 0xfffffffffffffd2a, 0x9, 0x8000, 0x0, 0x3ff, 0x2, 0x8, 0x1, 0x4, 0x4, 0x1, 0x7b04bcf5000000, 0x2, 0xff, 0xfe, 0x7, 0x80, 0x936, 0x3ff, 0x7f, 0x3, 0x4, 0xe7ae, 0xe000000000, 0x8, 0x6, 0x7f, 0x5, 0x80000000, 0xacde, 0x2, 0x0, 0x7fff, 0xfffffffffffffff9, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x6, 0x7fffffff0, 0x80000000, 0x6, 0x4, 0x9, 0xfff, 0x9, 0xffff, 0x3, 0x8000, 0x9, 0x2000000000000003, 0x6, 0x3, 0x866, 0x7fffffff, 0x200, 0xe462, 0x5, 0x0, 0x2ea5, 0x200, 0xfffffffffffffffd, 0x1, 0x8, 0x7a, 0x3, 0x3ff, 0x9, 0x4d, 0x8, 0x483, 0xfffffffffffff9ad, 0x8, 0x2, 0x99ce, 0x9, 0x7fffffff, 0x401]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x6000, 0x1000, &(0x7f0000155000/0x1000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

00:18:16 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x264)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x4000, r3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r5, r4, 0x0, 0x264) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x4000, r3}, 0x0) (async)

00:18:16 executing program 0:
syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x84842)

00:18:16 executing program 0:
clock_gettime(0x2, 0x0)
unshare(0x42020000)

00:18:16 executing program 4:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x0, 0x0)

00:18:16 executing program 2:
prctl$PR_GET_PDEATHSIG(0xf, 0x0)

00:18:16 executing program 0:
socketpair(0x0, 0x1003, 0x0, 0x0)

00:18:16 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

00:18:16 executing program 2:
socketpair(0x10, 0x0, 0x5, &(0x7f0000000080))

00:18:16 executing program 4:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000001c0))
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))

00:18:17 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats\x00')
openat(r1, &(0x7f0000000080)='./file0\x00', 0x28200, 0x10)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:17 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x100, 0x35e, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)

00:18:17 executing program 4:
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x9ba355804b994da0)

00:18:17 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x264)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x4000, r3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r5, r4, 0x0, 0x264) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x4000, r3}, 0x0) (async)

00:18:17 executing program 0:
poll(0x0, 0x0, 0x200006)

00:18:17 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
syz_io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x6438, 0x10, 0x2, 0x186}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000000e000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
dup(r0)
openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async)
openat$bsg(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180), 0x101282, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
write(r4, &(0x7f0000000000)="1037f7f72aac2eef9782f3c8b7919f", 0xf) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:17 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats\x00') (async)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x28200, 0x10) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:17 executing program 4:
io_setup(0x20, &(0x7f0000000000)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})

00:18:17 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @private2}}}, 0x3a)

00:18:17 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:17 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 32)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats\x00') (rerun: 32)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x28200, 0x10) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:17 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
syz_io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x6438, 0x10, 0x2, 0x186}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000000e000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
dup(r0) (async)
openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
openat$bsg(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180), 0x101282, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
write(r4, &(0x7f0000000000)="1037f7f72aac2eef9782f3c8b7919f", 0xf) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:17 executing program 4:
bpf$MAP_CREATE(0x9, &(0x7f0000000000), 0x48)

00:18:17 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:17 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x8336, 0x400)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x10)
r6 = socket$inet(0x2, 0x4, 0xfd1c)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680))
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000680))
dup3(0xffffffffffffffff, r3, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000313000/0x3000)=nil, &(0x7f0000265000/0x4000)=nil, &(0x7f0000051000/0x2000)=nil, &(0x7f00003a5000/0x1000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000221000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00002ca000/0x4000)=nil, &(0x7f0000000140), 0x0, r8}, 0x64)
poll(&(0x7f00000000c0)=[{r3}, {r4, 0x7220}, {r5, 0x8028}, {r6, 0x4}, {r7, 0x20e}], 0x5, 0x9)

00:18:17 executing program 3:
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x1001, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x10)

00:18:18 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:18 executing program 2:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "eb3ee3", 0x0, "1b25e1"}}}}}}, 0x0)

00:18:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x30}}, 0x0)

00:18:18 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:18 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x8336, 0x400)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async, rerun: 32)
r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x10) (async)
r6 = socket$inet(0x2, 0x4, 0xfd1c)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680)) (async)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000680)) (async)
dup3(0xffffffffffffffff, r3, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000313000/0x3000)=nil, &(0x7f0000265000/0x4000)=nil, &(0x7f0000051000/0x2000)=nil, &(0x7f00003a5000/0x1000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000221000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00002ca000/0x4000)=nil, &(0x7f0000000140), 0x0, r8}, 0x64) (async, rerun: 32)
poll(&(0x7f00000000c0)=[{r3}, {r4, 0x7220}, {r5, 0x8028}, {r6, 0x4}, {r7, 0x20e}], 0x5, 0x9) (rerun: 32)

00:18:18 executing program 3:
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x1001, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x10) (rerun: 64)

00:18:18 executing program 4:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

00:18:18 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:18 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x40002062, 0x0)

00:18:18 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x8336, 0x400)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x10)
r6 = socket$inet(0x2, 0x4, 0xfd1c)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680))
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000680))
dup3(0xffffffffffffffff, r3, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000313000/0x3000)=nil, &(0x7f0000265000/0x4000)=nil, &(0x7f0000051000/0x2000)=nil, &(0x7f00003a5000/0x1000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000221000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00002ca000/0x4000)=nil, &(0x7f0000000140), 0x0, r8}, 0x64)
poll(&(0x7f00000000c0)=[{r3}, {r4, 0x7220}, {r5, 0x8028}, {r6, 0x4}, {r7, 0x20e}], 0x5, 0x9)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x8336, 0x400) (async)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x10) (async)
socket$inet(0x2, 0x4, 0xfd1c) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000680)) (async)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000680)) (async)
dup3(0xffffffffffffffff, r3, 0x80000) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000313000/0x3000)=nil, &(0x7f0000265000/0x4000)=nil, &(0x7f0000051000/0x2000)=nil, &(0x7f00003a5000/0x1000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000221000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f00002ca000/0x4000)=nil, &(0x7f0000000140), 0x0, r8}, 0x64) (async)
poll(&(0x7f00000000c0)=[{r3}, {r4, 0x7220}, {r5, 0x8028}, {r6, 0x4}, {r7, 0x20e}], 0x5, 0x9) (async)

00:18:18 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:18 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}})

00:18:18 executing program 0:
syz_emit_ethernet(0x79, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}, {"e4ea7d"}}}}}}, 0x0)

00:18:18 executing program 0:
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @multicast, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @broadcast, @local, @broadcast}}}}, 0x0)

00:18:18 executing program 3:
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x1001, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x10)

00:18:18 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000300), 0x4)

00:18:18 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:18:18 executing program 0:
socketpair(0x14, 0x0, 0x0, &(0x7f0000001080))

[ 1012.040354][    T7] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1012.150175][ T3696] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1012.290159][    T7] usb 5-1: Using ep0 maxpacket: 16
[ 1012.390361][ T3696] usb 3-1: Using ep0 maxpacket: 16
[ 1012.430384][    T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1012.439233][    T7] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1012.449619][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1012.590250][ T3696] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1012.599522][ T3696] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1012.609770][ T3696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1012.640355][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1012.649437][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.657506][    T7] usb 5-1: Product: syz
[ 1012.661754][    T7] usb 5-1: Manufacturer: syz
[ 1012.666357][    T7] usb 5-1: SerialNumber: syz
[ 1012.770259][ T3696] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1012.779341][ T3696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.787733][ T3696] usb 3-1: Product: syz
[ 1012.792130][ T3696] usb 3-1: Manufacturer: syz
[ 1012.796714][ T3696] usb 3-1: SerialNumber: syz
[ 1013.020363][    T7] usb 5-1: 0:2 : does not exist
[ 1013.035808][    T7] usb 5-1: USB disconnect, device number 106
[ 1013.120353][ T3696] usb 3-1: 0:2 : does not exist
[ 1013.136627][ T3696] usb 3-1: USB disconnect, device number 21
00:18:19 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:19 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:19 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
mmap$snddsp_status(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x4010, r1, 0x82000000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mremap(&(0x7f000023d000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000183000/0x1000)=nil)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400800, 0x54)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100002)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:19 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}})

00:18:19 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

00:18:19 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000300), 0x4)

00:18:19 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:19 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:19 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x3}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:19 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0)

00:18:19 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x11800, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:19 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:19 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
mmap$snddsp_status(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x4010, r1, 0x82000000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mremap(&(0x7f000023d000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000183000/0x1000)=nil) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400800, 0x54)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100002) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64)

00:18:20 executing program 2:
pipe2(&(0x7f0000002100)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x4020940d)

00:18:20 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)

00:18:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fallocate(r0, 0x60, 0x0, 0x3ff)

00:18:20 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x2, 0x100000, 0x2000, &(0x7f00003d8000/0x2000)=nil})
mincore(&(0x7f00000c9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/251)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
mmap$snddsp_status(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x4010, r1, 0x82000000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mremap(&(0x7f000023d000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000183000/0x1000)=nil)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400800, 0x54)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100002)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
mmap$snddsp_status(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x4010, r1, 0x82000000) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mremap(&(0x7f000023d000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000183000/0x1000)=nil) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400800, 0x54) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100002) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:20 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:20 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), 0x0, 0x0, 0x3)

00:18:20 executing program 4:
process_madvise(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0)

00:18:20 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:20 executing program 0:
r0 = epoll_create1(0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x10, r0, 0x0)

00:18:20 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x20}}, 0x0)

00:18:20 executing program 4:
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, r1)

00:18:20 executing program 2:
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x8847, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

00:18:20 executing program 0:
r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xf5ffffffffffffff)

00:18:20 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x2, 0x100000, 0x2000, &(0x7f00003d8000/0x2000)=nil})
mincore(&(0x7f00000c9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/251)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x2, 0x100000, 0x2000, &(0x7f00003d8000/0x2000)=nil}) (async)
mincore(&(0x7f00000c9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/251) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:20 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000126000/0x2000)=nil, 0x2000, 0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:20 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev, {[@rr={0x7, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

00:18:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)=ANY=[@ANYBLOB="28140000", @ANYRES16], 0x1428}, 0x300}, 0x0)

00:18:20 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random="cb53a2c2d335", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9a2717", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0)

00:18:20 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$xdp(&(0x7f0000095000/0x2000)=nil, 0x2000, 0x2, 0x2010, r4, 0x100000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f000035c000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000185000/0x4000)=nil)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x40}}, './file0\x00'})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:20 executing program 4:
mknod(&(0x7f0000000180)='./file0\x00', 0x8835, 0x0)

00:18:20 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x9}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:20 executing program 2:
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xb46da3983312c9c4, 0x0)

00:18:20 executing program 4:
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "48a6344505f46d2d7fa41aec6a0f182bd8eda71d48cfdaaa1478fd57fa3d7999de05b5a4ac3048f3062b523b0398872b3bc406b7a0b4d55a5bf6748d86cb88b5"}, 0x48, 0xfffffffffffffffd)

00:18:20 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)

00:18:20 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/165, &(0x7f0000000080)=0xa5)

00:18:20 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x2, 0x100000, 0x2000, &(0x7f00003d8000/0x2000)=nil}) (async, rerun: 32)
mincore(&(0x7f00000c9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/251) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:21 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
madvise(&(0x7f0000126000/0x2000)=nil, 0x2000, 0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64)

00:18:21 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0)

00:18:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1428}}, 0x0)

00:18:21 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x68000000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:21 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:21 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap$xdp(&(0x7f0000095000/0x2000)=nil, 0x2000, 0x2, 0x2010, r4, 0x100000000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f000035c000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000185000/0x4000)=nil) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x40}}, './file0\x00'})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:21 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x300c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48)

00:18:21 executing program 4:
io_setup(0xee, &(0x7f0000000680))
io_setup(0x1, &(0x7f0000000040))
io_setup(0x1, &(0x7f00000000c0))

00:18:21 executing program 2:
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, &(0x7f00000000c0)=""/26, 0x1a)

00:18:21 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)

00:18:21 executing program 2:
r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "a48a593e55508cdcd00d14c437cd4d5b8e309835a66ab7e3a6df133ebcd57be20b1982e4330c98150e4f54c8873c054633e03723f4e061d7edb671579f3df5cf"}, 0x48, r0)

00:18:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8)

00:18:21 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
madvise(&(0x7f0000126000/0x2000)=nil, 0x2000, 0x4) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:21 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xffffff04})

00:18:21 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xb}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:21 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:18:21 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:21 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap$xdp(&(0x7f0000095000/0x2000)=nil, 0x2000, 0x2, 0x2010, r4, 0x100000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f000035c000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000185000/0x4000)=nil) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x40}}, './file0\x00'})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:21 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0xffffffff, 0x8, 0x140}, 0x48)

00:18:21 executing program 2:
io_setup(0xee, &(0x7f0000000680)=<r0=>0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2, 0x0, r1, 0x0}])

00:18:21 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x57}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "eb3ee3", 0x0, "1b25e1"}}}}}}, 0x0)

00:18:21 executing program 4:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10480, 0x0)

00:18:21 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@link_local, @empty, @void, {@ipv4={0x8906, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @loopback}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0)

00:18:21 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:21 executing program 0:
socket(0x10, 0x2, 0xfa1b)

00:18:21 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080), 0x4)

00:18:21 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x120, 0x258, 0xffffffff, 0x258, 0x258, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv4=@multicast1, @gre_key}}}, {{@ipv6={@local, @local, [], [], 'syzkaller0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x8}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private0, @icmp_id, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}, {{@ipv6={@loopback, @remote, [], [], 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f7]}}, @common=@mh={{0x28}, {'o6'}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@mcast2, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)

00:18:21 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
mmap(&(0x7f0000104000/0x1000)=nil, 0x1000, 0x100000a, 0x80010, r1, 0x9f102000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:21 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:21 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:21 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0)

00:18:21 executing program 2:
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x57}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "eb3ee3", 0x0, "1b25e1"}}}}}}, 0x0)

00:18:21 executing program 4:
syz_emit_ethernet(0xf4, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev, {[@generic={0x0, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x22, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {"e4ea7dab12f7ec607c1923b582b201a6531097b22b2ad2556c96db3620e8a3c495a2b41a8cc44e68a22caa75bb1410d85e27ef55209d53351e5d83eb40e8f1d3987e158d0b1c4888945c8e7d4c3d9f39ec7991fcd6adcfc6b7f14e13a2bfc908554a2a04e723874b70b7"}}}}}}, 0x0)

00:18:21 executing program 0:
pipe2(&(0x7f0000002100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0)

00:18:21 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={&(0x7f0000000080)='\x00'}, 0xff1a)

00:18:22 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:22 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000780)=0x10001)

00:18:22 executing program 2:
prctl$PR_SET_SECCOMP(0x36, 0x0, 0x0)

00:18:22 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x57}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x120, 0x258, 0xffffffff, 0x258, 0x258, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x4d4], 0x7, 0x4, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@multicast1, @gre_key}}}, {{@ipv6={@local, @local, [0xffffffff, 0xffffff00], [0xc8e32cd7475b00d2, 0xffffff00, 0xff, 0xff000000], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000, 0x0, 0x5, 0xf2c6, 0x5, 0x0, 0x0, 0x0, 0x8, 0x1ff, 0x40, 0x4]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private0, @icmp_id=0x64, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0xff, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id}}}, {{@ipv6={@loopback, @remote, [], [0xffffff00], 'bridge_slave_1\x00', 'bridge_slave_0\x00', {}, {0xff}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x2, 0x0, [0x0, 0x0, 0x8, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ed2, 0x0, 0x0, 0x0, 0x0, 0x101]}}, @common=@mh={{0x28}, {'o6'}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@mcast2, @port=0x4e23, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)

00:18:22 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1000000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:22 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x2}, {0x4}, {0x6}]})

00:18:22 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
mmap(&(0x7f0000104000/0x1000)=nil, 0x1000, 0x100000a, 0x80010, r1, 0x9f102000) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:22 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x509801, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '\\'}], 0xa, "d2c8dae2020f3c24708a8dc5b446752276b97b69f518"}, 0x2d)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:22 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x31)
clock_gettime(0x1, &(0x7f00000000c0))

00:18:22 executing program 4:
syz_emit_ethernet(0xeb, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev, {[@generic={0x0, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {"e4ea7dab12f7ec607c1923b582b201a6531097b22b2ad2556c96db3620e8a3c495a2b41a8cc44e68a22caa75bb1410d85e27ef55209d53351e5d83eb40e8f1d3987e158d0b1c4888945c8e7d4c3d9f39ec7991fcd6adcfc6b7f14e13a2bfc908554a2a04e7"}}}}}}, 0x0)

00:18:22 executing program 4:
socketpair(0x1, 0x4, 0x0, &(0x7f0000000180))

[ 1016.304452][   T26] audit: type=1326 audit(1667434702.656:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31635 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f40549 code=0x0
00:18:22 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:22 executing program 2:
add_key(&(0x7f0000001080)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "48a6344505f46d2d7fa41aec6a0f182bd8eda71d48cfdaaa1478fd57fa3d7999de05b5a4ac3048f3062b523b0398872b3bc406b7a0b4d55a5bf6748d86cb88b5"}, 0x48, 0xfffffffffffffffd)
keyctl$unlink(0x9, 0x0, r0)

00:18:22 executing program 0:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x23, &(0x7f0000000240)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7}, @generic={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "96aec779189df44294436fa77dfaf5b2"}]}})

00:18:22 executing program 4:
io_setup(0x20, &(0x7f0000000000)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:18:22 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002062, 0x0)

00:18:22 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x509801, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '\\'}], 0xa, "d2c8dae2020f3c24708a8dc5b446752276b97b69f518"}, 0x2d) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:22 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)

[ 1016.740292][    T7] usb 1-1: new high-speed USB device number 63 using dummy_hcd
00:18:23 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:23 executing program 4:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)

00:18:23 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
mmap(&(0x7f0000104000/0x1000)=nil, 0x1000, 0x100000a, 0x80010, r1, 0x9f102000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x264)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680)) (async)
mmap(&(0x7f0000104000/0x1000)=nil, 0x1000, 0x100000a, 0x80010, r1, 0x9f102000) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r4, r3, 0x0, 0x264) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)

00:18:23 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x509801, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '\\'}], 0xa, "d2c8dae2020f3c24708a8dc5b446752276b97b69f518"}, 0x2d) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:23 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

00:18:23 executing program 4:
bpf$OBJ_GET_PROG(0x2, &(0x7f0000000000)={&(0x7f00000002c0)='./file0\x00'}, 0x1)

00:18:23 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKPG(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

[ 1016.980155][    T7] usb 1-1: Using ep0 maxpacket: 16
[ 1017.180258][    T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1017.189073][    T7] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1017.199705][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1017.361818][    T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1017.370934][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.378921][    T7] usb 1-1: Product: syz
[ 1017.383141][    T7] usb 1-1: Manufacturer: syz
[ 1017.387751][    T7] usb 1-1: SerialNumber: syz
[ 1017.710772][    T7] usb 1-1: 0:2 : does not exist
[ 1017.724028][    T7] usb 1-1: USB disconnect, device number 63
00:18:24 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x103402)

00:18:24 executing program 2:
syz_emit_ethernet(0x23b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000800450b022d00660000812f"], 0x0)

00:18:24 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

00:18:24 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x5, 0x0, 0x6, 0x0, @rand_addr, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

00:18:24 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000009c000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1, {0x4}}, './file0\x00'})
r5 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x10200, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000040f23f8f4baf80c66b81a1be48966efbafc0ced66b9800000c00f326635010000000f30f30faef7660ff4da0f20c06635000004000f22c00f08260f01caf3650f209f", 0x54}], 0x1, 0x40, &(0x7f0000000240)=[@efer], 0x1)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=""/26)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

00:18:24 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async, rerun: 32)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

00:18:24 executing program 2:
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty, {[@end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

00:18:24 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x6, 0x1, 0x4, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)

00:18:24 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0xfff, 0x0, 0x4}, 0x48)

00:18:24 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)

00:18:24 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0)

00:18:24 executing program 2:
pipe2(&(0x7f0000002100)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0189436)

00:18:24 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in6=@empty}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8)

00:18:24 executing program 4:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb00100000000008004500002c000000000029"], 0x0)

00:18:24 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

00:18:24 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:25 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000009c000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1, {0x4}}, './file0\x00'})
r5 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x10200, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000040f23f8f4baf80c66b81a1be48966efbafc0ced66b9800000c00f326635010000000f30f30faef7660ff4da0f20c06635000004000f22c00f08260f01caf3650f209f", 0x54}], 0x1, 0x40, &(0x7f0000000240)=[@efer], 0x1)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=""/26)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000009c000/0x1000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r3, r2, 0x0, 0x264) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async)
openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x10200, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000040f23f8f4baf80c66b81a1be48966efbafc0ced66b9800000c00f326635010000000f30f30faef7660ff4da0f20c06635000004000f22c00f08260f01caf3650f209f", 0x54}], 0x1, 0x40, &(0x7f0000000240)=[@efer], 0x1) (async)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=""/26) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)

00:18:25 executing program 0:
socketpair(0x11, 0xa, 0x2521d7a3, &(0x7f0000000280))

00:18:25 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

00:18:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

00:18:25 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

00:18:25 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000140))

00:18:25 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect(r0, &(0x7f0000000040)=@ethernet={0x0, @local}, 0x80)

00:18:25 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0)

00:18:25 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4d7dae5b, 0xf367, 0x610f, 0x5, 0x800, 0xff, 0xfffffffffffffffa, 0x8000000000000001, 0xffffff0000000000, 0xfffffffffffffffa, 0x27, 0x3ff, 0x3, 0x4, 0x200000000000, 0x7], 0x4, 0x1402})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@ptr={0x2}]}, {0x0, [0x0, 0x2e, 0x30, 0x30, 0x2e, 0x61]}}, &(0x7f0000000980)=""/130, 0x2c, 0x82, 0x1}, 0x20)

00:18:25 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0)

00:18:25 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22048881, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00']}, 0x158)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f00000000c0)=0xc, 0x4)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8)

00:18:25 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000009c000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x264)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1, {0x4}}, './file0\x00'})
r5 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x10200, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000040f23f8f4baf80c66b81a1be48966efbafc0ced66b9800000c00f326635010000000f30f30faef7660ff4da0f20c06635000004000f22c00f08260f01caf3650f209f", 0x54}], 0x1, 0x40, &(0x7f0000000240)=[@efer], 0x1)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=""/26)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000009c000/0x1000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r3, r2, 0x0, 0x264) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async)
openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x10200, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000040f23f8f4baf80c66b81a1be48966efbafc0ced66b9800000c00f326635010000000f30f30faef7660ff4da0f20c06635000004000f22c00f08260f01caf3650f209f", 0x54}], 0x1, 0x40, &(0x7f0000000240)=[@efer], 0x1) (async)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=""/26) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)

00:18:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000980)=""/130, 0x2e, 0x82, 0x1}, 0x20)

00:18:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)

00:18:25 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10)
munmap(&(0x7f00001ba000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
munlock(&(0x7f00003ab000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00002eb000/0x4000)=nil)
r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40040)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
msync(&(0x7f000028a000/0x2000)=nil, 0x2000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f000029b000/0x2000)=nil})
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f00002b9000/0x2000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0)
shmat(r3, &(0x7f0000397000/0x4000)=nil, 0x5000)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

00:18:25 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4d7dae5b, 0xf367, 0x610f, 0x5, 0x800, 0xff, 0xfffffffffffffffa, 0x8000000000000001, 0xffffff0000000000, 0xfffffffffffffffa, 0x27, 0x3ff, 0x3, 0x4, 0x200000000000, 0x7], 0x4, 0x1402}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x8041)

00:18:25 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@private0, 0x0, 0x0, 0x0, 0x5}, 0x20)

00:18:25 executing program 4:
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000a40))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)

00:18:25 executing program 2:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff)

[ 1019.185247][T31848] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
00:18:25 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4d7dae5b, 0xf367, 0x610f, 0x5, 0x800, 0xff, 0xfffffffffffffffa, 0x8000000000000001, 0xffffff0000000000, 0xfffffffffffffffa, 0x27, 0x3ff, 0x3, 0x4, 0x200000000000, 0x7], 0x4, 0x1402})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4d7dae5b, 0xf367, 0x610f, 0x5, 0x800, 0xff, 0xfffffffffffffffa, 0x8000000000000001, 0xffffff0000000000, 0xfffffffffffffffa, 0x27, 0x3ff, 0x3, 0x4, 0x200000000000, 0x7], 0x4, 0x1402}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

00:18:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

00:18:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4(r0, 0x0, 0x0, 0xc00)

00:18:25 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)={0xd04, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "0978b544cf9c5aa119d017cb4a0ea3ac0821bd8080c84f47df7be55afa228779459ee95b4cc1af6514a909d9fff3ad023494ffcb4ae602e9a539154857e0d8863b00665f804b19dc5adb8696ca75dcdf5c7095672976cf05b03362692c98eccb0148dde63e2ee83efb5e7cefa61ddeb8e9641867071a4e05c0825496d54b255ccc4bafd3a0576f5d0643a948c593d9b9a119cc914361c82fd818616339e2b794d659adb1317593dc082689b1dec3461421d5b681f00bea41154f7474ce7e53c11d1ed24797f6ab69869a3b2dd363cd3849"}, @INET_DIAG_REQ_BYTECODE={0xbdd, 0x1, "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"}]}, 0xd04}}, 0x0)

00:18:25 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x0, 0xc66eaec28e17470c)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:26 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10)
munmap(&(0x7f00001ba000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
munlock(&(0x7f00003ab000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00002eb000/0x4000)=nil)
r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40040)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
msync(&(0x7f000028a000/0x2000)=nil, 0x2000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f000029b000/0x2000)=nil})
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f00002b9000/0x2000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0)
shmat(r3, &(0x7f0000397000/0x4000)=nil, 0x5000)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) (async)
munmap(&(0x7f00001ba000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
munlock(&(0x7f00003ab000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00002eb000/0x4000)=nil) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40040) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
msync(&(0x7f000028a000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f000029b000/0x2000)=nil}) (async)
shmget$private(0x0, 0x2000, 0x80, &(0x7f00002b9000/0x2000)=nil) (async)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}}) (async)
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0) (async)
shmat(r3, &(0x7f0000397000/0x4000)=nil, 0x5000) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)

00:18:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)

00:18:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0)

00:18:26 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '.[%[:*&,'}, {0x20, '0'}, {0x20, '}%'}, {0x20, '/dev/kvm\x00'}, {0x20, '{'}, {}], 0xa, "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"}, 0x124)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x5, 0x1, 0x2, 0x0, 0x40], 0x6, 0x180000})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:26 executing program 0:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)

00:18:26 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x0, 0xc66eaec28e17470c)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x0, 0xc66eaec28e17470c) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:26 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
pipe(&(0x7f0000000040))

00:18:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

00:18:26 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
bind$alg(r0, 0x0, 0x0)

00:18:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000980)=""/130, 0x26, 0x82, 0x1}, 0x20)

00:18:26 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)={0xd04, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "0978b544cf9c5aa119d017cb4a0ea3ac0821bd8080c84f47df7be55afa228779459ee95b4cc1af6514a909d9fff3ad023494ffcb4ae602e9a539154857e0d8863b00665f804b19dc5adb8696ca75dcdf5c7095672976cf05b03362692c98eccb0148dde63e2ee83efb5e7cefa61ddeb8e9641867071a4e05c0825496d54b255ccc4bafd3a0576f5d0643a948c593d9b9a119cc914361c82fd818616339e2b794d659adb1317593dc082689b1dec3461421d5b681f00bea41154f7474ce7e53c11d1ed24797f6ab69869a3b2dd363cd3849a929c2"}, @INET_DIAG_REQ_BYTECODE={0xbdd, 0x1, "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"}]}, 0xd04}, 0x1, 0x0, 0x0, 0x40}, 0x0)

00:18:26 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x0, 0xc66eaec28e17470c)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:26 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10)
munmap(&(0x7f00001ba000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
munlock(&(0x7f00003ab000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00002eb000/0x4000)=nil)
r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40040)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
msync(&(0x7f000028a000/0x2000)=nil, 0x2000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f000029b000/0x2000)=nil})
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f00002b9000/0x2000)=nil)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}})
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0)
shmat(r3, &(0x7f0000397000/0x4000)=nil, 0x5000)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) (async)
munmap(&(0x7f00001ba000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
munlock(&(0x7f00003ab000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00002eb000/0x4000)=nil) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40040) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
msync(&(0x7f000028a000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f000029b000/0x2000)=nil}) (async)
shmget$private(0x0, 0x2000, 0x80, &(0x7f00002b9000/0x2000)=nil) (async)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x3, r4, 0xffffffffffffffff, 0x0, 0x0, 0x51}}) (async)
shmctl$SHM_STAT_ANY(r3, 0xf, 0x0) (async)
shmat(r3, &(0x7f0000397000/0x4000)=nil, 0x5000) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)

00:18:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)

00:18:26 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1}, 0x0)

00:18:26 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '.[%[:*&,'}, {0x20, '0'}, {0x20, '}%'}, {0x20, '/dev/kvm\x00'}, {0x20, '{'}, {}], 0xa, "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"}, 0x124)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x5, 0x1, 0x2, 0x0, 0x40], 0x6, 0x180000})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '.[%[:*&,'}, {0x20, '0'}, {0x20, '}%'}, {0x20, '/dev/kvm\x00'}, {0x20, '{'}, {}], 0xa, "190f881f1ebe3cf444743f6b80a41dbb7b75ebd937139c2034481889099be12e4cc09d2d4a623ff1081d55dfcdd558ce106a7bcc8c4df947c14b95070fd5698d25181afc2b684802ab91d8910b74d73fb1f2b223b1ac950f8098045bd88e2d889f125d00d3b9a320dc3ec531e7dba5163d77069c9e4e80764145d272b6e743c661b8f23ea7dfb06b10cea5c3f0e7f48b0c16f5293dd7eb3ead10d8785badff3cf04425221ce0f0103c3886ebd7fa727fb6fa0fe4eb39e8c18b77c9c92c4f0de133e75800ab74fcc12e09117111648bfe3545d5a80d2c421348740692fdf3c99cb1b6706755d5b8be05904e8fb923cef2bf815bab8a424ced695f57dde4"}, 0x124) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r2) (async)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x5, 0x1, 0x2, 0x0, 0x40], 0x6, 0x180000}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:26 executing program 4:
pipe(&(0x7f0000001780)={<r0=>0xffffffffffffffff})
accept4$unix(r0, 0x0, 0x0, 0x0)

00:18:26 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0xe42e5f90349d15c0, &(0x7f0000fff000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="34070000140005000000000000004c0e7a8c592fdaff00000a008000", @ANYRES32, @ANYRES16], 0x34}}, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="66643d746b3a8e7986ab7403b9fbbc53c2c1c9ba3215ec20f513a2a4103729ea8e793d5afdf9f6ef5ceb08808222c855cd09e6a54dfb4b030000a07a4e38f7fbc9196505d6677a75148bf7c122d50000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7])
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r11, 0x227d, &(0x7f0000000680))
openat$mice(0xffffff9c, &(0x7f0000000340), 0x84080)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="79e622e38117410f2e82617cbf53e37fad141b0796e7be6dba4fce2e4edd8d384c6514b1c8b581724de7a96421b7", 0x2e}, {&(0x7f0000000140)="17840da66741693308ab7128776fdaa364029cb6275aa8d5245ee412d9f448d1bf3442104ff9e4e77ceee73f22415cf26d5f57811c455013df579a6b1d7c6e048bd15837f8aaffb69f3888dbd5cf127d5580d2f2b2e49ea1298114b939ad8b7b19ed3c2e1a54ffc784c1ac6f5113a650300837cffd017e6a7b96e8bcc82cf1bb41113d7e43a59dc33d3c3f78e432153e3945220601abca6fed04ca58058a83712aa4bf88b5d64dfcf696b2e3084c069c179291c115ae702fc051132f24f86c4c69a961028fe8059d9783d7b725b034978d3af022ca877e16cec45bed3dc53e89a4acdaedc0b6", 0xe6}, {&(0x7f0000000040)="e84299b2514c42199c48e44fff614495a17618436e44414c943fcb6a691d0033d95adef3b7f7", 0x26}], 0x3, &(0x7f0000002480)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r10, 0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r8, r5}}}, @rights={{0x10, 0x1, 0x1, [r12]}}], 0x70, 0x24000011}}], 0x1, 0x40)

00:18:26 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001bc0)={&(0x7f0000001b00), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0)

00:18:26 executing program 4:
syz_emit_ethernet(0x7ff, &(0x7f0000001640)={@remote, @remote, @val, {@ipv6}}, 0x0)

00:18:26 executing program 2:
socket(0x0, 0x0, 0x0)
unshare(0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0)

00:18:26 executing program 4:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}, 0x20)

00:18:26 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)={0xd08, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "0978b544cf9c5aa119d017cb4a0ea3ac0821bd8080c84f47df7be55afa228779459ee95b4cc1af6514a909d9fff3ad023494ffcb4ae602e9a539154857e0d8863b00665f804b19dc5adb8696ca75dcdf5c7095672976cf05b03362692c98eccb0148dde63e2ee83efb5e7cefa61ddeb8e9641867071a4e05c0825496d54b255ccc4bafd3a0576f5d0643a948c593d9b9a119cc914361c82fd818616339e2b794d659adb1317593dc082689b1dec3461421d5b681f00bea41154f7474ce7e53c11d1ed24797f6ab69869a3b2dd363cd3849a929c2"}, @INET_DIAG_REQ_BYTECODE={0xbe4, 0x1, "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"}]}, 0xd08}, 0x1, 0x0, 0x0, 0x40}, 0x0)

00:18:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0)

00:18:26 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
syncfs(r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:27 executing program 0:
pipe(&(0x7f00000019c0))

00:18:27 executing program 4:
socketpair(0x11, 0x3, 0x6, &(0x7f0000001440))

00:18:27 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0xe42e5f90349d15c0, &(0x7f0000fff000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="34070000140005000000000000004c0e7a8c592fdaff00000a008000", @ANYRES32, @ANYRES16], 0x34}}, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="66643d746b3a8e7986ab7403b9fbbc53c2c1c9ba3215ec20f513a2a4103729ea8e793d5afdf9f6ef5ceb08808222c855cd09e6a54dfb4b030000a07a4e38f7fbc9196505d6677a75148bf7c122d50000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7])
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r11, 0x227d, &(0x7f0000000680))
openat$mice(0xffffff9c, &(0x7f0000000340), 0x84080)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="79e622e38117410f2e82617cbf53e37fad141b0796e7be6dba4fce2e4edd8d384c6514b1c8b581724de7a96421b7", 0x2e}, {&(0x7f0000000140)="17840da66741693308ab7128776fdaa364029cb6275aa8d5245ee412d9f448d1bf3442104ff9e4e77ceee73f22415cf26d5f57811c455013df579a6b1d7c6e048bd15837f8aaffb69f3888dbd5cf127d5580d2f2b2e49ea1298114b939ad8b7b19ed3c2e1a54ffc784c1ac6f5113a650300837cffd017e6a7b96e8bcc82cf1bb41113d7e43a59dc33d3c3f78e432153e3945220601abca6fed04ca58058a83712aa4bf88b5d64dfcf696b2e3084c069c179291c115ae702fc051132f24f86c4c69a961028fe8059d9783d7b725b034978d3af022ca877e16cec45bed3dc53e89a4acdaedc0b6", 0xe6}, {&(0x7f0000000040)="e84299b2514c42199c48e44fff614495a17618436e44414c943fcb6a691d0033d95adef3b7f7", 0x26}], 0x3, &(0x7f0000002480)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r10, 0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r8, r5}}}, @rights={{0x10, 0x1, 0x1, [r12]}}], 0x70, 0x24000011}}], 0x1, 0x40)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0xe42e5f90349d15c0, &(0x7f0000fff000/0x1000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="34070000140005000000000000004c0e7a8c592fdaff00000a008000", @ANYRES32, @ANYRES16], 0x34}}, 0x0) (async)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="66643d746b3a8e7986ab7403b9fbbc53c2c1c9ba3215ec20f513a2a4103729ea8e793d5afdf9f6ef5ceb08808222c855cd09e6a54dfb4b030000a07a4e38f7fbc9196505d6677a75148bf7c122d50000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r11, 0x227d, &(0x7f0000000680)) (async)
openat$mice(0xffffff9c, &(0x7f0000000340), 0x84080) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="79e622e38117410f2e82617cbf53e37fad141b0796e7be6dba4fce2e4edd8d384c6514b1c8b581724de7a96421b7", 0x2e}, {&(0x7f0000000140)="17840da66741693308ab7128776fdaa364029cb6275aa8d5245ee412d9f448d1bf3442104ff9e4e77ceee73f22415cf26d5f57811c455013df579a6b1d7c6e048bd15837f8aaffb69f3888dbd5cf127d5580d2f2b2e49ea1298114b939ad8b7b19ed3c2e1a54ffc784c1ac6f5113a650300837cffd017e6a7b96e8bcc82cf1bb41113d7e43a59dc33d3c3f78e432153e3945220601abca6fed04ca58058a83712aa4bf88b5d64dfcf696b2e3084c069c179291c115ae702fc051132f24f86c4c69a961028fe8059d9783d7b725b034978d3af022ca877e16cec45bed3dc53e89a4acdaedc0b6", 0xe6}, {&(0x7f0000000040)="e84299b2514c42199c48e44fff614495a17618436e44414c943fcb6a691d0033d95adef3b7f7", 0x26}], 0x3, &(0x7f0000002480)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r10, 0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r8, r5}}}, @rights={{0x10, 0x1, 0x1, [r12]}}], 0x70, 0x24000011}}], 0x1, 0x40) (async)

00:18:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000e8000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0)

00:18:27 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
syncfs(r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64)

00:18:27 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '.[%[:*&,'}, {0x20, '0'}, {0x20, '}%'}, {0x20, '/dev/kvm\x00'}, {0x20, '{'}, {}], 0xa, "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"}, 0x124)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x5, 0x1, 0x2, 0x0, 0x40], 0x6, 0x180000}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:27 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80)

00:18:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080))

00:18:27 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2000000001, 0x0)
write(r2, &(0x7f0000000200)="8f", 0x1)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x4)
close(r1)

00:18:27 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {0xb}, {}, {}]}, @ptr={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000980)=""/130, 0x53, 0x82, 0x1}, 0x20)

00:18:27 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227d, &(0x7f0000000680))
syncfs(r1) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32)

00:18:27 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000000)={<r3=>r0, 0x3ff, 0xfffff7ff, 0x83})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680))
fcntl$setpipe(r5, 0x407, 0x2)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r3, 0x1e}, 0x10)
dup3(r3, r6, 0x80000)

00:18:27 executing program 2:
socketpair(0x11, 0x0, 0x6, &(0x7f0000001440))

00:18:27 executing program 1:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"2f98f7c09920907d67fc5ee8adafeefc83037379364ca57c47611b835fc10a65", 0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
shmget(0x0, 0x4000, 0x10, &(0x7f000033c000/0x4000)=nil)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x264)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0xc0001, 0x0, [0x8, 0x55e4701f, 0x3079, 0x4, 0x8001, 0x5, 0x5, 0x29]})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000180)={0x1, 0x77fffffffffdffff, 0x2})

00:18:27 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0xe42e5f90349d15c0, &(0x7f0000fff000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="34070000140005000000000000004c0e7a8c592fdaff00000a008000", @ANYRES32, @ANYRES16], 0x34}}, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="66643d746b3a8e7986ab7403b9fbbc53c2c1c9ba3215ec20f513a2a4103729ea8e793d5afdf9f6ef5ceb08808222c855cd09e6a54dfb4b030000a07a4e38f7fbc9196505d6677a75148bf7c122d50000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7])
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r11, 0x227d, &(0x7f0000000680))
openat$mice(0xffffff9c, &(0x7f0000000340), 0x84080)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="79e622e38117410f2e82617cbf53e37fad141b0796e7be6dba4fce2e4edd8d384c6514b1c8b581724de7a96421b7", 0x2e}, {&(0x7f0000000140)="17840da66741693308ab7128776fdaa364029cb6275aa8d5245ee412d9f448d1bf3442104ff9e4e77ceee73f22415cf26d5f57811c455013df579a6b1d7c6e048bd15837f8aaffb69f3888dbd5cf127d5580d2f2b2e49ea1298114b939ad8b7b19ed3c2e1a54ffc784c1ac6f5113a650300837cffd017e6a7b96e8bcc82cf1bb41113d7e43a59dc33d3c3f78e432153e3945220601abca6fed04ca58058a83712aa4bf88b5d64dfcf696b2e3084c069c179291c115ae702fc051132f24f86c4c69a961028fe8059d9783d7b725b034978d3af022ca877e16cec45bed3dc53e89a4acdaedc0b6", 0xe6}, {&(0x7f0000000040)="e84299b2514c42199c48e44fff614495a17618436e44414c943fcb6a691d0033d95adef3b7f7", 0x26}], 0x3, &(0x7f0000002480)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r10, 0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r8, r5}}}, @rights={{0x10, 0x1, 0x1, [r12]}}], 0x70, 0x24000011}}], 0x1, 0x40)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0xe42e5f90349d15c0, &(0x7f0000fff000/0x1000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="34070000140005000000000000004c0e7a8c592fdaff00000a008000", @ANYRES32, @ANYRES16], 0x34}}, 0x0) (async)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="66643d746b3a8e7986ab7403b9fbbc53c2c1c9ba3215ec20f513a2a4103729ea8e793d5afdf9f6ef5ceb08808222c855cd09e6a54dfb4b030000a07a4e38f7fbc9196505d6677a75148bf7c122d50000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r11, 0x227d, &(0x7f0000000680)) (async)
openat$mice(0xffffff9c, &(0x7f0000000340), 0x84080) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="79e622e38117410f2e82617cbf53e37fad141b0796e7be6dba4fce2e4edd8d384c6514b1c8b581724de7a96421b7", 0x2e}, {&(0x7f0000000140)="17840da66741693308ab7128776fdaa364029cb6275aa8d5245ee412d9f448d1bf3442104ff9e4e77ceee73f22415cf26d5f57811c455013df579a6b1d7c6e048bd15837f8aaffb69f3888dbd5cf127d5580d2f2b2e49ea1298114b939ad8b7b19ed3c2e1a54ffc784c1ac6f5113a650300837cffd017e6a7b96e8bcc82cf1bb41113d7e43a59dc33d3c3f78e432153e3945220601abca6fed04ca58058a83712aa4bf88b5d64dfcf696b2e3084c069c179291c115ae702fc051132f24f86c4c69a961028fe8059d9783d7b725b034978d3af022ca877e16cec45bed3dc53e89a4acdaedc0b6", 0xe6}, {&(0x7f0000000040)="e84299b2514c42199c48e44fff614495a17618436e44414c943fcb6a691d0033d95adef3b7f7", 0x26}], 0x3, &(0x7f0000002480)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r10, 0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r8, r5}}}, @rights={{0x10, 0x1, 0x1, [r12]}}], 0x70, 0x24000011}}], 0x1, 0x40) (async)

00:18:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={0x0}}, 0x41)

00:18:27 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xb, 0x4}]}]}}, &(0x7f0000000980)=""/130, 0x36, 0x82, 0x1}, 0x20)

00:18:27 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]})

00:18:27 executing program 2:
socket$inet6(0xa, 0x2, 0x4)

00:18:27 executing program 0:
syz_genetlink_get_family_id$fou(&(0x7f0000001600), 0xffffffffffffffff)

00:18:27 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000000)={<r3=>r0, 0x3ff, 0xfffff7ff, 0x83})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680))
fcntl$setpipe(r5, 0x407, 0x2)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r3, 0x1e}, 0x10)
dup3(r3, r6, 0x80000)

00:18:27 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

00:18:27 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000000)={<r3=>r0, 0x3ff, 0xfffff7ff, 0x83})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x227d, &(0x7f0000000680))
fcntl$setpipe(r5, 0x407, 0x2) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r3, 0x1e}, 0x10)
dup3(r3, r6, 0x80000)

00:18:28 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x124, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)

00:18:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind(r0, &(0x7f0000001a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x80)

00:18:28 executing program 1:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"2f98f7c09920907d67fc5ee8adafeefc83037379364ca57c47611b835fc10a65", 0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
shmget(0x0, 0x4000, 0x10, &(0x7f000033c000/0x4000)=nil) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) (async)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680)) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x264)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0xc0001, 0x0, [0x8, 0x55e4701f, 0x3079, 0x4, 0x8001, 0x5, 0x5, 0x29]}) (async)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000180)={0x1, 0x77fffffffffdffff, 0x2})

00:18:28 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mbind(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0xcee6, 0x1f, 0x3)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x111000, 0x50)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x480100, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140))

00:18:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000001600), r0)

00:18:28 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80)

00:18:28 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)={0x1128, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "0978b544cf9c5aa119d017cb4a0ea3ac0821bd8080c84f47df7be55afa228779459ee95b4cc1af6514a909d9fff3ad023494ffcb4ae602e9a539154857e0d8863b00665f804b19dc5adb8696ca75dcdf5c7095672976cf05b03362692c98eccb0148dde63e2ee83efb5e7cefa61ddeb8e9641867071a4e05c0825496d54b255ccc4bafd3a0576f5d0643a948c593d9b9a119cc914361c82fd818616339e2b794d659adb1317593dc082689b1dec3461421d5b681f00bea41154f7474ce7e53c11d1ed24797f6ab69869a3b2dd363cd3849a929c2"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1128}, 0x1, 0x0, 0x0, 0x40}, 0x0)

00:18:28 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000001280)=@framed, &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:28 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'})
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0)

00:18:28 executing program 0:
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x34a00, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x444000, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/gpiolib_acpi', 0x20000, 0x0)

00:18:28 executing program 2:
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0), 0x10)

00:18:28 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
mbind(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0xcee6, 0x1f, 0x3) (async, rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x111000, 0x50) (async, rerun: 64)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x480100, 0x0) (rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) (rerun: 32)

00:18:28 executing program 1:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"2f98f7c09920907d67fc5ee8adafeefc83037379364ca57c47611b835fc10a65", 0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r5 = dup(r4)
shmget(0x0, 0x4000, 0x10, &(0x7f000033c000/0x4000)=nil)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x264)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0xc0001, 0x0, [0x8, 0x55e4701f, 0x3079, 0x4, 0x8001, 0x5, 0x5, 0x29]})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000180)={0x1, 0x77fffffffffdffff, 0x2})
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"2f98f7c09920907d67fc5ee8adafeefc83037379364ca57c47611b835fc10a65"}) (async)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r4) (async)
shmget(0x0, 0x4000, 0x10, &(0x7f000033c000/0x4000)=nil) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680)) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x264) (async)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0xc0001, 0x0, [0x8, 0x55e4701f, 0x3079, 0x4, 0x8001, 0x5, 0x5, 0x29]}) (async)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000180)={0x1, 0x77fffffffffdffff, 0x2}) (async)

00:18:28 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'})
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0)

00:18:28 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74c23d83e27188b4ce00000000000000", @ANYRES32, @ANYBLOB="001000070000000400000800486d00600067000080299078e0"]})

00:18:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, 0x0, 0x0)

00:18:28 executing program 4:
syz_usb_connect(0x3, 0x55, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xbb, 0x49, 0x66, 0x10, 0x499, 0x100f, 0x543f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x8d, 0x1, 0x5b, 0x7a, 0x80, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'yk'}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0xe802, 0x6}, [@dmm={0x7}]}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x3f, 0x3, 0x4, [@generic={0x2}]}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

00:18:28 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x200080, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)

00:18:28 executing program 2:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

00:18:28 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x3, 0x40, 0xf80000000000000}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0)

00:18:28 executing program 2:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x444000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'})
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x3, 0x40}})

00:18:28 executing program 0:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/module/asix', 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)

00:18:28 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)

00:18:28 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mbind(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0xcee6, 0x1f, 0x3) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x111000, 0x50) (async)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x480100, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140))

00:18:28 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:28 executing program 2:
syz_usb_connect(0x3, 0xfc, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xbb, 0x49, 0x66, 0x10, 0x499, 0x100f, 0x543f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x1, 0x3f, 0x20, 0xd0, 0x3, [{{0x9, 0x4, 0xf, 0x8d, 0x2, 0x5b, 0x7a, 0x80, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'yk'}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9e5, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0xe802, 0x6}, [@obex={0x5}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x7a, 0x40}]}], [{{0x9, 0x5, 0x6, 0xc, 0x20, 0x3f, 0x3, 0x4, [@generic={0x77, 0xc, "54a1e5dfadade026ee3d9391eff8a52e1cccfd569905dcffc140a03a4c4e6e50298571cc46c54adf7c997ace31b02f53317e9e6743a2b35ebeb31b9b706c74574a2b9fea8390dcfa892b981b26a94be68550d69d8e98258807db4d4556bcc411c6c4ce69525b9cd1301ed725681df63981d284d55e"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x1, 0x5, 0x8, [@generic={0x19, 0x21, "5457ce03835d8c7f7c0795808bde0df2a4d025d96d9ef6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x111, 0x78, 0x3, 0x5, 0x0, 0x2d}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x2, 0xa3a6}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "546a80fb4e233af18a8e5ea9a662a2a311b92192f3e6b573dded7b789f5e8605cb355c8d23e01fb5db64a1b73bae87974d652eacd3b54befe79142fdbff68d30795fe3379aec2271e71ff9ffe63c2f57884c6e01ceb4886f948c8265b9e8d321d3f7bfe1717ae495794094ca23ffcd78186ad71f435996d6205b7716f0a40fb0eec4ce81a3add8dc455203363e3fb26e7cde2fa71ccf8520e0540d82ea1b183087720f9460bc020f788b71841145a9a6e2795219fd320b"}}]})
r0 = syz_usb_connect$cdc_ecm(0x6, 0x76, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x3f, 0x60, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, '\vm'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffe1, 0x8, 0xff, 0x9}, [@acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x20, 0x9, 0x3f}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x81, 0xf8, 0x3, 0x10, 0x6}, 0x37, &(0x7f0000000480)={0x5, 0xf, 0x37, 0x1, [@generic={0x32, 0x10, 0xb, "bbf6ba9180cb3003a291b551adc9b22db1fd1eff178527fb1a2f3e651fd150bc60a69b3d7f116a5c1b4c1f14795eb3"}]}, 0x3, [{0xe5, &(0x7f00000004c0)=@string={0xe5, 0x3, "d38d7d5b38b638a0371696cb5c4ec16900f4f3f6bbfd2c4be7c27f62da4f92084a072b633251381a7e154d638a7bc03c47772890c46ef128969cf2d85c03ff928640020f5bd3076ea3f4374d30bfdbda4acda0bc5ce47ac53d19ced2162edca5a6aef77bff68f072ba436741dd73e52567ca48177d036d46fb9869bd1b6557ab8eb3e39c677e3c7d7c38ce4a98396427dbceade1a14a560a6b481808bf28c83ad0220647b3292539c6147555afceb1b4aea38501e4dbdf982943c992db409665c251c16931785db37db203d7ea3ec1e80ac25b4056228b4a1027f6399b4e4834150dbe"}}, {0x64, &(0x7f00000005c0)=@string={0x64, 0x3, "648e04ad5d56556b3af182a93250e1cba3ad4aed69a866c3d3f24ab6de5e93e9ea3bc9a0bc6b0cb299fdf41bb2a06743558a9e5cd1b4e90e2133bc411a2c115cd2c423e9ee2331bfb58da210a080057d22b5c79807834e5b74209fc63e544bc46fbd"}}, {0xa0, &(0x7f0000000640)=@string={0xa0, 0x3, "4a9bdf89492b5318503868b97f69f4cd9c00d940110f3e04703150222e0cfd6b2092a6a1b358fc4519185037ae385680b401737ad6bbbf49c42890543e7c2c28e3c897e025f64ccbb7ded61ef44832ae5c948db8e73ccd8de6e4c2006119f3e12d91377fdea691087ec8991ae711932e514a60e4959917609776bbffd8e6a37702bd049fb8d7c65395f763762ee4f2eeb08df9a32d7563fa6f1c5f13bff4"}}]})
syz_usb_connect(0x3, 0x14d, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x1, 0xc, 0xc6, 0xff, 0x1b3d, 0x1bc, 0x656f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13b, 0x1, 0x1, 0x28, 0x40, 0x7, [{{0x9, 0x4, 0xe6, 0x4, 0x1, 0xc0, 0x55, 0xdf, 0x4e, [@generic={0x4e, 0x0, "6a66320f2e658e110a6a8aa69fa08fa2e477abab69ce07a28a94d7f2b1528c1daef9a8ad29d123680ec85f64c0d8cfa55361261d3b9ae31984e9ddb7590b72500f12b0a59dba17b5bd92d989"}], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0x0, 0x1, 0xfa, [@generic={0xd2, 0xe, "78ade661e5b10d525393248468a2d932c8742c7e1da91b48db782b990fc902e04c0b4d6d4f4315a61e916f001b8e46c383938532cd6619a4a621842735184bd0c2642c1c39bae6fcc938b1a3b14e61096c0ac16ad07677b88d29d11d751dbb6e168977deafbb6087f28ed9ccd9e47c455f53e0cd5cf51422e162e129a4ee42f6aa676dd770034293abb90ca42926f21966e6c4a0cb22961cb1e3cdadd383dea8e1296f3d881f440cb16e880dce15ed5bd502af6a6d42b511c92d9e36757f7a6b4a85b05499cb0f1e79f2dc446f4064df"}]}}]}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x0, 0x9, 0x1, 0x1, 0x10, 0x80}, 0xbd, &(0x7f0000001dc0)={0x5, 0xf, 0xbd, 0x1, [@generic={0xb8, 0x10, 0xa, "7d4b6439a05468ea121349d39a8e06232179c70c61e85258b9f6e81886c23abffe21790869a0deca5b26af2867f74506795b41c5c6b4e018bdfd01f31340dd3c3c8919b2ec9236af0c09d7744bd3f854fd3044249b0f55d02d9668c70a6420e548fe9051ec9c3f63e161dfe371c60253f40f5868a16a3f0e046faf33b9226c2b446a0518fc51f1d8b4926c030173b55c1d985778f375d2c72ae513626387faeeb982662640929bd1ac6f5ece7028402c1c24d417da"}]}, 0x9, [{0x8c, &(0x7f0000001e80)=@string={0x8c, 0x3, "0a0cdbfb5145e53614640c8668ed98ead3f43b487b9e0e2d4c4d89f39357a9815a95c475319f793c46354af8331cf425e4f1f0dac0ccddae5e46fd453caefe293bc86f146e7f516e67739761848867db3dd0c7bbd61421551a098c027b8626acf76257836bbe7c2ceb181c7398f7f6730e9dd6189bc4d63798323662015e647e70569342d3996d303444"}}, {0x2a, &(0x7f0000001f40)=@string={0x2a, 0x3, "1d3a0f220cf3d6c05184f0bc06f667656fcbab5701e95f880998c0bdd181713a823ae9bc5b2ee888"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4}}, {0x4, &(0x7f0000002000)=@lang_id={0x4}}, {0x6b, &(0x7f0000002040)=@string={0x6b, 0x3, "910c8111e1dd9a152bac3c1a8bd33102fd6c472427ebf74246b549d892eba152348a315b4efc9bb4c82a2a627b73b7ed53c4e2ac0db4571c71208d5024f7b4f7ca035bec15054ed1195ac56c55ad1c0e98fe3e8b4195d5be879350bb573f6f6c82c5ce4236ec37f721"}}, {0x76, &(0x7f00000020c0)=@string={0x76, 0x3, "3c7546cbf1ca1ced06fe66f24b939cc1658f3c56155235cb705533c7dbfee10c7d192839584dd65a7ed3fd56a9927a5066c33af85c928a63f1ed20e2ef74c4199c1f43ac32f585f3029abc53530bb5bd90116fe17979b89f45e5080d8002d1a521a524da2a316a536f7e96ede6aa002a9bfaa4e3"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x4e}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x445}}]})
syz_usb_disconnect(r0)

00:18:28 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/block/ram1', 0x0, 0x0)
fcntl$setflags(r0, 0x2, 0x1)

00:18:28 executing program 0:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
connect$can_j1939(r0, &(0x7f0000000200), 0x18)

[ 1022.380112][T30396] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1022.630379][T30396] usb 5-1: Using ep0 maxpacket: 16
[ 1022.650292][ T3696] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1022.791248][T30396] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1022.870409][T30396] usb 5-1: config 0 has an invalid interface number: 15 but max is 0
[ 1022.878533][T30396] usb 5-1: config 0 has no interface number 0
[ 1022.884742][T30396] usb 5-1: config 0 interface 15 altsetting 141 has an invalid endpoint with address 0x0, skipping
[ 1022.895477][T30396] usb 5-1: config 0 interface 15 has no altsetting 0
[ 1022.900227][ T3696] usb 3-1: Using ep0 maxpacket: 16
[ 1023.060333][T30396] usb 5-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice=54.3f
[ 1023.069450][T30396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.077566][T30396] usb 5-1: Product: syz
[ 1023.081799][T30396] usb 5-1: Manufacturer: syz
[ 1023.086479][T30396] usb 5-1: SerialNumber: syz
[ 1023.092660][T30396] usb 5-1: config 0 descriptor??
[ 1023.100227][ T3696] usb 3-1: config 63 has an invalid interface number: 15 but max is 0
[ 1023.108424][ T3696] usb 3-1: config 63 has no interface number 0
[ 1023.114759][ T3696] usb 3-1: config 63 interface 15 has no altsetting 0
[ 1023.132811][T30396] snd-usb-audio: probe of 5-1:0.15 failed with error -2
[ 1023.290271][ T3696] usb 3-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice=54.3f
[ 1023.299345][ T3696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.307581][ T3696] usb 3-1: Product: syz
[ 1023.311881][ T3696] usb 3-1: Manufacturer: 橔ﮀ⍎躊꥞抦ꎢ뤑鈡玵硻废ֆ㗋赜딟擛랡긻鞇敍갮뗓釧﵂ろ役㟣焢ῧ㳦圯䲈Ů듎澈貔斂⇓穱闤䁹쪔Ｃ磍樘ῗ奃횖嬠ᙷꓰ뀏쓮臎궣剅㘃㼾溲ꜯ켜₅哠舍ᯪ〘犇鐏뱠༂譸葱䔑ꚩ秢ᥒ㋽
[ 1023.338726][T30396] usb 5-1: USB disconnect, device number 107
[ 1023.339447][ T3696] usb 3-1: SerialNumber: syz
[ 1023.594729][T32187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.604094][T32187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
00:18:30 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/block/ram1', 0x0, 0x0)

00:18:30 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)

00:18:30 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x200080, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)

00:18:30 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0xef)
write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x4, 0x8, 0x81, 0x5}, 0x32, [0x8a5, 0x9, 0x401, 0xdc, 0x1, 0x0, 0x9, 0x80000001, 0x9, 0xfff, 0x2, 0x100, 0x3ff, 0x0, 0x2, 0x25f, 0x7, 0x8, 0x4, 0x4, 0x2, 0x1, 0x3f, 0x22, 0x1, 0x0, 0x40, 0x3, 0xfffffff9, 0x5, 0x4, 0x4, 0x7, 0x101, 0x4, 0x3, 0x7, 0x6, 0x9, 0x80000001, 0x1, 0x9, 0x6, 0x8, 0xfffff14d, 0x80000000, 0x4, 0x100, 0x3f, 0x1, 0x3, 0x7ce, 0xffffffc1, 0xefc, 0x2, 0x0, 0x2, 0x1, 0x6, 0x200, 0x1, 0x9, 0x2], [0xb632, 0x9, 0x1ff, 0x9, 0x200, 0xfff, 0xc8, 0x2, 0xfff, 0x3755, 0x2, 0x7, 0x0, 0x7, 0xffff18c2, 0x80000001, 0x3, 0x34f, 0x4, 0x3f, 0x9d3, 0xb9, 0x3, 0x2, 0x43c2186f, 0x9, 0xf5, 0x10000, 0x0, 0xfffffffe, 0x1, 0x4, 0x101, 0x2, 0x3, 0xb5, 0x100, 0x10000, 0x6, 0x1, 0x4, 0x3, 0x6, 0x1, 0x8, 0x2, 0x4, 0x0, 0x1f, 0x9, 0x6, 0x8, 0xd5f8, 0x3, 0x10000000, 0x6, 0x1ff, 0xc53, 0x9, 0x5, 0x1, 0x7, 0x10001, 0x5], [0x8, 0x7, 0x5, 0x3f, 0x33, 0x10000, 0x1, 0x1, 0x4b, 0x5, 0x7, 0x5, 0x0, 0x7fffffff, 0xfffffd62, 0x5, 0x3, 0xfffffffd, 0x1, 0x0, 0x8001, 0x7366, 0x7fff, 0x101, 0x100, 0x8001, 0xef4, 0x81, 0x0, 0xffffffff, 0x4, 0x3f, 0xa000000, 0x0, 0x6, 0x4872, 0x200, 0xffffffff, 0xfffffffd, 0xdc6, 0x4, 0x0, 0xff, 0x81, 0x3ff, 0xff, 0x8, 0x2, 0xfffffff9, 0xb6b, 0x3, 0x0, 0x1f, 0xe1cd75c, 0x5, 0x81, 0x7, 0x8, 0x7, 0x401, 0x3, 0x40, 0x8, 0x4], [0x1ff, 0x55, 0x1, 0x1ea0, 0xfffffffa, 0x100, 0xfffffffc, 0x1f, 0x2, 0xffffff4e, 0xffff0da5, 0x7, 0x4, 0x40, 0x3, 0x168, 0x4, 0xffffff81, 0x6, 0x4, 0x3ff, 0x2594, 0x4, 0x81, 0x0, 0x3, 0x1, 0x2d, 0x3ff, 0x0, 0xffff, 0x7f, 0x6, 0x5, 0x1b97, 0x8, 0x23c3b284, 0x7, 0x2, 0x40, 0xfffffffe, 0x2, 0x8, 0x4, 0x10000, 0x5d, 0x9, 0x0, 0x8, 0x8c3b, 0x101, 0x1, 0x7, 0x5, 0xe314, 0x3, 0xa50, 0xff, 0xb5, 0x4000000, 0x2, 0xfff, 0x4, 0xca4d]}, 0x45c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$snapshot(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
fremovexattr(r4, &(0x7f0000000180)=@known='trusted.overlay.upper\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
madvise(&(0x7f0000375000/0x2000)=nil, 0x2000, 0x3)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0xd000, 0x1000, &(0x7f0000130000/0x1000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xfffffffffffffffb, 0x3, 0x0, 0x1, 0x3460aca4, 0x8, 0x9, 0x87, 0x4, 0x80000001, 0xfffffffffffffffd, 0x6, 0x1, 0x9, 0x0, 0x8], 0xf000, 0x12141})

00:18:30 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:30 executing program 0:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
connect$can_j1939(r0, 0x0, 0x0)

00:18:30 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:30 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4}, 0x2000019c)

00:18:30 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x200080, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (rerun: 64)

[ 1023.882074][ T3696] snd-usb-audio: probe of 3-1:63.15 failed with error -2
[ 1023.907883][ T3696] usb 3-1: USB disconnect, device number 22
00:18:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0)

00:18:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0)

00:18:30 executing program 0:
r0 = epoll_create(0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))

00:18:30 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f00000c3000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f00003ef000/0x4000)=nil)
mremap(&(0x7f0000209000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000206000/0x4000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:30 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xc86ade39)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r2, 0xbb6, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r2, r3, 0x0, 0x80000007)
mremap(&(0x7f00000ae000/0x2000)=nil, 0x2000, 0x1000, 0x24d6c33fc4ed84a0, &(0x7f0000229000/0x1000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:30 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:30 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r0)

00:18:30 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)

00:18:30 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (rerun: 32)
sendfile(r1, r0, 0x0, 0xef) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x4, 0x8, 0x81, 0x5}, 0x32, [0x8a5, 0x9, 0x401, 0xdc, 0x1, 0x0, 0x9, 0x80000001, 0x9, 0xfff, 0x2, 0x100, 0x3ff, 0x0, 0x2, 0x25f, 0x7, 0x8, 0x4, 0x4, 0x2, 0x1, 0x3f, 0x22, 0x1, 0x0, 0x40, 0x3, 0xfffffff9, 0x5, 0x4, 0x4, 0x7, 0x101, 0x4, 0x3, 0x7, 0x6, 0x9, 0x80000001, 0x1, 0x9, 0x6, 0x8, 0xfffff14d, 0x80000000, 0x4, 0x100, 0x3f, 0x1, 0x3, 0x7ce, 0xffffffc1, 0xefc, 0x2, 0x0, 0x2, 0x1, 0x6, 0x200, 0x1, 0x9, 0x2], [0xb632, 0x9, 0x1ff, 0x9, 0x200, 0xfff, 0xc8, 0x2, 0xfff, 0x3755, 0x2, 0x7, 0x0, 0x7, 0xffff18c2, 0x80000001, 0x3, 0x34f, 0x4, 0x3f, 0x9d3, 0xb9, 0x3, 0x2, 0x43c2186f, 0x9, 0xf5, 0x10000, 0x0, 0xfffffffe, 0x1, 0x4, 0x101, 0x2, 0x3, 0xb5, 0x100, 0x10000, 0x6, 0x1, 0x4, 0x3, 0x6, 0x1, 0x8, 0x2, 0x4, 0x0, 0x1f, 0x9, 0x6, 0x8, 0xd5f8, 0x3, 0x10000000, 0x6, 0x1ff, 0xc53, 0x9, 0x5, 0x1, 0x7, 0x10001, 0x5], [0x8, 0x7, 0x5, 0x3f, 0x33, 0x10000, 0x1, 0x1, 0x4b, 0x5, 0x7, 0x5, 0x0, 0x7fffffff, 0xfffffd62, 0x5, 0x3, 0xfffffffd, 0x1, 0x0, 0x8001, 0x7366, 0x7fff, 0x101, 0x100, 0x8001, 0xef4, 0x81, 0x0, 0xffffffff, 0x4, 0x3f, 0xa000000, 0x0, 0x6, 0x4872, 0x200, 0xffffffff, 0xfffffffd, 0xdc6, 0x4, 0x0, 0xff, 0x81, 0x3ff, 0xff, 0x8, 0x2, 0xfffffff9, 0xb6b, 0x3, 0x0, 0x1f, 0xe1cd75c, 0x5, 0x81, 0x7, 0x8, 0x7, 0x401, 0x3, 0x40, 0x8, 0x4], [0x1ff, 0x55, 0x1, 0x1ea0, 0xfffffffa, 0x100, 0xfffffffc, 0x1f, 0x2, 0xffffff4e, 0xffff0da5, 0x7, 0x4, 0x40, 0x3, 0x168, 0x4, 0xffffff81, 0x6, 0x4, 0x3ff, 0x2594, 0x4, 0x81, 0x0, 0x3, 0x1, 0x2d, 0x3ff, 0x0, 0xffff, 0x7f, 0x6, 0x5, 0x1b97, 0x8, 0x23c3b284, 0x7, 0x2, 0x40, 0xfffffffe, 0x2, 0x8, 0x4, 0x10000, 0x5d, 0x9, 0x0, 0x8, 0x8c3b, 0x101, 0x1, 0x7, 0x5, 0xe314, 0x3, 0xa50, 0xff, 0xb5, 0x4000000, 0x2, 0xfff, 0x4, 0xca4d]}, 0x45c) (async, rerun: 64)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32)
r4 = openat$snapshot(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
fremovexattr(r4, &(0x7f0000000180)=@known='trusted.overlay.upper\x00') (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
madvise(&(0x7f0000375000/0x2000)=nil, 0x2000, 0x3)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0)) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 32)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0xd000, 0x1000, &(0x7f0000130000/0x1000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xfffffffffffffffb, 0x3, 0x0, 0x1, 0x3460aca4, 0x8, 0x9, 0x87, 0x4, 0x80000001, 0xfffffffffffffffd, 0x6, 0x1, 0x9, 0x0, 0x8], 0xf000, 0x12141})

00:18:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0xd, 0x0, &(0x7f0000000280))

00:18:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1d, 0x0, 0x7)

00:18:30 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x4, 0x0, 0x7)

00:18:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x11, 0x29, 0x0, 0x0)

00:18:30 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f00000c3000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f00003ef000/0x4000)=nil) (async, rerun: 32)
mremap(&(0x7f0000209000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000206000/0x4000)=nil) (async, rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:30 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x1c, 0x2, &(0x7f00000003c0)=@raw=[@cb_func], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:31 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x25, 0x0, &(0x7f0000000280))

00:18:31 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xc86ade39)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r2, 0xbb6, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r2, r3, 0x0, 0x80000007)
mremap(&(0x7f00000ae000/0x2000)=nil, 0x2000, 0x1000, 0x24d6c33fc4ed84a0, &(0x7f0000229000/0x1000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xc86ade39) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) (async)
lseek(r2, 0xbb6, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) (async)
sendfile(r2, r3, 0x0, 0x80000007) (async)
mremap(&(0x7f00000ae000/0x2000)=nil, 0x2000, 0x1000, 0x24d6c33fc4ed84a0, &(0x7f0000229000/0x1000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:31 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
mremap(&(0x7f00000c3000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f00003ef000/0x4000)=nil)
mremap(&(0x7f0000209000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000206000/0x4000)=nil) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:31 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0xef)
write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x4, 0x8, 0x81, 0x5}, 0x32, [0x8a5, 0x9, 0x401, 0xdc, 0x1, 0x0, 0x9, 0x80000001, 0x9, 0xfff, 0x2, 0x100, 0x3ff, 0x0, 0x2, 0x25f, 0x7, 0x8, 0x4, 0x4, 0x2, 0x1, 0x3f, 0x22, 0x1, 0x0, 0x40, 0x3, 0xfffffff9, 0x5, 0x4, 0x4, 0x7, 0x101, 0x4, 0x3, 0x7, 0x6, 0x9, 0x80000001, 0x1, 0x9, 0x6, 0x8, 0xfffff14d, 0x80000000, 0x4, 0x100, 0x3f, 0x1, 0x3, 0x7ce, 0xffffffc1, 0xefc, 0x2, 0x0, 0x2, 0x1, 0x6, 0x200, 0x1, 0x9, 0x2], [0xb632, 0x9, 0x1ff, 0x9, 0x200, 0xfff, 0xc8, 0x2, 0xfff, 0x3755, 0x2, 0x7, 0x0, 0x7, 0xffff18c2, 0x80000001, 0x3, 0x34f, 0x4, 0x3f, 0x9d3, 0xb9, 0x3, 0x2, 0x43c2186f, 0x9, 0xf5, 0x10000, 0x0, 0xfffffffe, 0x1, 0x4, 0x101, 0x2, 0x3, 0xb5, 0x100, 0x10000, 0x6, 0x1, 0x4, 0x3, 0x6, 0x1, 0x8, 0x2, 0x4, 0x0, 0x1f, 0x9, 0x6, 0x8, 0xd5f8, 0x3, 0x10000000, 0x6, 0x1ff, 0xc53, 0x9, 0x5, 0x1, 0x7, 0x10001, 0x5], [0x8, 0x7, 0x5, 0x3f, 0x33, 0x10000, 0x1, 0x1, 0x4b, 0x5, 0x7, 0x5, 0x0, 0x7fffffff, 0xfffffd62, 0x5, 0x3, 0xfffffffd, 0x1, 0x0, 0x8001, 0x7366, 0x7fff, 0x101, 0x100, 0x8001, 0xef4, 0x81, 0x0, 0xffffffff, 0x4, 0x3f, 0xa000000, 0x0, 0x6, 0x4872, 0x200, 0xffffffff, 0xfffffffd, 0xdc6, 0x4, 0x0, 0xff, 0x81, 0x3ff, 0xff, 0x8, 0x2, 0xfffffff9, 0xb6b, 0x3, 0x0, 0x1f, 0xe1cd75c, 0x5, 0x81, 0x7, 0x8, 0x7, 0x401, 0x3, 0x40, 0x8, 0x4], [0x1ff, 0x55, 0x1, 0x1ea0, 0xfffffffa, 0x100, 0xfffffffc, 0x1f, 0x2, 0xffffff4e, 0xffff0da5, 0x7, 0x4, 0x40, 0x3, 0x168, 0x4, 0xffffff81, 0x6, 0x4, 0x3ff, 0x2594, 0x4, 0x81, 0x0, 0x3, 0x1, 0x2d, 0x3ff, 0x0, 0xffff, 0x7f, 0x6, 0x5, 0x1b97, 0x8, 0x23c3b284, 0x7, 0x2, 0x40, 0xfffffffe, 0x2, 0x8, 0x4, 0x10000, 0x5d, 0x9, 0x0, 0x8, 0x8c3b, 0x101, 0x1, 0x7, 0x5, 0xe314, 0x3, 0xa50, 0xff, 0xb5, 0x4000000, 0x2, 0xfff, 0x4, 0xca4d]}, 0x45c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$snapshot(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
fremovexattr(r4, &(0x7f0000000180)=@known='trusted.overlay.upper\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
madvise(&(0x7f0000375000/0x2000)=nil, 0x2000, 0x3)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0xd000, 0x1000, &(0x7f0000130000/0x1000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xfffffffffffffffb, 0x3, 0x0, 0x1, 0x3460aca4, 0x8, 0x9, 0x87, 0x4, 0x80000001, 0xfffffffffffffffd, 0x6, 0x1, 0x9, 0x0, 0x8], 0xf000, 0x12141})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r1, r0, 0x0, 0xef) (async)
write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x4, 0x8, 0x81, 0x5}, 0x32, [0x8a5, 0x9, 0x401, 0xdc, 0x1, 0x0, 0x9, 0x80000001, 0x9, 0xfff, 0x2, 0x100, 0x3ff, 0x0, 0x2, 0x25f, 0x7, 0x8, 0x4, 0x4, 0x2, 0x1, 0x3f, 0x22, 0x1, 0x0, 0x40, 0x3, 0xfffffff9, 0x5, 0x4, 0x4, 0x7, 0x101, 0x4, 0x3, 0x7, 0x6, 0x9, 0x80000001, 0x1, 0x9, 0x6, 0x8, 0xfffff14d, 0x80000000, 0x4, 0x100, 0x3f, 0x1, 0x3, 0x7ce, 0xffffffc1, 0xefc, 0x2, 0x0, 0x2, 0x1, 0x6, 0x200, 0x1, 0x9, 0x2], [0xb632, 0x9, 0x1ff, 0x9, 0x200, 0xfff, 0xc8, 0x2, 0xfff, 0x3755, 0x2, 0x7, 0x0, 0x7, 0xffff18c2, 0x80000001, 0x3, 0x34f, 0x4, 0x3f, 0x9d3, 0xb9, 0x3, 0x2, 0x43c2186f, 0x9, 0xf5, 0x10000, 0x0, 0xfffffffe, 0x1, 0x4, 0x101, 0x2, 0x3, 0xb5, 0x100, 0x10000, 0x6, 0x1, 0x4, 0x3, 0x6, 0x1, 0x8, 0x2, 0x4, 0x0, 0x1f, 0x9, 0x6, 0x8, 0xd5f8, 0x3, 0x10000000, 0x6, 0x1ff, 0xc53, 0x9, 0x5, 0x1, 0x7, 0x10001, 0x5], [0x8, 0x7, 0x5, 0x3f, 0x33, 0x10000, 0x1, 0x1, 0x4b, 0x5, 0x7, 0x5, 0x0, 0x7fffffff, 0xfffffd62, 0x5, 0x3, 0xfffffffd, 0x1, 0x0, 0x8001, 0x7366, 0x7fff, 0x101, 0x100, 0x8001, 0xef4, 0x81, 0x0, 0xffffffff, 0x4, 0x3f, 0xa000000, 0x0, 0x6, 0x4872, 0x200, 0xffffffff, 0xfffffffd, 0xdc6, 0x4, 0x0, 0xff, 0x81, 0x3ff, 0xff, 0x8, 0x2, 0xfffffff9, 0xb6b, 0x3, 0x0, 0x1f, 0xe1cd75c, 0x5, 0x81, 0x7, 0x8, 0x7, 0x401, 0x3, 0x40, 0x8, 0x4], [0x1ff, 0x55, 0x1, 0x1ea0, 0xfffffffa, 0x100, 0xfffffffc, 0x1f, 0x2, 0xffffff4e, 0xffff0da5, 0x7, 0x4, 0x40, 0x3, 0x168, 0x4, 0xffffff81, 0x6, 0x4, 0x3ff, 0x2594, 0x4, 0x81, 0x0, 0x3, 0x1, 0x2d, 0x3ff, 0x0, 0xffff, 0x7f, 0x6, 0x5, 0x1b97, 0x8, 0x23c3b284, 0x7, 0x2, 0x40, 0xfffffffe, 0x2, 0x8, 0x4, 0x10000, 0x5d, 0x9, 0x0, 0x8, 0x8c3b, 0x101, 0x1, 0x7, 0x5, 0xe314, 0x3, 0xa50, 0xff, 0xb5, 0x4000000, 0x2, 0xfff, 0x4, 0xca4d]}, 0x45c) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
openat$snapshot(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
fremovexattr(r4, &(0x7f0000000180)=@known='trusted.overlay.upper\x00') (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
madvise(&(0x7f0000375000/0x2000)=nil, 0x2000, 0x3) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0)) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0xd000, 0x1000, &(0x7f0000130000/0x1000)=nil}) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xfffffffffffffffb, 0x3, 0x0, 0x1, 0x3460aca4, 0x8, 0x9, 0x87, 0x4, 0x80000001, 0xfffffffffffffffd, 0x6, 0x1, 0x9, 0x0, 0x8], 0xf000, 0x12141}) (async)

00:18:31 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}}, &(0x7f0000000180)=""/203, 0x32, 0xcb, 0x1}, 0x20)

00:18:31 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="85200085"], &(0x7f00000000c0)='GPL\x00', 0x3, 0xc0, &(0x7f0000000100)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x13, 0x0, &(0x7f0000000100))

00:18:31 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r0, 0x0, 0x0, 0x40091, 0x0, 0x0)

00:18:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000140)="a8edd1f49f814443df81790fe8ad3e24f365a62c", 0x14)

00:18:31 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)

00:18:31 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000180)=""/203, 0x32, 0xcb, 0x1}, 0x20)

00:18:31 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1600bd78, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88)

00:18:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0)

00:18:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000000180)=""/203, 0x32, 0xcb, 0x1}, 0x20)

00:18:31 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xc86ade39) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r2, 0xbb6, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r2, r3, 0x0, 0x80000007)
mremap(&(0x7f00000ae000/0x2000)=nil, 0x2000, 0x1000, 0x24d6c33fc4ed84a0, &(0x7f0000229000/0x1000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0x700}, {&(0x7f0000000900)=""/94, 0x5e}], 0x2}, 0x0)
sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002c40)="88", 0x1}], 0x1}}], 0x1, 0x0)

00:18:31 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500), 0x8)

00:18:31 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x1000, 0x3, 0x1, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x1, 0x1, 0x3, 0xcc}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64, @ANYBLOB="0100000000000000d50900000000000007070000000000000000000000000000010000800000000004000000000000000000000000000000010001000104000000000000000000696f4f26538f5d7d090000000000000005000000000000004000000000000000000000000000120000000000000000000000000000000000007fc31b67b201c80f56b59018d40000000000000000000000000000000000000000000000000000000000000000000001000000006367b46abbcf99536de54c2257792c0000000000000000628d1c360c310fe6ff663d3bccb664a61389cd9d92f28a92b77b1977f6e5c6c77a1af29c1b5025aa0942c12270eb59965d2b16d608a0c7b68ee84bdc54845682f9b57615865da8830fbcaf3805c3eb7d045649d1ac4c7f6a87443df4b4ad0f99287358ca2121ad172cdf7f0f85df59bfabf119588077580ef6dba20449211fcd41ae817cab75f21fcc4cd624452c15e5eb6b1031b9485050f46010915eabcff9c93727d18595bb000000007ab0a52aa0ea1885e5342b34e3787ac4b6b18f2090957768ce4f460e5faf06505af9d8b401010000000000004517f1b6e014cf5aadd6f86a4f5310f982f954fd68943a69563054995875e7524141014dbe877583eb6fb5e9e7360280304b9ff19fb40fca13438743e09bc9b141f8759202cec05363d567e5a217a90fa73ab90135a3f5d5fd64a7bbef5b70528b285242a1b7dbfc000cc2d2ed22e5c2919e5e7cf09d43337cd0901a99aff1277f14ff7f013c84b9197d38649d08dfb517471e730e0af91903ee19dad0ebb72fa2aaae4931d57e0819d276f47e122979f34cf8bd668e3ebd6e7236ee3f690d873889b5f3e3b199de232e01348b6d0d930958d4e16edbbca2050308d43c2f36e16743d50730c1835ea68e7e3de13234355061c72ce228383930cc10410705902e34333682a6c0d8a7658a88209e73d2c68152bbee0af3b12af77364f7d2a58b17f39cb0f1dfe925f5a8c1c5b0753e3b9b7c057c4d08fe2709e5a8a047f80e4765dbb73f05b9471f9707e616175d7b92c36a1ed1ba441140cf6e0353ac975d4a46da2461f23330dd"])
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x12000})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "9a03c107252743d46bf6d7d215667392a3b7bc98c757612531d20c811dd857244a5e5b43dc259059a0547300b93feea28018b9ef6f8392044a7b8738905a66f67a79a27b5a3a5027b0eb4694176f137638c8ae23eacfe94d0f4b6b4519c53c9cba2f4d7836e3a9b0a4d3abf4d51f205aa1e3219c62656dfa50de90bb8c54b7a6f73282b2a03f9ebd55e865bce2dbd63faf670839c958224dc45f295039d6d952541ebdc030a87a5e606d2dfe5d4d7c572db5dda4ed510567b4c75a803bbf073483b53415e452c4921e682fb71a94dfe84c6ff4463703ab12ee53c341d68c5d90e1bdccaec3e29906552d9bbfe09f0d28d110180b7f270fa69943ae21fd69dff7f0f47ac8cae4f527ca6b539148d4749c98bdceefb83122553015258caa193647fde6c55bd7ea2156bfa75d8c69f5ccbb62d48709831ed2f67c39c8516bd1c473010c8f2c78c8afba3e34250f2714b10883a40845aa1db715360a28266666fa47de26248bb42f858376940a5f6dc354b11b4ece0e607843c7f6fc2cf98f4e7f095e1de2491e23a2f1055f2df0c136e710efa94d0c586623af8e728841cafecccd2803cfdbee9a815bb64d457572ef822a3ceb4996c1be47d6a439dcab43882080ee5d371087d9fcf2d1a47267db79468a7c687b92729dafb34b0c6b7c13899dd9687916abcfe98b9ccc938242463c725a774c473d890826c8657f0a17fb4590d74a634ddd959364a3fb76900f5258391cf066ded1dd21c218b23721371e79aa13058240b292856945e3373e3686d5bcbc9daaf96164dc076634e648a712996fbfdb90ba09e0aaa7a28827c22edfc2925dc6b48f406d8bc64401f7762b4fef7f4c0c44ab2e6cedf1230c0edc3e8cd9f89efe9bbeebe31554b75583152838c4e89e107692aa33f1d2e31c69fde5387df1ff21170c51cdb027ed6d8d98bd4a282d61899224a846a88ed49bd5069fb0dd740495d726b9abd7e891a722925e3aae8c3c5a8a6480796a6feca94f2eb1cb63e2c16410f99975f4d34dd06260ffbb931f3dbdfe1a1bd1105b059cb0c84e57e9c84d4071b2e003f1374ffcf5e4bb191f8ec679340d78e603678635927e6864779cbe8c27083a2f9afb196b56f6cbce598dbcd2257bc223a1b4e080e2ef3bccfd62f682f9c978b63d975899a77814c2e4659d796a58bc43fde35c93d0a528471fc140d0f49c3930ef5041e63649bf97bfba8251407c592463b390b05588bfffc48b1709da3464608f432138319a8758c321f685c4f696d5046c145fb30f7e1d04804a72978016c906e84e1de4bb68b7fdf0f20cb14385197c6b6621929dbfd1fc31b00692d7cec5febec4dec3fb6d06ab24532bba62dae8315a5f26b182ff228f60a78b2998c5f9bd3266e9d649bdff4a6c40de465918bd18e6d9adfd522136a3a30ee60b0b7282f5bfea7724f2934c24b7f1500f4da07b854ded9c416a57aa9b49cbb2c3cace362eda0bc0113dc1f184f88a1bc3388f132c8dccbdddbdd24414e409244db7ed60d354ffecec5e02c469d6cb6f99a5996141da63ec1beabe50353fdceac1a7e2c56ac548dc9ee7a16dd8f70ca41dd132cd95924cb776459b17d0dbaae93011597be77c66c8d28da638a9d7909a4a8dc7e9cad527587768215c147fbea07e255a72dd6aa0faa75a21188cc45cdb2da161c071a97076df139b2a4a5ab6a69bf2b110e0c16d5d97beecae51483df5b2c044bbb721cad2bb028747ff4a23eeeaa545f03de9afe23bd9bbc40b2e701e1ed4ccb6cca04ecfe6bc823bf0498e58eb9727c9e405546645bb9c4a63042ca10bb4521b10c95abf7ec4a371c1294dc877c8f9776317f5102fa0a50537d8a45516444439a61a845befc20824d3465c9a155dad84e7795d2f1edc79656351a2083f6989febbd8f0b0b53bb6ec8db7163c2179a98b9891d659d0d703dedffcb911f7398ee62df0fadb5a074c190a978434ac5801ccc8aefda3ae4213f5a58cadcf64f335fb2fc7fd48b70d59a49ba05a8a64c2430581226eced18b2b06c1b2f928f93b69585539fe70a0d0a241dacc94507766d25011b38fa7bf9eaa5ae4ccacf722f51615c47172c2e656bdb13a695218291620d3ffd85afc6c425a4a68f6cfe7e5807b495c514862f1baf7bf4555a0089f359dd39e1abe338b4e73802ce2553f9c70b1a3344b26e603058d997b130bbe78d97950dad5a81ebbebcb4f961454072a52b12ad1c33ea7922fc33466de63cdeedc3d016b0c045aa5adc153911424a2f42d1ac56ac0275b813f121c087238ae13b2eb7fbea64f15a24987dba47f08258ac2f42fd8862e18c428829f28abae7cdcc670bcc038b10c191bf8d11194b2476c3b6c2d5a956cdb60808628daaeb1fb87525408502eb4eaa7b9d2c37a6610f32ffd2385dfe50e8ab88fdc61469e9dbbd0dc01d31d9e159c58413e7b38e671b222aa3367e35e6a06ed5bb67a368fb6dd087c70fd912a3944508d8f6788cb049ca5f1ffeba82631d1658e9f6fca26974e0d3ff359b3fd4cf0bd13d38384a131cea900f50f7c0f919d462679bedae388f1314d819164a1a8bea5f0b4dfe1b809bd7fbc953071a4a763204232ca99b9033ead7042ee1381a579814df3ce62d6fc82a1bb9209a2badcea1627e8b29d206c0f3a1bf6ffcbbe266d161d8a76213513436266cdfc491965cdda45ba4905f1477fee83395846ce975db9692eb977cc00c5c0200017d74494a0ce2140cc176e2fc8a51ac053a6b8c48ab8d9e6ea7a7cb6f064115010e041de6a255ea65f7a91a2326dd988bc16b63edf61bb6dbc5dffaf95f45ec22ec3187970a4a45a4812bc1a1d0a2376fc16e001194801505b07e35e1ad03d78a0c58e73f051a9312a07e355685ee9f6810d17f5025d90946121c34f908a76984892b16decc16054ad5019f2a9357b5007c20bb6503cf0805e8b87daabe748634503d7648e1562a2ee4833d133d3a08f9409cba114a67a8d9bc069a1e9bf28b99f405ce49734780d392403de9bb73f8e312460ed67398aa71495f35f087febbf2b4af1a52a72a4b6058a2cf48c1ddbb6a7d1f13720b9a594505e59f872d1a0ad0b1b8475298d7c9e9497db9aefa1fe226c23db9f394d9075d2e03c1024f6bfdf2a13cd1345cacbf5ef5db22acaa24f900eb6305681b3ad394adf83b72cf46108614344ce0207e35a95670b7b8b5b651b82677524928b9c766bddc50487597651d19183bc619acf292a0ab8dfe56d2445c8cf7a781aaa236cac9018d68566826ed5661ba2ad923af1daffbe7e206d8b49b5e7a84ec52d00db8d94c1cb145369e334652d12a3abf36bb6ed4164e2285846f4703c1bb41ba5c92bb94dd07724d38b38bb3a9d06a245ea58c157b8af28b2816d9c8d4da2aa08fc92da55d2889cad4f0a41b6fe338db24982f81ee49156017d24ccf2b04a1b278398be93e97448b20c274c78545863ec6f2e0a6298a5e2148fc18cc0fef777814a016a945d3baa3408c42600c5b661364312f24c4c4b3fedbfaae93a3a2a635441172571f68c30704cda271bfe31c66df63e3b2702a5af2eba4f2fdaa2886c359dd26268d03cac5c7cf2c7fb15f3b4cc688ed90d8da9a119c9f789560e743b80b9a3a7c0a943f7be342609ade49d785083e73d334a435eee3f858ba5fa0369fff64fd9af53737f2fba0dce6018f26a8849ed4aafded638ca65fa1566475aa4fc4f729a4b5c3520a0f80c83e32c6c5d4dcfd10e0fb62e601a549950b03cfa9737a60b1b11e84225c1fa141f0a790f02feb54cabccfe0704edb41216f8073a240e10d409d2caccdaba4680fb3181c5adbd15cccc8fc6bc14d84716f3ed8dfbd3f1873097ac4b57ce9cb3cf1e7158336f85ba6f044930157b38652d251467fe40084bd8055255cc37ff18099c8f64adcf1a5acc4319fd1368e6181dcb5f3cb7d65bbe55983399d4465d39d5d4a50430040ac935aefc58723bcec9a0cd66346284299e49caea3183698144dcc59d9bd83f316f1756d28a4c9388cdeb56602e974ab29a636af4603ea5674f82ca5aa702e7c4955e5a553aafd89ab12182f3f3a48fe1f326b24e36384c899bf77ed1c8e129ce26592b7931c95a6569c786fcfdd690caf960e9e5941cb1cff0bbb4f25ece358811a6ca9a3255ce6f76e2bd6dd0a70fde8c4a0d77e15270e8211a3f289cb32d8fc4fd156eb5f22421aeb6bc16e59d6b77e9cf199c06eb8fa011025090f32f40bd4949874f5b74095009505d6b13023b6b1794c4d6d2ccc2ca43a7e32347f5b1898b43f6eae4accdb423e5fc4dda80d452b2185f2c8d46c5750e649620b7a0a44589c9b731d97ce8d51fc696d29c7bb14f0b34c90c3802a64492efa0921c9598c73c909616367170292c2e1600c8ff2d804894884c5ebbbddf62f5065591f50541f1d58a6d9a106c5fb67f5d6ce214378596f8c72b92e60c558c791c98e6a870f86fcd3340f8d8511681244d8c450462e372ce19d5bd28888f8c72756b99762714b136943328f30af0547c60aff6c7ce2bd8eb551e0eb185897d4543d6603a2f58cbd6f9ec4e191cd6e23681878341af7c025f4971a4d5931d2d329ae98343ea3a48f7decfcb6705e43961b38d8b8a67e7c9655a709281350465285ad77a1601f1b8c360c3ded6b977dc599fea5d6c03c25e9515c0b6be6613351e167d13873eea1e7ea826e9a21f0d8b0252231c8a912b7621750389a7189ca53d37ef060c016bbe107df921b33a0c71b70308915d9ee39f41e2ebe26d708832c9bd7bae971a884c8bae8660c7a1d5fd2e54430d6751c4968a092342e06ea6358a24619de71e00ba44f41f9eceb4d5f559e051fb6ad10f413ab865c3625996f347c2e9658435d2fbc8a0a42150b1557ae3d3a402e428c1771c2bf472ce5a5a731ed607b1dd8b648a324190cee74b37aa0038367bf01c237f7e252f249aa3b8cd60084a68ac0fd6d62ed87b3bfe3bfce5b42e97c0130ee39b32dc72ec7c37f59fed54115cc013788e94008cc660f1ace723962a7f8af48d3bc53b42164ebeda911c813b9d8bfcc7c07304cab3dbe015caf134fc1a7efe27b9371bae117942300fdc9346535c48da74fe71d17792f822ec02a94bf14278190083e74fc6e47e7db355da4bfd43e72a26962bc698af21936e2e1697fc82e9cca0acb83ccc253db03a934f0ce3b1addb8d4ebbe3a02bb68d6ccc5dc0dd4e372a3583502c22441247c596ecfce693320d9fd750efd6348b85c40a478ae993057d678415ff60de30134a8138649a08261a97018ac505df2e10d9d18bb91ce963225d525ed476da3cd7b0c6991fdfece88bf1b2be1e0776b125dd1bed4d4eca9081a4f00395a4c38dc76f5a1fc80ee728c01a2f660566f76d8c71ff9d4ad92beceb64e4b20e3e4be96ff12af9f665afe2c06335b1895b"})
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x22, &(0x7f0000000000)={@multicast1, @local}, 0x10)

00:18:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x11, 0x0, 0x0, 0x0)

00:18:31 executing program 4:
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "51b558", 0x28, 0x29, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x2, "493bdfb2a2d1ee4d21bb3069f1aa"}]}}}}}}, 0x0)

00:18:31 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000180)=""/203, 0x1a, 0xcb, 0x1}, 0x20)

00:18:31 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x19, 0x2, &(0x7f00000003c0)=@raw=[@cb_func], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:31 executing program 1:
unshare(0x40500)

00:18:32 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x0, 0x4, 0x80000001, 0x0, 0x1}, 0x48)

00:18:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x3, 0x0, &(0x7f0000000100))

00:18:32 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:32 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x1000, 0x3, 0x1, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x1, 0x1, 0x3, 0xcc}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64, @ANYBLOB="0100000000000000d50900000000000007070000000000000000000000000000010000800000000004000000000000000000000000000000010001000104000000000000000000696f4f26538f5d7d090000000000000005000000000000004000000000000000000000000000120000000000000000000000000000000000007fc31b67b201c80f56b59018d40000000000000000000000000000000000000000000000000000000000000000000001000000006367b46abbcf99536de54c2257792c0000000000000000628d1c360c310fe6ff663d3bccb664a61389cd9d92f28a92b77b1977f6e5c6c77a1af29c1b5025aa0942c12270eb59965d2b16d608a0c7b68ee84bdc54845682f9b57615865da8830fbcaf3805c3eb7d045649d1ac4c7f6a87443df4b4ad0f99287358ca2121ad172cdf7f0f85df59bfabf119588077580ef6dba20449211fcd41ae817cab75f21fcc4cd624452c15e5eb6b1031b9485050f46010915eabcff9c93727d18595bb000000007ab0a52aa0ea1885e5342b34e3787ac4b6b18f2090957768ce4f460e5faf06505af9d8b401010000000000004517f1b6e014cf5aadd6f86a4f5310f982f954fd68943a69563054995875e7524141014dbe877583eb6fb5e9e7360280304b9ff19fb40fca13438743e09bc9b141f8759202cec05363d567e5a217a90fa73ab90135a3f5d5fd64a7bbef5b70528b285242a1b7dbfc000cc2d2ed22e5c2919e5e7cf09d43337cd0901a99aff1277f14ff7f013c84b9197d38649d08dfb517471e730e0af91903ee19dad0ebb72fa2aaae4931d57e0819d276f47e122979f34cf8bd668e3ebd6e7236ee3f690d873889b5f3e3b199de232e01348b6d0d930958d4e16edbbca2050308d43c2f36e16743d50730c1835ea68e7e3de13234355061c72ce228383930cc10410705902e34333682a6c0d8a7658a88209e73d2c68152bbee0af3b12af77364f7d2a58b17f39cb0f1dfe925f5a8c1c5b0753e3b9b7c057c4d08fe2709e5a8a047f80e4765dbb73f05b9471f9707e616175d7b92c36a1ed1ba441140cf6e0353ac975d4a46da2461f23330dd"])
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x12000})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"})
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000040)=0x4) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x1000, 0x3, 0x1, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x1, 0x1, 0x3, 0xcc}}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64, @ANYBLOB="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"]) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x12000}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"}) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:32 executing program 1:
bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

00:18:32 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15)

00:18:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x6, 0xd, 0x0, 0x7)

00:18:32 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0)

00:18:32 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x5, 0x0, 0x0)

00:18:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x10, 0x2c, 0x701, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x0)

00:18:32 executing program 0:
bpf$PROG_LOAD_XDP(0x18, &(0x7f0000001500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:32 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x44}, 0x48)

00:18:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x88, 0x0, 0x0, 0x0)

00:18:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x10, 0x0, 0x0)

00:18:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0)

00:18:32 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x1000, 0x3, 0x1, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x1, 0x1, 0x3, 0xcc}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64, @ANYBLOB="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"])
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x12000})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "9a03c107252743d46bf6d7d215667392a3b7bc98c757612531d20c811dd857244a5e5b43dc259059a0547300b93feea28018b9ef6f8392044a7b8738905a66f67a79a27b5a3a5027b0eb4694176f137638c8ae23eacfe94d0f4b6b4519c53c9cba2f4d7836e3a9b0a4d3abf4d51f205aa1e3219c62656dfa50de90bb8c54b7a6f73282b2a03f9ebd55e865bce2dbd63faf670839c958224dc45f295039d6d952541ebdc030a87a5e606d2dfe5d4d7c572db5dda4ed510567b4c75a803bbf073483b53415e452c4921e682fb71a94dfe84c6ff4463703ab12ee53c341d68c5d90e1bdccaec3e29906552d9bbfe09f0d28d110180b7f270fa69943ae21fd69dff7f0f47ac8cae4f527ca6b539148d4749c98bdceefb83122553015258caa193647fde6c55bd7ea2156bfa75d8c69f5ccbb62d48709831ed2f67c39c8516bd1c473010c8f2c78c8afba3e34250f2714b10883a40845aa1db715360a28266666fa47de26248bb42f858376940a5f6dc354b11b4ece0e607843c7f6fc2cf98f4e7f095e1de2491e23a2f1055f2df0c136e710efa94d0c586623af8e728841cafecccd2803cfdbee9a815bb64d457572ef822a3ceb4996c1be47d6a439dcab43882080ee5d371087d9fcf2d1a47267db79468a7c687b92729dafb34b0c6b7c13899dd9687916abcfe98b9ccc938242463c725a774c473d890826c8657f0a17fb4590d74a634ddd959364a3fb76900f5258391cf066ded1dd21c218b23721371e79aa13058240b292856945e3373e3686d5bcbc9daaf96164dc076634e648a712996fbfdb90ba09e0aaa7a28827c22edfc2925dc6b48f406d8bc64401f7762b4fef7f4c0c44ab2e6cedf1230c0edc3e8cd9f89efe9bbeebe31554b75583152838c4e89e107692aa33f1d2e31c69fde5387df1ff21170c51cdb027ed6d8d98bd4a282d61899224a846a88ed49bd5069fb0dd740495d726b9abd7e891a722925e3aae8c3c5a8a6480796a6feca94f2eb1cb63e2c16410f99975f4d34dd06260ffbb931f3dbdfe1a1bd1105b059cb0c84e57e9c84d4071b2e003f1374ffcf5e4bb191f8ec679340d78e603678635927e6864779cbe8c27083a2f9afb196b56f6cbce598dbcd2257bc223a1b4e080e2ef3bccfd62f682f9c978b63d975899a77814c2e4659d796a58bc43fde35c93d0a528471fc140d0f49c3930ef5041e63649bf97bfba8251407c592463b390b05588bfffc48b1709da3464608f432138319a8758c321f685c4f696d5046c145fb30f7e1d04804a72978016c906e84e1de4bb68b7fdf0f20cb14385197c6b6621929dbfd1fc31b00692d7cec5febec4dec3fb6d06ab24532bba62dae8315a5f26b182ff228f60a78b2998c5f9bd3266e9d649bdff4a6c40de465918bd18e6d9adfd522136a3a30ee60b0b7282f5bfea7724f2934c24b7f1500f4da07b854ded9c416a57aa9b49cbb2c3cace362eda0bc0113dc1f184f88a1bc3388f132c8dccbdddbdd24414e409244db7ed60d354ffecec5e02c469d6cb6f99a5996141da63ec1beabe50353fdceac1a7e2c56ac548dc9ee7a16dd8f70ca41dd132cd95924cb776459b17d0dbaae93011597be77c66c8d28da638a9d7909a4a8dc7e9cad527587768215c147fbea07e255a72dd6aa0faa75a21188cc45cdb2da161c071a97076df139b2a4a5ab6a69bf2b110e0c16d5d97beecae51483df5b2c044bbb721cad2bb028747ff4a23eeeaa545f03de9afe23bd9bbc40b2e701e1ed4ccb6cca04ecfe6bc823bf0498e58eb9727c9e405546645bb9c4a63042ca10bb4521b10c95abf7ec4a371c1294dc877c8f9776317f5102fa0a50537d8a45516444439a61a845befc20824d3465c9a155dad84e7795d2f1edc79656351a2083f6989febbd8f0b0b53bb6ec8db7163c2179a98b9891d659d0d703dedffcb911f7398ee62df0fadb5a074c190a978434ac5801ccc8aefda3ae4213f5a58cadcf64f335fb2fc7fd48b70d59a49ba05a8a64c2430581226eced18b2b06c1b2f928f93b69585539fe70a0d0a241dacc94507766d25011b38fa7bf9eaa5ae4ccacf722f51615c47172c2e656bdb13a695218291620d3ffd85afc6c425a4a68f6cfe7e5807b495c514862f1baf7bf4555a0089f359dd39e1abe338b4e73802ce2553f9c70b1a3344b26e603058d997b130bbe78d97950dad5a81ebbebcb4f961454072a52b12ad1c33ea7922fc33466de63cdeedc3d016b0c045aa5adc153911424a2f42d1ac56ac0275b813f121c087238ae13b2eb7fbea64f15a24987dba47f08258ac2f42fd8862e18c428829f28abae7cdcc670bcc038b10c191bf8d11194b2476c3b6c2d5a956cdb60808628daaeb1fb87525408502eb4eaa7b9d2c37a6610f32ffd2385dfe50e8ab88fdc61469e9dbbd0dc01d31d9e159c58413e7b38e671b222aa3367e35e6a06ed5bb67a368fb6dd087c70fd912a3944508d8f6788cb049ca5f1ffeba82631d1658e9f6fca26974e0d3ff359b3fd4cf0bd13d38384a131cea900f50f7c0f919d462679bedae388f1314d819164a1a8bea5f0b4dfe1b809bd7fbc953071a4a763204232ca99b9033ead7042ee1381a579814df3ce62d6fc82a1bb9209a2badcea1627e8b29d206c0f3a1bf6ffcbbe266d161d8a76213513436266cdfc491965cdda45ba4905f1477fee83395846ce975db9692eb977cc00c5c0200017d74494a0ce2140cc176e2fc8a51ac053a6b8c48ab8d9e6ea7a7cb6f064115010e041de6a255ea65f7a91a2326dd988bc16b63edf61bb6dbc5dffaf95f45ec22ec3187970a4a45a4812bc1a1d0a2376fc16e001194801505b07e35e1ad03d78a0c58e73f051a9312a07e355685ee9f6810d17f5025d90946121c34f908a76984892b16decc16054ad5019f2a9357b5007c20bb6503cf0805e8b87daabe748634503d7648e1562a2ee4833d133d3a08f9409cba114a67a8d9bc069a1e9bf28b99f405ce49734780d392403de9bb73f8e312460ed67398aa71495f35f087febbf2b4af1a52a72a4b6058a2cf48c1ddbb6a7d1f13720b9a594505e59f872d1a0ad0b1b8475298d7c9e9497db9aefa1fe226c23db9f394d9075d2e03c1024f6bfdf2a13cd1345cacbf5ef5db22acaa24f900eb6305681b3ad394adf83b72cf46108614344ce0207e35a95670b7b8b5b651b82677524928b9c766bddc50487597651d19183bc619acf292a0ab8dfe56d2445c8cf7a781aaa236cac9018d68566826ed5661ba2ad923af1daffbe7e206d8b49b5e7a84ec52d00db8d94c1cb145369e334652d12a3abf36bb6ed4164e2285846f4703c1bb41ba5c92bb94dd07724d38b38bb3a9d06a245ea58c157b8af28b2816d9c8d4da2aa08fc92da55d2889cad4f0a41b6fe338db24982f81ee49156017d24ccf2b04a1b278398be93e97448b20c274c78545863ec6f2e0a6298a5e2148fc18cc0fef777814a016a945d3baa3408c42600c5b661364312f24c4c4b3fedbfaae93a3a2a635441172571f68c30704cda271bfe31c66df63e3b2702a5af2eba4f2fdaa2886c359dd26268d03cac5c7cf2c7fb15f3b4cc688ed90d8da9a119c9f789560e743b80b9a3a7c0a943f7be342609ade49d785083e73d334a435eee3f858ba5fa0369fff64fd9af53737f2fba0dce6018f26a8849ed4aafded638ca65fa1566475aa4fc4f729a4b5c3520a0f80c83e32c6c5d4dcfd10e0fb62e601a549950b03cfa9737a60b1b11e84225c1fa141f0a790f02feb54cabccfe0704edb41216f8073a240e10d409d2caccdaba4680fb3181c5adbd15cccc8fc6bc14d84716f3ed8dfbd3f1873097ac4b57ce9cb3cf1e7158336f85ba6f044930157b38652d251467fe40084bd8055255cc37ff18099c8f64adcf1a5acc4319fd1368e6181dcb5f3cb7d65bbe55983399d4465d39d5d4a50430040ac935aefc58723bcec9a0cd66346284299e49caea3183698144dcc59d9bd83f316f1756d28a4c9388cdeb56602e974ab29a636af4603ea5674f82ca5aa702e7c4955e5a553aafd89ab12182f3f3a48fe1f326b24e36384c899bf77ed1c8e129ce26592b7931c95a6569c786fcfdd690caf960e9e5941cb1cff0bbb4f25ece358811a6ca9a3255ce6f76e2bd6dd0a70fde8c4a0d77e15270e8211a3f289cb32d8fc4fd156eb5f22421aeb6bc16e59d6b77e9cf199c06eb8fa011025090f32f40bd4949874f5b74095009505d6b13023b6b1794c4d6d2ccc2ca43a7e32347f5b1898b43f6eae4accdb423e5fc4dda80d452b2185f2c8d46c5750e649620b7a0a44589c9b731d97ce8d51fc696d29c7bb14f0b34c90c3802a64492efa0921c9598c73c909616367170292c2e1600c8ff2d804894884c5ebbbddf62f5065591f50541f1d58a6d9a106c5fb67f5d6ce214378596f8c72b92e60c558c791c98e6a870f86fcd3340f8d8511681244d8c450462e372ce19d5bd28888f8c72756b99762714b136943328f30af0547c60aff6c7ce2bd8eb551e0eb185897d4543d6603a2f58cbd6f9ec4e191cd6e23681878341af7c025f4971a4d5931d2d329ae98343ea3a48f7decfcb6705e43961b38d8b8a67e7c9655a709281350465285ad77a1601f1b8c360c3ded6b977dc599fea5d6c03c25e9515c0b6be6613351e167d13873eea1e7ea826e9a21f0d8b0252231c8a912b7621750389a7189ca53d37ef060c016bbe107df921b33a0c71b70308915d9ee39f41e2ebe26d708832c9bd7bae971a884c8bae8660c7a1d5fd2e54430d6751c4968a092342e06ea6358a24619de71e00ba44f41f9eceb4d5f559e051fb6ad10f413ab865c3625996f347c2e9658435d2fbc8a0a42150b1557ae3d3a402e428c1771c2bf472ce5a5a731ed607b1dd8b648a324190cee74b37aa0038367bf01c237f7e252f249aa3b8cd60084a68ac0fd6d62ed87b3bfe3bfce5b42e97c0130ee39b32dc72ec7c37f59fed54115cc013788e94008cc660f1ace723962a7f8af48d3bc53b42164ebeda911c813b9d8bfcc7c07304cab3dbe015caf134fc1a7efe27b9371bae117942300fdc9346535c48da74fe71d17792f822ec02a94bf14278190083e74fc6e47e7db355da4bfd43e72a26962bc698af21936e2e1697fc82e9cca0acb83ccc253db03a934f0ce3b1addb8d4ebbe3a02bb68d6ccc5dc0dd4e372a3583502c22441247c596ecfce693320d9fd750efd6348b85c40a478ae993057d678415ff60de30134a8138649a08261a97018ac505df2e10d9d18bb91ce963225d525ed476da3cd7b0c6991fdfece88bf1b2be1e0776b125dd1bed4d4eca9081a4f00395a4c38dc76f5a1fc80ee728c01a2f660566f76d8c71ff9d4ad92beceb64e4b20e3e4be96ff12af9f665afe2c06335b1895b"})
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000040)=0x4) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x1000, 0x3, 0x1, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x1, 0x1, 0x3, 0xcc}}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64, @ANYBLOB="0100000000000000d50900000000000007070000000000000000000000000000010000800000000004000000000000000000000000000000010001000104000000000000000000696f4f26538f5d7d090000000000000005000000000000004000000000000000000000000000120000000000000000000000000000000000007fc31b67b201c80f56b59018d40000000000000000000000000000000000000000000000000000000000000000000001000000006367b46abbcf99536de54c2257792c0000000000000000628d1c360c310fe6ff663d3bccb664a61389cd9d92f28a92b77b1977f6e5c6c77a1af29c1b5025aa0942c12270eb59965d2b16d608a0c7b68ee84bdc54845682f9b57615865da8830fbcaf3805c3eb7d045649d1ac4c7f6a87443df4b4ad0f99287358ca2121ad172cdf7f0f85df59bfabf119588077580ef6dba20449211fcd41ae817cab75f21fcc4cd624452c15e5eb6b1031b9485050f46010915eabcff9c93727d18595bb000000007ab0a52aa0ea1885e5342b34e3787ac4b6b18f2090957768ce4f460e5faf06505af9d8b401010000000000004517f1b6e014cf5aadd6f86a4f5310f982f954fd68943a69563054995875e7524141014dbe877583eb6fb5e9e7360280304b9ff19fb40fca13438743e09bc9b141f8759202cec05363d567e5a217a90fa73ab90135a3f5d5fd64a7bbef5b70528b285242a1b7dbfc000cc2d2ed22e5c2919e5e7cf09d43337cd0901a99aff1277f14ff7f013c84b9197d38649d08dfb517471e730e0af91903ee19dad0ebb72fa2aaae4931d57e0819d276f47e122979f34cf8bd668e3ebd6e7236ee3f690d873889b5f3e3b199de232e01348b6d0d930958d4e16edbbca2050308d43c2f36e16743d50730c1835ea68e7e3de13234355061c72ce228383930cc10410705902e34333682a6c0d8a7658a88209e73d2c68152bbee0af3b12af77364f7d2a58b17f39cb0f1dfe925f5a8c1c5b0753e3b9b7c057c4d08fe2709e5a8a047f80e4765dbb73f05b9471f9707e616175d7b92c36a1ed1ba441140cf6e0353ac975d4a46da2461f23330dd"]) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x12000}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "d14f8b3368ed5cdc9144b6992984bef327aa8f757e949ec0e841601e4557594d9a795fe9047cfe2782c03d840b0f4e5f06aa935849b21b89a5c6e411d01c9fdc0d1cf1f7e95368d2b5d129396888e54c21b6ab51e9972bd8018e9f5c45d96e7e442ad204972f8132e3ebabed69f0aa0c5b3e878347e4c55d5cb95cefb8ee034d5b6f09f9802da7b788b287f1b9a52e7e0466e6fce76b8a70da45432e5e2adc7b3c64f1c922923cc48a143d9355dd4c60315bd03cf876ea561457de228b6cb5e38c31d69e68ea83e4a2cd38238d062811fa2aa28556ac129b08051d44dd26a04a853079f3202ee682d62689cf91ab88658e57c09852b283b04113fd9547b84105", "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"}) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

00:18:32 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004780)=@delchain={0x34, 0x28, 0xd31, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@filter_kind_options=@f_rsvp={{0x9, 0xe}, {0x4}}]}, 0x34}}, 0x0)

00:18:32 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts_2292={{0x18}}], 0x40}}], 0x1, 0x0)

00:18:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000001c0)=ANY=[]})

00:18:32 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15)

00:18:32 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x10}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x48}, 0x1, 0x100000000000000}, 0x0)

00:18:32 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000180)=""/203, 0x1a, 0xcb, 0x1}, 0x20)

[ 1026.192430][T32401] netlink: 'syz-executor.0': attribute type 14 has an invalid length.
00:18:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x88, 0x29, 0x0, 0x7)

00:18:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:18:32 executing program 1:
bpf$MAP_CREATE(0x12, &(0x7f00000000c0), 0x48)

00:18:32 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x7)

00:18:32 executing program 0:
bpf$BPF_BTF_LOAD(0x7ffff, 0x0, 0x0)

00:18:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x22, 0x0, &(0x7f0000000100))

00:18:32 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0)

00:18:32 executing program 0:
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @local, @val={@void, {0x8100, 0x6}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @loopback, @random="deddb1ddfe32", @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0)

00:18:32 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15)

00:18:32 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x8000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000e0ff0100000000", @ANYRES32, @ANYBLOB="c00c0000000000002e2f66696c653000"])
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680))
r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0xd2d9, 0xc00)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x227d, &(0x7f0000000680))
lseek(r5, 0x3, 0xbda19ad03e2686ac)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

00:18:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xffffffffffffff09, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}}, 0x0)

00:18:32 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @int]}}, &(0x7f0000000180)=""/203, 0x42, 0xcb, 0x1}, 0x20)

00:18:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000), 0x4)

00:18:33 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}})

00:18:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f0000000000)={@multicast1, @local}, 0x10)

00:18:33 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, 0x0, 0x0, 0x4040000, &(0x7f0000000180)={0xa, 0x800, 0x0, @private1}, 0x1c)

00:18:33 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback, {[@rr={0x7, 0x2b, 0x0, [@multicast2, @multicast1, @multicast2, @private, @loopback, @rand_addr, @broadcast, @broadcast, @local, @loopback]}, @ra={0x94, 0x4}, @generic={0x0, 0xe, "b153d398d731789a89733fce"}]}}}}})

00:18:33 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @local}}}, 0x88)

00:18:33 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x1600bd78, 0x0, 0x0)

00:18:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x8, 0x0, 0x7)

00:18:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000000)={@multicast1, @local}, 0x10)

00:18:33 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200), 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xeda8}, 0x1c)

00:18:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008"], 0x40}}, 0x0)

00:18:33 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x1e, 0x2, &(0x7f00000003c0)=@raw=[@cb_func], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:33 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x8000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000e0ff0100000000", @ANYRES32, @ANYBLOB="c00c0000000000002e2f66696c653000"]) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680))
r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0xd2d9, 0xc00)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x227d, &(0x7f0000000680)) (async)
lseek(r5, 0x3, 0xbda19ad03e2686ac) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

00:18:33 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x7)

00:18:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)={0x14, 0x0, 0x804}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)

00:18:33 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x4, 0x0, @local}, 0x10)

00:18:33 executing program 4:
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080), 0xfffffffffffffe23)

00:18:33 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:18:33 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xde8, 0x42, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48)

00:18:33 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/203, 0x1a, 0xcb, 0x1}, 0x20)

00:18:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000100))

00:18:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, &(0x7f0000000100))

00:18:34 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xeda8, 0x0, 0x0, @private2}, 0x1c)

00:18:34 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x8000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000e0ff0100000000", @ANYRES32, @ANYBLOB="c00c0000000000002e2f66696c653000"])
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680))
r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0xd2d9, 0xc00)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x227d, &(0x7f0000000680))
lseek(r5, 0x3, 0xbda19ad03e2686ac)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x8000000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000e0ff0100000000", @ANYRES32, @ANYBLOB="c00c0000000000002e2f66696c653000"]) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r0) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, &(0x7f0000000680)) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0xd2d9, 0xc00) (async)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x227d, &(0x7f0000000680)) (async)
lseek(r5, 0x3, 0xbda19ad03e2686ac) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

00:18:34 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1}, 0xe, {0x2, 0x0, @broadcast}, 'vlan0\x00'})

00:18:34 executing program 2:
socketpair(0x2, 0xa, 0x300, &(0x7f00000001c0))

00:18:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="ff0700000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)

00:18:34 executing program 0:
bpf$PROG_LOAD_XDP(0xa, &(0x7f0000001500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x29, 0x0, &(0x7f0000000100))

00:18:34 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

00:18:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, 0x7)

00:18:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

00:18:34 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)

00:18:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@fragment, 0x8)

00:18:34 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000017b000/0x4000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:34 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000201000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="660f388242f03ef65c25ccb9800000c00f3235008000000f30f20f060f20850f38c9b1000001008fc8c0a27d046f3e67640ffd680836f30faef066b8bf008ec0", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4)

00:18:34 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x0)

00:18:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0xf, 0x0, &(0x7f0000000100))

00:18:34 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48)

00:18:34 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000d00)={0x14, 0x0, 0x804}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

00:18:34 executing program 0:
r0 = socket(0xa, 0x3, 0x8)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0}}, 0x0)

00:18:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x21, 0x0, 0x0)

00:18:34 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1}})

00:18:34 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x3e8, 0x2, &(0x7f00000003c0)=@raw=[@cb_func], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:34 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000017b000/0x4000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000017b000/0x4000)=nil) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:34 executing program 0:
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @loopback, @random="deddb1ddfe32", @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0)

00:18:35 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000201000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="660f388242f03ef65c25ccb9800000c00f3235008000000f30f20f060f20850f38c9b1000001008fc8c0a27d046f3e67640ffd680836f30faef066b8bf008ec0", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4)

00:18:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'gretap0\x00', 0x0})

00:18:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000100))

00:18:35 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x9, 0x0, &(0x7f0000000280))

00:18:35 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="b5", 0x1}, {&(0x7f0000000140)="94", 0x1}], 0x2, &(0x7f0000000200)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private}}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)='%', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}, {{&(0x7f0000000dc0)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x4, 0x8084)

00:18:35 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000017b000/0x4000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000017b000/0x4000)=nil) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

00:18:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x7, 0x0, &(0x7f00000002c0))

00:18:35 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}})

00:18:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqsrc(r0, 0x0, 0x9, 0x0, &(0x7f0000000100))

00:18:35 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)='c', 0x1}], 0x1}}], 0x3, 0x8084)

00:18:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x1600bd7d, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x1, [@multicast2]}, 0x14)

00:18:36 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000201000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="660f388242f03ef65c25ccb9800000c00f3235008000000f30f20f060f20850f38c9b1000001008fc8c0a27d046f3e67640ffd680836f30faef066b8bf008ec0", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000201000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="660f388242f03ef65c25ccb9800000c00f3235008000000f30f20f060f20850f38c9b1000001008fc8c0a27d046f3e67640ffd680836f30faef066b8bf008ec0", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) (async)

00:18:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x17, &(0x7f0000000000)={@multicast1, @local}, 0x10)

00:18:36 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000180)=0x1000, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)

00:18:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x6, 0x21, 0x0, 0x7)

00:18:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:36 executing program 1:
syz_clone(0x200a100, 0x0, 0x0, 0x0, 0x0, 0x0)

00:18:36 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x2, 0x1, 0x7b}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000005c0)=""/200, 0x34, 0xc8, 0x1}, 0x20)

00:18:36 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000040)=""/154, 0x26, 0x9a, 0x1}, 0x20)

00:18:36 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:18:36 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10)

00:18:36 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000180)=""/197, 0x28, 0xc5, 0x1}, 0x20)

00:18:36 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
poll(0x0, 0x0, 0x0)

00:18:36 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "29303b862b9f7cf85e42adc5973b1bd50391aaf3646bc5932874be8e5e07033b6c3a8c8926868a2351ad27e0dbb6387a0b5d66b44983a6f573096eb157"}, 0x41)

00:18:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:36 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

00:18:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x300)

00:18:36 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x101)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x8)

00:18:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0xc008ae91, &(0x7f0000004480)={{0x0, 0x0, 0x80}, "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", "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"})

00:18:36 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x20001400)

00:18:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:36 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "29303b862b9f7cf85e42adc5973b1bd50391aaf3646bc5932874be8e5e07033b6c3a8c8926868a2351ad27e0dbb6387a0b5d66b44983a6f573096eb157"}, 0x41)

00:18:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil})

00:18:36 executing program 4:
readlinkat(0xffffffffffffffff, &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)=""/189, 0xbd)

00:18:36 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040))

00:18:36 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "0b188bc016428000a5c0b6fec5712293e1359db4f7a678a945bf354db70d0c05f1a83b4b1aa62670c7aa597f9a83f2219978f47108f6e7aeaa4a1e7365eb1c82"}, 0x48, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r0)
add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0)

00:18:36 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000043c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080))

00:18:36 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r7 = dup(r6)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="5d487a0070000472e80d984365c918376ffce5576739176979a8b9ed77cf77c021b8559a7c52e8c66b2e215d9450e26a711aeaaf4fc2461a9a33f8c8879edee2b20ede32b11c1ca52f988b9596997e36743de947e67eca0d", 0x58}, {&(0x7f00000001c0)="d9f7a876c01ff4e6fc9b24b47858798e25dc54793f77acc8733ff18fe532424c21fb2ae579804453cad780b1ee5ae427e47502f77b3539c3dc15305dfafe24ecfb3486523365f2bbfbb23322925e5be4bdc7054df8f5e51b488d2251fc1ec6e7ba5ca19149c14cab01a4efdc741a9877", 0x70}, {&(0x7f0000000240)="09b7404d3f544041c324a876db8d372cc6ba16ff52c520dce56b5d50d71d816774e56beac27985ac46ad175e756b6c4374d9f05aa1a9be13b09fe60b19b8a492b1eed5194d88a14065f27c07fa331f09cdfaa7657f5c", 0x56}, {&(0x7f00000002c0)="d48ebb1adbd66cfea8c68ae5d97a09b54d57f63bb420b5fcad0da554c77ba6d03234ffbbb67082547712aa57426f484f50562700f7de25f6712be6443a83d4d5d0978aec65e08b36a1754cf2b088b28b3409600a4ef984d504f4af64f73df2e89e2b6749600a09eb50e2c372be8ecdd177bcf0aa851613140be775abeaae17335a97162cefa800687b064a6595f83ab833aa71d3aed101ce4900e0e8f4a59da68afbbfaa5ce78bc8355c3e4cee1b160ae0cfb3dfb38834a6f9a1", 0xba}, {&(0x7f0000000380)="3a00247ff7f14280b9f520ff480fb70876254512f66b050e095aa71b4a57fced93383d0551e2887fe50307a02c7189fe4185ec2e80ebf1a1611c93ed9cd40d66f8b7f1bdea63d11f644b3239fb33", 0x4e}, {&(0x7f0000000440)="931ddd949aa3666e265e951d602a6d24d2e4a8b38b5ca8de4cab006c77735ece07ff88495165d6c1ddbd57060aae0d4d22dbb2c08daac84274ba375eee6a66c0f65d666e113dac739a3d4e7951786435574b575acbe66f027078f7632abe9f9fdbee471edf5eb3ba830c82d1242fd0fee8ec9d5ec0f623dbaa73000f4785401f94498849d0bd926878240e8408f024971ec0876fed4601b9acb310ac3897af024b4046f6c95327e53483d9cd48e1a686cd05497aaf09246ecc0564c4f79855b67fb0db326431437798fa22a3e3ec77060b2986f2040a6a3c99b7a46ddb29ccf2e13032eb6d2a15a1f7002567", 0xb1}, {&(0x7f0000000540)="9fd3cfae7a2bec95913e91ae85146be5bd016e310a29b71161286fdaf015fa0515b34d33dce760c3425491bbb29fc79e5390bda6223838a356f5aa216bd9bbe738bf61a13207651576a8e8d710ab9c5ffc223c293b62cd10bbbf7bb56b7df73760675bdcc2bf26cbec2e6fcb0a932c4fd034ff12e23fa56078b7bdd0ed9edfdf559b89fcec73a6da5a8ab541828ddb9f525360ff48b603666c2afbc9270f3e63661606756f8d0b41663e49bc99716ed0b0cec036d3629dceb444e1bc71b7869034d84f35f55ac1901acdd2af4016a8ebb0711ee70dec6d98f14044c1546f7caf69ca8b9751", 0xe5}], 0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000026d000/0x1000)=nil, &(0x7f000002a000/0x2000)=nil, &(0x7f00000c7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000021000/0x4000)=nil, &(0x7f0000356000/0x3000)=nil, &(0x7f0000023000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f0000000640)="92f4d7fc6c24ede28c23a9c6320a9685ab1d129417ede0268c0c82325ced39b6223966e3ca7e45f076652694f14bc38d2c34015122b5dcb29e3fe883ad24b82a4860fcade65424d24e514968b818e2bb4b319b29c22e06218cf37f45da276259b89176ff5ac37c7486ad3a7fdca48dc20e12d6a328fb261a02bad19f3f2d3b44e72f56266c231f6d15530e7b132750a4d36fe7a7d39c0f7ca70310494265405309dab09b43b353d4680f70b7597fb9779b2af469b338f6f71d165952af5705799aacf08c460e0620fa66fb470537214f44c6b8f6e176b2", 0xd7}, 0x64)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000040))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
lseek(r8, 0xdcc, 0x4)

00:18:37 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd01, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000080)={@val, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa, 0x0, [], "88ee8f7f853677bda54c"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2b}}}}}, 0x70)

00:18:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
fcntl$getflags(r0, 0x401)

00:18:37 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "0b188bc016428000a5c0b6fec5712293e1359db4f7a678a945bf354db70d0c05f1a83b4b1aa62670c7aa597f9a83f2219978f47108f6e7aeaa4a1e7365eb1c82"}, 0x48, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r0)
add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0)

00:18:37 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2, 0xf, 0x0, &(0x7f00000000c0)="a673f3ce05f1a282eeab0500000800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

00:18:37 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "0b188bc016428000a5c0b6fec5712293e1359db4f7a678a945bf354db70d0c05f1a83b4b1aa62670c7aa597f9a83f2219978f47108f6e7aeaa4a1e7365eb1c82"}, 0x48, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r0)
add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0)

[ 1030.832257][T32747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1030.839705][T32747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1030.871351][T32747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
00:18:37 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "29303b862b9f7cf85e42adc5973b1bd50391aaf3646bc5932874be8e5e07033b6c3a8c8926868a2351ad27e0dbb6387a0b5d66b44983a6f573096eb157"}, 0x41)

00:18:37 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "0b188bc016428000a5c0b6fec5712293e1359db4f7a678a945bf354db70d0c05f1a83b4b1aa62670c7aa597f9a83f2219978f47108f6e7aeaa4a1e7365eb1c82"}, 0x48, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r0)
add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0)

00:18:37 executing program 1:
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ff7000/0x9000)=nil, 0x9000)

00:18:37 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00')

00:18:37 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x62)
r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
sendfile(r0, r1, 0x0, 0x101000002)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

00:18:37 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (rerun: 64)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32)
r6 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r7 = dup(r6)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="5d487a0070000472e80d984365c918376ffce5576739176979a8b9ed77cf77c021b8559a7c52e8c66b2e215d9450e26a711aeaaf4fc2461a9a33f8c8879edee2b20ede32b11c1ca52f988b9596997e36743de947e67eca0d", 0x58}, {&(0x7f00000001c0)="d9f7a876c01ff4e6fc9b24b47858798e25dc54793f77acc8733ff18fe532424c21fb2ae579804453cad780b1ee5ae427e47502f77b3539c3dc15305dfafe24ecfb3486523365f2bbfbb23322925e5be4bdc7054df8f5e51b488d2251fc1ec6e7ba5ca19149c14cab01a4efdc741a9877", 0x70}, {&(0x7f0000000240)="09b7404d3f544041c324a876db8d372cc6ba16ff52c520dce56b5d50d71d816774e56beac27985ac46ad175e756b6c4374d9f05aa1a9be13b09fe60b19b8a492b1eed5194d88a14065f27c07fa331f09cdfaa7657f5c", 0x56}, {&(0x7f00000002c0)="d48ebb1adbd66cfea8c68ae5d97a09b54d57f63bb420b5fcad0da554c77ba6d03234ffbbb67082547712aa57426f484f50562700f7de25f6712be6443a83d4d5d0978aec65e08b36a1754cf2b088b28b3409600a4ef984d504f4af64f73df2e89e2b6749600a09eb50e2c372be8ecdd177bcf0aa851613140be775abeaae17335a97162cefa800687b064a6595f83ab833aa71d3aed101ce4900e0e8f4a59da68afbbfaa5ce78bc8355c3e4cee1b160ae0cfb3dfb38834a6f9a1", 0xba}, {&(0x7f0000000380)="3a00247ff7f14280b9f520ff480fb70876254512f66b050e095aa71b4a57fced93383d0551e2887fe50307a02c7189fe4185ec2e80ebf1a1611c93ed9cd40d66f8b7f1bdea63d11f644b3239fb33", 0x4e}, {&(0x7f0000000440)="931ddd949aa3666e265e951d602a6d24d2e4a8b38b5ca8de4cab006c77735ece07ff88495165d6c1ddbd57060aae0d4d22dbb2c08daac84274ba375eee6a66c0f65d666e113dac739a3d4e7951786435574b575acbe66f027078f7632abe9f9fdbee471edf5eb3ba830c82d1242fd0fee8ec9d5ec0f623dbaa73000f4785401f94498849d0bd926878240e8408f024971ec0876fed4601b9acb310ac3897af024b4046f6c95327e53483d9cd48e1a686cd05497aaf09246ecc0564c4f79855b67fb0db326431437798fa22a3e3ec77060b2986f2040a6a3c99b7a46ddb29ccf2e13032eb6d2a15a1f7002567", 0xb1}, {&(0x7f0000000540)="9fd3cfae7a2bec95913e91ae85146be5bd016e310a29b71161286fdaf015fa0515b34d33dce760c3425491bbb29fc79e5390bda6223838a356f5aa216bd9bbe738bf61a13207651576a8e8d710ab9c5ffc223c293b62cd10bbbf7bb56b7df73760675bdcc2bf26cbec2e6fcb0a932c4fd034ff12e23fa56078b7bdd0ed9edfdf559b89fcec73a6da5a8ab541828ddb9f525360ff48b603666c2afbc9270f3e63661606756f8d0b41663e49bc99716ed0b0cec036d3629dceb444e1bc71b7869034d84f35f55ac1901acdd2af4016a8ebb0711ee70dec6d98f14044c1546f7caf69ca8b9751", 0xe5}], 0x7) (async, rerun: 64)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000026d000/0x1000)=nil, &(0x7f000002a000/0x2000)=nil, &(0x7f00000c7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000021000/0x4000)=nil, &(0x7f0000356000/0x3000)=nil, &(0x7f0000023000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f0000000640)="92f4d7fc6c24ede28c23a9c6320a9685ab1d129417ede0268c0c82325ced39b6223966e3ca7e45f076652694f14bc38d2c34015122b5dcb29e3fe883ad24b82a4860fcade65424d24e514968b818e2bb4b319b29c22e06218cf37f45da276259b89176ff5ac37c7486ad3a7fdca48dc20e12d6a328fb261a02bad19f3f2d3b44e72f56266c231f6d15530e7b132750a4d36fe7a7d39c0f7ca70310494265405309dab09b43b353d4680f70b7597fb9779b2af469b338f6f71d165952af5705799aacf08c460e0620fa66fb470537214f44c6b8f6e176b2", 0xd7}, 0x64) (async, rerun: 64)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000040)) (async, rerun: 64)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
lseek(r8, 0xdcc, 0x4)

00:18:37 executing program 0:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x1)

00:18:37 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x101)
ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

00:18:37 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x101)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

00:18:37 executing program 4:
open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}})

00:18:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:38 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:38 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xd5, 0x1)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0)

[ 1031.655247][  T310] fuse: blksize only supported for fuseblk
00:18:38 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000008c0))

00:18:38 executing program 1:
r0 = epoll_create(0x6)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

00:18:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

00:18:38 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x161101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101)
r7 = dup(r6)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="5d487a0070000472e80d984365c918376ffce5576739176979a8b9ed77cf77c021b8559a7c52e8c66b2e215d9450e26a711aeaaf4fc2461a9a33f8c8879edee2b20ede32b11c1ca52f988b9596997e36743de947e67eca0d", 0x58}, {&(0x7f00000001c0)="d9f7a876c01ff4e6fc9b24b47858798e25dc54793f77acc8733ff18fe532424c21fb2ae579804453cad780b1ee5ae427e47502f77b3539c3dc15305dfafe24ecfb3486523365f2bbfbb23322925e5be4bdc7054df8f5e51b488d2251fc1ec6e7ba5ca19149c14cab01a4efdc741a9877", 0x70}, {&(0x7f0000000240)="09b7404d3f544041c324a876db8d372cc6ba16ff52c520dce56b5d50d71d816774e56beac27985ac46ad175e756b6c4374d9f05aa1a9be13b09fe60b19b8a492b1eed5194d88a14065f27c07fa331f09cdfaa7657f5c", 0x56}, {&(0x7f00000002c0)="d48ebb1adbd66cfea8c68ae5d97a09b54d57f63bb420b5fcad0da554c77ba6d03234ffbbb67082547712aa57426f484f50562700f7de25f6712be6443a83d4d5d0978aec65e08b36a1754cf2b088b28b3409600a4ef984d504f4af64f73df2e89e2b6749600a09eb50e2c372be8ecdd177bcf0aa851613140be775abeaae17335a97162cefa800687b064a6595f83ab833aa71d3aed101ce4900e0e8f4a59da68afbbfaa5ce78bc8355c3e4cee1b160ae0cfb3dfb38834a6f9a1", 0xba}, {&(0x7f0000000380)="3a00247ff7f14280b9f520ff480fb70876254512f66b050e095aa71b4a57fced93383d0551e2887fe50307a02c7189fe4185ec2e80ebf1a1611c93ed9cd40d66f8b7f1bdea63d11f644b3239fb33", 0x4e}, {&(0x7f0000000440)="931ddd949aa3666e265e951d602a6d24d2e4a8b38b5ca8de4cab006c77735ece07ff88495165d6c1ddbd57060aae0d4d22dbb2c08daac84274ba375eee6a66c0f65d666e113dac739a3d4e7951786435574b575acbe66f027078f7632abe9f9fdbee471edf5eb3ba830c82d1242fd0fee8ec9d5ec0f623dbaa73000f4785401f94498849d0bd926878240e8408f024971ec0876fed4601b9acb310ac3897af024b4046f6c95327e53483d9cd48e1a686cd05497aaf09246ecc0564c4f79855b67fb0db326431437798fa22a3e3ec77060b2986f2040a6a3c99b7a46ddb29ccf2e13032eb6d2a15a1f7002567", 0xb1}, {&(0x7f0000000540)="9fd3cfae7a2bec95913e91ae85146be5bd016e310a29b71161286fdaf015fa0515b34d33dce760c3425491bbb29fc79e5390bda6223838a356f5aa216bd9bbe738bf61a13207651576a8e8d710ab9c5ffc223c293b62cd10bbbf7bb56b7df73760675bdcc2bf26cbec2e6fcb0a932c4fd034ff12e23fa56078b7bdd0ed9edfdf559b89fcec73a6da5a8ab541828ddb9f525360ff48b603666c2afbc9270f3e63661606756f8d0b41663e49bc99716ed0b0cec036d3629dceb444e1bc71b7869034d84f35f55ac1901acdd2af4016a8ebb0711ee70dec6d98f14044c1546f7caf69ca8b9751", 0xe5}], 0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000026d000/0x1000)=nil, &(0x7f000002a000/0x2000)=nil, &(0x7f00000c7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000021000/0x4000)=nil, &(0x7f0000356000/0x3000)=nil, &(0x7f0000023000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f0000000640)="92f4d7fc6c24ede28c23a9c6320a9685ab1d129417ede0268c0c82325ced39b6223966e3ca7e45f076652694f14bc38d2c34015122b5dcb29e3fe883ad24b82a4860fcade65424d24e514968b818e2bb4b319b29c22e06218cf37f45da276259b89176ff5ac37c7486ad3a7fdca48dc20e12d6a328fb261a02bad19f3f2d3b44e72f56266c231f6d15530e7b132750a4d36fe7a7d39c0f7ca70310494265405309dab09b43b353d4680f70b7597fb9779b2af469b338f6f71d165952af5705799aacf08c460e0620fa66fb470537214f44c6b8f6e176b2", 0xd7}, 0x64)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000040))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
lseek(r8, 0xdcc, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x161101) (async)
dup(r2) (async)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async)
dup(r6) (async)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="5d487a0070000472e80d984365c918376ffce5576739176979a8b9ed77cf77c021b8559a7c52e8c66b2e215d9450e26a711aeaaf4fc2461a9a33f8c8879edee2b20ede32b11c1ca52f988b9596997e36743de947e67eca0d", 0x58}, {&(0x7f00000001c0)="d9f7a876c01ff4e6fc9b24b47858798e25dc54793f77acc8733ff18fe532424c21fb2ae579804453cad780b1ee5ae427e47502f77b3539c3dc15305dfafe24ecfb3486523365f2bbfbb23322925e5be4bdc7054df8f5e51b488d2251fc1ec6e7ba5ca19149c14cab01a4efdc741a9877", 0x70}, {&(0x7f0000000240)="09b7404d3f544041c324a876db8d372cc6ba16ff52c520dce56b5d50d71d816774e56beac27985ac46ad175e756b6c4374d9f05aa1a9be13b09fe60b19b8a492b1eed5194d88a14065f27c07fa331f09cdfaa7657f5c", 0x56}, {&(0x7f00000002c0)="d48ebb1adbd66cfea8c68ae5d97a09b54d57f63bb420b5fcad0da554c77ba6d03234ffbbb67082547712aa57426f484f50562700f7de25f6712be6443a83d4d5d0978aec65e08b36a1754cf2b088b28b3409600a4ef984d504f4af64f73df2e89e2b6749600a09eb50e2c372be8ecdd177bcf0aa851613140be775abeaae17335a97162cefa800687b064a6595f83ab833aa71d3aed101ce4900e0e8f4a59da68afbbfaa5ce78bc8355c3e4cee1b160ae0cfb3dfb38834a6f9a1", 0xba}, {&(0x7f0000000380)="3a00247ff7f14280b9f520ff480fb70876254512f66b050e095aa71b4a57fced93383d0551e2887fe50307a02c7189fe4185ec2e80ebf1a1611c93ed9cd40d66f8b7f1bdea63d11f644b3239fb33", 0x4e}, {&(0x7f0000000440)="931ddd949aa3666e265e951d602a6d24d2e4a8b38b5ca8de4cab006c77735ece07ff88495165d6c1ddbd57060aae0d4d22dbb2c08daac84274ba375eee6a66c0f65d666e113dac739a3d4e7951786435574b575acbe66f027078f7632abe9f9fdbee471edf5eb3ba830c82d1242fd0fee8ec9d5ec0f623dbaa73000f4785401f94498849d0bd926878240e8408f024971ec0876fed4601b9acb310ac3897af024b4046f6c95327e53483d9cd48e1a686cd05497aaf09246ecc0564c4f79855b67fb0db326431437798fa22a3e3ec77060b2986f2040a6a3c99b7a46ddb29ccf2e13032eb6d2a15a1f7002567", 0xb1}, {&(0x7f0000000540)="9fd3cfae7a2bec95913e91ae85146be5bd016e310a29b71161286fdaf015fa0515b34d33dce760c3425491bbb29fc79e5390bda6223838a356f5aa216bd9bbe738bf61a13207651576a8e8d710ab9c5ffc223c293b62cd10bbbf7bb56b7df73760675bdcc2bf26cbec2e6fcb0a932c4fd034ff12e23fa56078b7bdd0ed9edfdf559b89fcec73a6da5a8ab541828ddb9f525360ff48b603666c2afbc9270f3e63661606756f8d0b41663e49bc99716ed0b0cec036d3629dceb444e1bc71b7869034d84f35f55ac1901acdd2af4016a8ebb0711ee70dec6d98f14044c1546f7caf69ca8b9751", 0xe5}], 0x7) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000026d000/0x1000)=nil, &(0x7f000002a000/0x2000)=nil, &(0x7f00000c7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000021000/0x4000)=nil, &(0x7f0000356000/0x3000)=nil, &(0x7f0000023000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f0000000640)="92f4d7fc6c24ede28c23a9c6320a9685ab1d129417ede0268c0c82325ced39b6223966e3ca7e45f076652694f14bc38d2c34015122b5dcb29e3fe883ad24b82a4860fcade65424d24e514968b818e2bb4b319b29c22e06218cf37f45da276259b89176ff5ac37c7486ad3a7fdca48dc20e12d6a328fb261a02bad19f3f2d3b44e72f56266c231f6d15530e7b132750a4d36fe7a7d39c0f7ca70310494265405309dab09b43b353d4680f70b7597fb9779b2af469b338f6f71d165952af5705799aacf08c460e0620fa66fb470537214f44c6b8f6e176b2", 0xd7}, 0x64) (async)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async)
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000040)) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
lseek(r8, 0xdcc, 0x4) (async)

00:18:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:38 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040))

00:18:38 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendfile(r1, r0, &(0x7f00000002c0)=0x7, 0x9)

00:18:38 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

00:18:38 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})

00:18:38 executing program 4:
open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, r1}, 0x60)

00:18:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0xa4})

00:18:38 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc028ae92, &(0x7f0000000000))

00:18:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:38 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mbind(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x9, 0x5, 0x6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfe})

00:18:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

00:18:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x30}}, 0x0)

00:18:38 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1032.337384][  T400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1032.348101][  T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1032.356085][  T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
00:18:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

00:18:38 executing program 1:
syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x109000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000), 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x332, 0x0, 0x0)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, 0x0)

00:18:38 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

00:18:38 executing program 2:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r0, 0x0, 0xf0ff7f00000000)

00:18:38 executing program 1:
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x40140, 0x0)

00:18:38 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

00:18:39 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:39 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020)

00:18:39 executing program 1:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x3, &(0x7f00000002c0), 0x0)

00:18:39 executing program 2:
fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0)

00:18:39 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mbind(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x9, 0x5, 0x6) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:39 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x0, 0x40000}}, 0x28)

00:18:39 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000000040)='./file0/../file0\x00', 0x0)

00:18:39 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x0, 0x40000}}, 0x28)

00:18:39 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
fcntl$getownex(r0, 0x8, &(0x7f0000000080))

00:18:39 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

00:18:39 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mbind(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x9, 0x5, 0x6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
mbind(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x9, 0x5, 0x6) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:39 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)

00:18:39 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:40 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2001, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

00:18:40 executing program 2:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x101e00, 0x0)

00:18:40 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)

00:18:40 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0)

00:18:40 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00002e0000/0x4000)=nil, 0x4000}, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:40 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x8)

00:18:40 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fchown(r0, 0x0, 0x0)

00:18:40 executing program 0:
unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

00:18:40 executing program 1:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1)

00:18:40 executing program 2:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc020662a, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:40 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0)

00:18:40 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000100)="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", 0xffe, 0x3)

00:18:40 executing program 0:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ff8000/0x5000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r0], 0x1)

00:18:40 executing program 2:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0)

00:18:40 executing program 4:
r0 = io_uring_setup(0x903, &(0x7f0000000080))
fchmod(r0, 0x0)

00:18:40 executing program 1:
r0 = syz_io_uring_setup(0x9e8, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340))
io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0)

00:18:40 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00002e0000/0x4000)=nil, 0x4000}, 0x3}) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:40 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x8)

00:18:40 executing program 0:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_open_procfs$namespace(r1, 0x0)

00:18:40 executing program 1:
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x10007d}, 0x20)

00:18:40 executing program 2:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x81009431, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:40 executing program 4:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xf, 0x0, 0x0)

00:18:40 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

00:18:40 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x101)
ioctl$USBDEVFS_RESETEP(r0, 0x5523, 0x0)

00:18:40 executing program 4:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xf, 0x0, 0x0)

00:18:40 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00002e0000/0x4000)=nil, 0x4000}, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00002e0000/0x4000)=nil, 0x4000}, 0x3}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:40 executing program 1:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0)

00:18:40 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
fcntl$getownex(r0, 0x406, 0x0)

00:18:40 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
fcntl$getownex(r0, 0x26, &(0x7f0000000080))

00:18:40 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) (async)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x8) (async)

00:18:41 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x541b, 0x0)

00:18:41 executing program 1:
io_uring_setup(0x4055, &(0x7f0000000040))
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x2}, &(0x7f0000000200)={0x9}, 0x0, 0x0)

00:18:41 executing program 4:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x17, 0x0, 0x0)

00:18:41 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_io_uring_setup(0x38e8, &(0x7f0000000140)={0x0, 0x0, 0x8a6, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

00:18:41 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x6, 0x1, 0x51})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:41 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:41 executing program 2:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xc, 0x0, 0x0)

00:18:41 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0xc020662a, 0x0)

00:18:41 executing program 0:
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1c7202, 0x0)

00:18:41 executing program 1:
fsopen(&(0x7f0000000100)='fuse\x00', 0x0)

00:18:41 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x14, &(0x7f0000000500)=[0xf00], 0x2)

00:18:41 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189374, &(0x7f0000001540)=ANY=[@ANYBLOB="010000000100000018040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./'])

00:18:41 executing program 0:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0406618, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:41 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$UHID_CREATE2(r0, 0x0, 0x1118)

00:18:41 executing program 4:
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x40049409, 0x0)

00:18:41 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)

00:18:41 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x6, 0x1, 0x51}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:41 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:41 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000004140)={0xa8, 0x0, r1, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xee00}}}]}, 0xa8)

00:18:41 executing program 2:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)

00:18:41 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0xf0cdba9c0934ec76, 0x0)
fcntl$getownex(r0, 0x2, 0x0)

00:18:41 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0xc0286687, 0x0)

00:18:41 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x6, 0x1, 0x51}) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64)

00:18:41 executing program 0:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
dup2(r0, r1)

00:18:41 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x143040, 0x408)

00:18:41 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fchmod(r0, 0x0)

00:18:41 executing program 1:
r0 = syz_io_uring_setup(0x9e8, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"})
io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000380)=[0xffffffffffffffff], 0x1)

00:18:41 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0, 0x1}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x0, 0x1}, 0x20)

00:18:41 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock2(&(0x7f0000039000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mremap(&(0x7f000008c000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000001c000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000034000/0x4000)=nil, 0x4000, 0x65)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x8, &(0x7f00000ae000/0x2000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xbe, 0x8, 0x100000001, 0x4, 0x810000, 0x4, 0xffffffffffff0000, 0x814, 0x9, 0xffffffffffffff55, 0x2, 0x71d1bfa, 0x8, 0x2, 0x9, 0x8], 0x6000, 0x98900})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0x6, 0x7, 0x3, 0x0, 0x6, 0x3, 0xbe, 0x0, 0x6, 0x3, 0x80, 0x1}, {0x72e, 0x4, 0x2, 0x2, 0x2, 0x40, 0x2, 0x6, 0x7d, 0x9, 0x0, 0xf9, 0xf44}, {0x9, 0x2, 0x4d, 0x8, 0x7f, 0xa8, 0x6, 0x7, 0xac, 0x91, 0x82, 0x73, 0x20}], 0x10001})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000265000/0x1000)=nil})
munmap(&(0x7f00000aa000/0x3000)=nil, 0x3000)

00:18:42 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:42 executing program 2:
r0 = io_uring_setup(0x942, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/208, 0xd0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)

00:18:42 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r0, &(0x7f0000000000)=""/111, 0x6f)

00:18:42 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f00000003c0), 0x48)

00:18:42 executing program 4:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, &(0x7f0000000100)=@v2={0x2, @aes128, 0x0, '\x00', @c})

00:18:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mlock2(&(0x7f0000039000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
mremap(&(0x7f000008c000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000001c000/0x1000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000034000/0x4000)=nil, 0x4000, 0x65) (async, rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64)
shmget$private(0x0, 0x2000, 0x8, &(0x7f00000ae000/0x2000)=nil) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xbe, 0x8, 0x100000001, 0x4, 0x810000, 0x4, 0xffffffffffff0000, 0x814, 0x9, 0xffffffffffffff55, 0x2, 0x71d1bfa, 0x8, 0x2, 0x9, 0x8], 0x6000, 0x98900}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff}) (rerun: 32)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0x6, 0x7, 0x3, 0x0, 0x6, 0x3, 0xbe, 0x0, 0x6, 0x3, 0x80, 0x1}, {0x72e, 0x4, 0x2, 0x2, 0x2, 0x40, 0x2, 0x6, 0x7d, 0x9, 0x0, 0xf9, 0xf44}, {0x9, 0x2, 0x4d, 0x8, 0x7f, 0xa8, 0x6, 0x7, 0xac, 0x91, 0x82, 0x73, 0x20}], 0x10001}) (async)
ioctl$KVM_NMI(r2, 0xae9a) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000265000/0x1000)=nil}) (async, rerun: 32)
munmap(&(0x7f00000aa000/0x3000)=nil, 0x3000) (rerun: 32)

00:18:42 executing program 0:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0)

00:18:42 executing program 2:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x100000)

00:18:42 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x14e)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2)

00:18:42 executing program 1:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4b801)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)

00:18:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock2(&(0x7f0000039000/0x3000)=nil, 0x3000, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f000008c000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000001c000/0x1000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000034000/0x4000)=nil, 0x4000, 0x65) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x8, &(0x7f00000ae000/0x2000)=nil) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xbe, 0x8, 0x100000001, 0x4, 0x810000, 0x4, 0xffffffffffff0000, 0x814, 0x9, 0xffffffffffffff55, 0x2, 0x71d1bfa, 0x8, 0x2, 0x9, 0x8], 0x6000, 0x98900}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0x6, 0x7, 0x3, 0x0, 0x6, 0x3, 0xbe, 0x0, 0x6, 0x3, 0x80, 0x1}, {0x72e, 0x4, 0x2, 0x2, 0x2, 0x40, 0x2, 0x6, 0x7d, 0x9, 0x0, 0xf9, 0xf44}, {0x9, 0x2, 0x4d, 0x8, 0x7f, 0xa8, 0x6, 0x7, 0xac, 0x91, 0x82, 0x73, 0x20}], 0x10001}) (async)
ioctl$KVM_NMI(r2, 0xae9a) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000265000/0x1000)=nil})
munmap(&(0x7f00000aa000/0x3000)=nil, 0x3000)

00:18:42 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000, 0x4, &(0x7f00002b1000/0x1000)=nil)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:42 executing program 4:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0, 0x1, 0x1000000}, 0x20)

00:18:42 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

00:18:42 executing program 2:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0)

00:18:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x67a481, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:42 executing program 0:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0)

00:18:42 executing program 1:
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchmod(r0, 0x0)

00:18:42 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x40086604, 0x0)

00:18:42 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x660c, 0x0)

00:18:42 executing program 1:
r0 = syz_io_uring_setup(0x9e8, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340))
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000380)=[0xffffffffffffffff], 0x1)

00:18:42 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5450, 0x0)

00:18:42 executing program 2:
r0 = syz_io_uring_setup(0x9e8, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340))
io_uring_enter(r0, 0x0, 0x0, 0xf, 0x0, 0x0)

00:18:42 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000, 0x4, &(0x7f00002b1000/0x1000)=nil)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000, 0x4, &(0x7f00002b1000/0x1000)=nil) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x67a481, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:42 executing program 0:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40049409, 0x0)

00:18:42 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020)

00:18:42 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0)

00:18:42 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0, 0x1}, 0x20)

00:18:42 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x2, 0x0)

00:18:42 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x67a481, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:42 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2a181, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='sync\x00', 0x0, 0x0)

00:18:43 executing program 1:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xc, 0x0, 0x0)

00:18:43 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003840)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, r2}, 0x90)

00:18:43 executing program 4:
r0 = epoll_create1(0x0)
r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x10000000})

00:18:43 executing program 2:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))

00:18:43 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
mremap(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000383000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:43 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000, 0x4, &(0x7f00002b1000/0x1000)=nil)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:43 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x80086601, 0x0)

00:18:43 executing program 2:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

00:18:43 executing program 4:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40305828, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:43 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f00000020c0)={0x10, 0xfffffffffffffff5, r1}, 0x10)

00:18:43 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001800)=[{0x0}], 0x0, 0x1}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000740)={0x53e7, 0x0, &(0x7f0000000640)=[{0x0}], 0x0, 0x1}, 0x20)

00:18:43 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x101082, 0x0)
pwrite64(r0, &(0x7f00000001c0)="dd", 0x3e80000000, 0x0)

00:18:43 executing program 4:
mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28031, 0xffffffffffffffff, 0x0)

00:18:43 executing program 2:
fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)

00:18:43 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) (async)
mremap(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000383000/0x1000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:43 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0xffffffff00000000, &(0x7f0000000140), 0x0}, 0x20)

00:18:43 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
r2 = syz_open_procfs(r1, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680))
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=<r5=>r0, @ANYRES16])
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x80, 0x5, 0xd7d, 0x20, 0x6c, 0x5, 0x7, 0x27e, 0x2, 0x9, 0x5e57, 0x0, 0x1000, 0x1, 0x80000001], 0xf000, 0x144210})
mremap(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000195000/0x3000)=nil)

00:18:43 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)

00:18:43 executing program 0:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x9, 0x0, 0x0)

00:18:43 executing program 2:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x18, 0x0, 0x0)

00:18:43 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
mremap(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000383000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) (async)
mremap(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000383000/0x1000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:43 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) (async)
r2 = syz_open_procfs(r1, 0x0) (async)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680)) (async)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=<r5=>r0, @ANYRES16]) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x80, 0x5, 0xd7d, 0x20, 0x6c, 0x5, 0x7, 0x27e, 0x2, 0x9, 0x5e57, 0x0, 0x1000, 0x1, 0x80000001], 0xf000, 0x144210}) (async)
mremap(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000195000/0x3000)=nil)

00:18:43 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'veth1_to_team'}, 0x10)

00:18:44 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/tty', 0x0, 0x0)
read$dsp(r0, 0x0, 0x0)

00:18:44 executing program 2:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x15, &(0x7f00000000c0)=[r1], 0x1)

00:18:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

00:18:44 executing program 4:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40806685, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:44 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) (async)
r2 = syz_open_procfs(r1, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x227d, &(0x7f0000000680))
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f0000000680)) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=<r5=>r0, @ANYRES16]) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x80, 0x5, 0xd7d, 0x20, 0x6c, 0x5, 0x7, 0x27e, 0x2, 0x9, 0x5e57, 0x0, 0x1000, 0x1, 0x80000001], 0xf000, 0x144210}) (async)
mremap(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000195000/0x3000)=nil)

00:18:44 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x80100, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:44 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x2000000000000006, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000380)={0x1, 0x6}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

00:18:44 executing program 0:
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
dup3(r1, r0, 0x0)

00:18:44 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

00:18:44 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:44 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

00:18:44 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

00:18:44 executing program 0:
r0 = syz_io_uring_setup(0x9ea, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000))
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4b87, 0x0, 0x0, 0x0, 0x0)

00:18:44 executing program 1:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x5, 0x0, 0x0)

00:18:44 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000005880)={0xa0, 0x0, r1}, 0xa0)

00:18:44 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8008662c, 0x0)

00:18:44 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x80100, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:44 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x88f81, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5450, 0x0)

00:18:44 executing program 4:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000000)=[r1], 0x1)

00:18:44 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/block/loop14', 0x0, 0x0)

00:18:44 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x40086607, 0x0)

00:18:44 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:44 executing program 4:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)

00:18:44 executing program 2:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1)

00:18:45 executing program 0:
syz_io_uring_setup(0x43d, &(0x7f0000000000)={0x0, 0x0, 0x3e00}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

00:18:45 executing program 1:
syz_io_uring_setup(0x9e9, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0)

00:18:45 executing program 2:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80087601, &(0x7f0000000100)=@v2={0x2, @aes128, 0x0, '\x00', @c})

00:18:45 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x40106614, 0x0)

00:18:45 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x80100, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:18:45 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1})
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) (async)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15) (async)

00:18:45 executing program 2:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fchmod(r0, 0x0)

00:18:45 executing program 4:
pselect6(0x53, &(0x7f0000000040)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0)

00:18:45 executing program 0:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/72, 0x48}, {0x0}, {0x0}], &(0x7f0000000180)=[0x0, 0x0, 0x9d9]}, 0x20)

00:18:45 executing program 4:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xe, 0x0, 0x0)

00:18:45 executing program 2:
syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6)

00:18:45 executing program 0:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000000c0)=[r1], 0x1)

00:18:45 executing program 4:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5460, &(0x7f0000000280)=@v2={0x2, @aes256, 0x0, '\x00', @auto="dccad5d03ce309ea6c9df263e6ed6a9b"})

00:18:45 executing program 1:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x43d, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

00:18:45 executing program 4:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x6628, 0x0)

00:18:45 executing program 2:
r0 = io_uring_setup(0x4055, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x6, 0x0, 0x2)

00:18:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:46 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @b}})

00:18:46 executing program 2:
r0 = syz_io_uring_setup(0x3b38, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0xd, 0x0, 0x0)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:18:46 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x5)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="05000000000000006911ae0000000000851000000200000085000000c800000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d753507866907dcae5607ab65a0e3ccae669e173a649c1cfd6587d452d6453559c34204ed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e0d04000000000006d28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae8bd4b11b52cea83f112519d24e1cebbba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc67756dd4aed4af7500d7900a820b63278f4e92895614cd50cbe43a1ed2526854bcf11887c8dc91dd6f469fceff459740bf3a73b100000000060009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed2de5c577cfbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebf1c893bb97a068bd10734a83584898eccb2674377490b995ca13e648f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f35530a0af4aac9d07713f690b6f7f9ccb23b03f2a834391ad24fe7d9b20cfdef0a39ab26978d2efa286a87f7a32417f1b825a16817aa54a859989d893ad4b14180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a646575e633549f9d500744a7184bc5828b2f978f2f9eeb3984eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb25871b3efe75eca38260b419b0b143624af57a6a1abd85e0e946b9f0be2dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230517d2d14a3de5897bd110e6294bcfe98000b06000000000000009d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e52dbe2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e287506256d9d604a56e2dbcd2fbe9cb4db180a145785f95127a380dffab4fa70d6c8000000011342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c9207215a83d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a030e7c22be25f77576ca041d97f3223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05050045f99beecf56341075ed4387159b56350116f5efe8bb4845127852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d9800bea7a0bd263988539b0da4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa6185572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe746c76dfbecbe8e3e4a9eab1020b48bf572c71222a762caffa09b68aa009451d7e1a57f7dc726db3223250be809b783440ae0c402b3b9166e6ec7782be09730590e68d57f05d5dbee9a256106d9526254605483fa5d9f1b5fdd848327a0ebc1e45a4adacfbdbae0b66ee00000000000000000000000000000000000000000000000000002eddef2e8c3ec560dc03b7c63a3b33a6d8990a093b8bededfe61d56a7c6b34159ab84fbfcb116c6253a004ad8202c18203fc15d46e7a171fce2f7fd5d3cb451e2b823d32f867cc24fb055c2b78243f664af98015203ee1291f3feae98270d6d9dda987bf576e8ff5705fbfcbcff9207c20277ebc35c783e11f93263c9b6445e4057a93c7cdfad4cd7b06b73e7f05ff167adaa7fe4ff4d7b06985825ece1be48e36fc1f339de870e9e2434f62a1828016a02444fb955ec6b19becf8978dcffb73dce3322c59c206521563cfb3d397c48dcc618294322a7250a318ed240c92fe79de35cd25e748414cfb465a09bbabf6c13a29ff87eb9d86458b3aa2a1388be162b455ba18cf7422c9abdb651b679e7218a261be94fe159c5a5615310f0728c37114addf1cb6f33680b28e30d46ce59fbe8ba3c032d296457d50287399a9a2161ec6531e323e5963c375e8c8425757d983ccddd4fcf31aa934b7b8a8373910a660dbec35ec4256a7cf2dac8b662ace896394c53c565343b6b360bb12ba73cab8f45011e07cd3041d3435fa5663443a3bb9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0xc90a000000000000, 0x12)

00:18:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:46 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

00:18:46 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@alu]}, &(0x7f0000000440)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000480)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:18:46 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:46 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f00000b3000/0x4000)=nil, 0x4000, 0x15)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="05000000000000006911ae02000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d753507866907dcae5607ab65a0e3ccae669e173a649c1cfd6587d452d6453559c34204ed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e0d04000000000006d28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae8bd4b11b52cea83f112519d24e1cebbba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc67756dd4aed4af7500d7900a820b63278f4e92895614cd50cbe43a1ed2526854bcf11887c8dc91dd6f469fceff459740bf3a73b100000000060009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed2de5c577cfbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebf1c893bb97a068bd10734a83584898eccb2674377490b995ca13e648f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f35530a0af4aac9d07713f690b6f7f9ccb23b03f2a834391ad24fe7d9b20cfdef0a39ab26978d2efa286a87f7a32417f1b825a16817aa54a859989d893ad4b14180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a646575e633549f9d500744a7184bc5828b2f978f2f9eeb3984eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb25871b3efe75eca38260b419b0b143624af57a6a1abd85e0e946b9f0be2dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230517d2d14a3de5897bd110e6294bcfe98000b06000000000000009d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e52dbe2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e287506256d9d604a56e2dbcd2fbe9cb4db180a145785f95127a380dffab4fa70d6c8000000011342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c9207215a83d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a030e7c22be25f77576ca041d97f3223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05050045f99beecf56341075ed4387159b56350116f5efe8bb4845127852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d9800bea7a0bd263988539b0da4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa6185572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe746c76dfbecbe8e3e4a9eab1020b48bf572c71222a762caffa09b68aa009451d7e1a57f7dc726db3223250be809b783440ae0c402b3b9166e6ec7782be09730590e68d57f05d5dbee9a256106d9526254605483fa5d9f1b5fdd848327a0ebc1e45a4adacfbdbae0b66ee00000000000000000000000000000000000000000000000000002eddef2e8c3ec560dc03b7c63a3b33a6d8990a093b8bededfe61d56a7c6b34159ab84fbfcb116c6253a004ad8202c18203fc15d46e7a171fce2f7fd5d3cb451e2b823d32f867cc24fb055c2b78243f664af98015203ee1291f3feae98270d6d9dda987bf576e8ff5705fbfcbcff9207c20277ebc35c783e11f93263c9b6445e4057a93c7cdfad4cd7b06b73e7f05ff167adaa7fe4ff4d7b06985825ece1be48e36fc1f339de870e9e2434f62a1828016a02444fb955ec6b19becf8978dcffb73dce3322c59c206521563cfb3d397c48dcc618294322a7250a318ed240c92fe79de35cd25e748414cfb465a09bbabf6c13a29ff87eb9d86458b3aa2a1388be162b455ba18cf7422c9abdb651b679e7218a261be94fe159c5a5615310f0728c37114addf1cb6f33680b28e30d46ce59fbe8ba3c032d296457d50287399a9a2161ec6531e323e5963c375e8c8425757d983ccddd4fcf31aa934b7b8a8373910a660dbec35ec4256a7cf2dac8b662ace896394c53c565343b6b360bb12ba73cab8f45011e07cd3041d3435fa5663443a3bb9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

00:18:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 1040.234725][ T1030] page:ffffea0000cc0000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x20000 pfn:0x33000
[ 1040.245290][ T1030] head:ffffea0000cc0000 order:9 compound_mapcount:0 compound_pincount:0
[ 1040.253814][ T1030] memcg:ffff8880652e6000
[ 1040.258041][ T1030] anon flags: 0xfff0000009003f(locked|referenced|uptodate|dirty|lru|active|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 1040.270800][ T1030] raw: 00fff0000009003f ffffea00016e0808 ffffea0000cc0a48 ffff888044ca9661
[ 1040.279381][ T1030] raw: 0000000000020000 0000000000000000 00000000ffffffff ffff8880652e6000
[ 1040.287964][ T1030] page dumped because: VM_WARN_ON_ONCE_PAGE(page_tail->private != 0)
[ 1040.296022][ T1030] page_owner tracks the page as allocated
[ 1040.301725][ T1030] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d24ca(GFP_TRANSHUGE|__GFP_NORETRY|__GFP_THISNODE), pid 1028, tgid 1028 (syz-executor.3), ts 1040120955310, free_ts 1037910969764
[ 1040.320912][ T1030]  get_page_from_freelist+0x10b5/0x2d50
[ 1040.326458][ T1030]  __alloc_pages+0x1c7/0x5a0
[ 1040.331040][ T1030]  __folio_alloc+0x12/0x40
[ 1040.335449][ T1030]  vma_alloc_folio+0x5b7/0x780
[ 1040.340229][ T1030]  do_huge_pmd_anonymous_page+0x244/0x1c40
[ 1040.346087][ T1030]  __handle_mm_fault+0x25a1/0x3a40
[ 1040.351232][ T1030]  handle_mm_fault+0x1c8/0x780
[ 1040.355994][ T1030]  do_user_addr_fault+0x475/0x1210
[ 1040.361109][ T1030]  exc_page_fault+0x94/0x170
[ 1040.365693][ T1030]  asm_exc_page_fault+0x22/0x30
[ 1040.370542][ T1030] page last free stack trace:
[ 1040.375373][ T1030]  free_pcp_prepare+0x65c/0xd90
[ 1040.380221][ T1030]  free_unref_page+0x19/0x4d0
[ 1040.384890][ T1030]  io_mem_free.part.0+0xb0/0xb9
[ 1040.389765][ T1030]  io_ring_exit_work+0xa70/0xc2e
[ 1040.394705][ T1030]  process_one_work+0x9bf/0x1710
[ 1040.399642][ T1030]  worker_thread+0x665/0x1080
[ 1040.404345][ T1030]  kthread+0x2e4/0x3a0
[ 1040.408409][ T1030]  ret_from_fork+0x1f/0x30
[ 1040.412940][ T1030] ------------[ cut here ]------------
[ 1040.418391][ T1030] WARNING: CPU: 0 PID: 1030 at mm/huge_memory.c:2465 split_huge_page_to_list+0x3586/0x4530
[ 1040.428389][ T1030] Modules linked in:
[ 1040.432287][ T1030] CPU: 0 PID: 1030 Comm: syz-executor.3 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0
[ 1040.442641][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 1040.452722][ T1030] RIP: 0010:split_huge_page_to_list+0x3586/0x4530
[ 1040.459158][ T1030] Code: e0 e3 af ff 45 84 f6 0f 85 3c dc ff ff e8 42 e7 af ff 48 8b 7c 24 08 48 c7 c6 00 90 fa 89 e8 e1 5a e6 ff c6 05 6a b2 ff 0b 01 <0f> 0b e9 18 dc ff ff e8 1e e7 af ff 4c 8b 7c 24 08 31 ff 4c 89 fd
[ 1040.478781][ T1030] RSP: 0018:ffffc90015687560 EFLAGS: 00010046
[ 1040.484854][ T1030] RAX: 0000000000040000 RBX: ffffea0000cc0000 RCX: ffffc9000ee82000
[ 1040.492834][ T1030] RDX: 0000000000040000 RSI: ffffffff81ccb54f RDI: ffffffff8de21a10
[ 1040.500822][ T1030] RBP: ffffea0000cc0a00 R08: 0000000000000000 R09: ffffffff8de21a17
[ 1040.508787][ T1030] R10: 0000000000000000 R11: 6f72665f74657220 R12: ffffea0000cc0a08
[ 1040.516748][ T1030] R13: ffffea0000cc0a28 R14: 0000000000000000 R15: dffffc0000000000
[ 1040.524719][ T1030] FS:  0000000000000000(0000) GS:ffff8880b9a00000(0063) knlGS:00000000f7fc0b40
[ 1040.533747][ T1030] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1040.540528][ T1030] CR2: 00000000f734a1b0 CR3: 000000002e048000 CR4: 00000000003526f0
[ 1040.548520][ T1030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1040.556575][ T1030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1040.564549][ T1030] Call Trace:
[ 1040.567817][ T1030]  <TASK>
[ 1040.570748][ T1030]  ? can_split_folio+0x340/0x340
[ 1040.575691][ T1030]  ? lock_release+0x5cb/0x810
[ 1040.580363][ T1030]  ? madvise_cold_or_pageout_pte_range+0x518/0x37d0
[ 1040.586953][ T1030]  madvise_cold_or_pageout_pte_range+0x5c4/0x37d0
[ 1040.593387][ T1030]  ? madvise_free_pte_range+0x1420/0x1420
[ 1040.599134][ T1030]  ? madvise_free_pte_range+0x1420/0x1420
[ 1040.604948][ T1030]  walk_pgd_range+0xa30/0x1670
[ 1040.609713][ T1030]  ? vtime_account_system+0x2c6/0x530
[ 1040.615087][ T1030]  __walk_page_range+0x4e9/0x5e0
[ 1040.620027][ T1030]  ? find_vma+0x108/0x1a0
[ 1040.624450][ T1030]  ? finish_task_switch.isra.0+0x2b5/0xc80
[ 1040.630255][ T1030]  ? walk_page_test+0x78/0x180
[ 1040.635035][ T1030]  walk_page_range+0x30d/0x4a0
[ 1040.639792][ T1030]  ? __walk_page_range+0x5e0/0x5e0
[ 1040.644922][ T1030]  madvise_pageout+0x2f1/0x4f0
[ 1040.649827][ T1030]  ? madvise_dontneed_free_valid_vma+0x310/0x310
[ 1040.656161][ T1030]  ? preempt_schedule_common+0x59/0xc0
[ 1040.661643][ T1030]  ? mas_prev_nentry+0x65b/0x12b0
[ 1040.666689][ T1030]  madvise_vma_behavior+0xc7f/0x1cc0
[ 1040.671980][ T1030]  ? mas_prev+0x153/0x650
[ 1040.676304][ T1030]  ? madvise_vma_anon_name+0xc0/0xc0
[ 1040.681585][ T1030]  ? mas_walk+0x48a/0x670
[ 1040.685929][ T1030]  ? find_vma_prev+0xe0/0x160
[ 1040.690703][ T1030]  ? vm_unmapped_area+0x760/0x760
[ 1040.695770][ T1030]  ? lock_release+0x810/0x810
[ 1040.700447][ T1030]  madvise_walk_vmas+0x1c7/0x2b0
[ 1040.705383][ T1030]  ? madvise_vma_anon_name+0xc0/0xc0
[ 1040.710669][ T1030]  ? __remove_memory+0x40/0x40
[ 1040.715430][ T1030]  ? rcu_read_lock_sched_held+0xd/0x70
[ 1040.720883][ T1030]  ? lock_release+0x5cb/0x810
[ 1040.725557][ T1030]  do_madvise.part.0+0x24a/0x340
[ 1040.730516][ T1030]  ? madvise_cold+0x2f0/0x2f0
[ 1040.735190][ T1030]  ? restore_fpregs_from_fpstate+0xbd/0x1c0
[ 1040.741098][ T1030]  ? vtime_user_exit+0x218/0x6c0
[ 1040.746159][ T1030]  __ia32_sys_madvise+0x115/0x150
[ 1040.751183][ T1030]  ? trace_hardirqs_on+0x2d/0x160
[ 1040.756210][ T1030]  __do_fast_syscall_32+0x65/0xf0
[ 1040.761269][ T1030]  do_fast_syscall_32+0x2f/0x70
[ 1040.766122][ T1030]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 1040.772451][ T1030] RIP: 0023:0xf7fc5549
[ 1040.776519][ T1030] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1040.796158][ T1030] RSP: 002b:00000000f7fc05cc EFLAGS: 00000296 ORIG_RAX: 00000000000000db
[ 1040.804588][ T1030] RAX: ffffffffffffffda RBX: 00000000200b3000 RCX: 0000000000004000
[ 1040.812580][ T1030] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000
[ 1040.820544][ T1030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1040.828579][ T1030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.836558][ T1030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1040.844533][ T1030]  </TASK>
[ 1040.847545][ T1030] Kernel panic - not syncing: panic_on_warn set ...
[ 1040.854117][ T1030] CPU: 0 PID: 1030 Comm: syz-executor.3 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0
[ 1040.864459][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 1040.874518][ T1030] Call Trace:
[ 1040.877802][ T1030]  <TASK>
[ 1040.880742][ T1030]  dump_stack_lvl+0xcd/0x134
[ 1040.885336][ T1030]  panic+0x2c8/0x622
[ 1040.889260][ T1030]  ? panic_print_sys_info.part.0+0x110/0x110
[ 1040.895250][ T1030]  ? __warn.cold+0x24b/0x350
[ 1040.899858][ T1030]  ? split_huge_page_to_list+0x3586/0x4530
[ 1040.905681][ T1030]  __warn.cold+0x25c/0x350
[ 1040.910109][ T1030]  ? split_huge_page_to_list+0x3586/0x4530
[ 1040.915932][ T1030]  report_bug+0x1bc/0x210
[ 1040.920320][ T1030]  handle_bug+0x3c/0x70
[ 1040.924479][ T1030]  exc_invalid_op+0x14/0x40
[ 1040.928988][ T1030]  asm_exc_invalid_op+0x16/0x20
[ 1040.933842][ T1030] RIP: 0010:split_huge_page_to_list+0x3586/0x4530
[ 1040.940356][ T1030] Code: e0 e3 af ff 45 84 f6 0f 85 3c dc ff ff e8 42 e7 af ff 48 8b 7c 24 08 48 c7 c6 00 90 fa 89 e8 e1 5a e6 ff c6 05 6a b2 ff 0b 01 <0f> 0b e9 18 dc ff ff e8 1e e7 af ff 4c 8b 7c 24 08 31 ff 4c 89 fd
[ 1040.959992][ T1030] RSP: 0018:ffffc90015687560 EFLAGS: 00010046
[ 1040.966058][ T1030] RAX: 0000000000040000 RBX: ffffea0000cc0000 RCX: ffffc9000ee82000
[ 1040.974138][ T1030] RDX: 0000000000040000 RSI: ffffffff81ccb54f RDI: ffffffff8de21a10
[ 1040.982105][ T1030] RBP: ffffea0000cc0a00 R08: 0000000000000000 R09: ffffffff8de21a17
[ 1040.990074][ T1030] R10: 0000000000000000 R11: 6f72665f74657220 R12: ffffea0000cc0a08
[ 1040.998139][ T1030] R13: ffffea0000cc0a28 R14: 0000000000000000 R15: dffffc0000000000
[ 1041.006110][ T1030]  ? split_huge_page_to_list+0x357f/0x4530
[ 1041.011937][ T1030]  ? can_split_folio+0x340/0x340
[ 1041.016904][ T1030]  ? lock_release+0x5cb/0x810
[ 1041.021591][ T1030]  ? madvise_cold_or_pageout_pte_range+0x518/0x37d0
[ 1041.028194][ T1030]  madvise_cold_or_pageout_pte_range+0x5c4/0x37d0
[ 1041.034623][ T1030]  ? madvise_free_pte_range+0x1420/0x1420
[ 1041.040356][ T1030]  ? madvise_free_pte_range+0x1420/0x1420
[ 1041.046183][ T1030]  walk_pgd_range+0xa30/0x1670
[ 1041.050964][ T1030]  ? vtime_account_system+0x2c6/0x530
[ 1041.056354][ T1030]  __walk_page_range+0x4e9/0x5e0
[ 1041.061291][ T1030]  ? find_vma+0x108/0x1a0
[ 1041.065635][ T1030]  ? finish_task_switch.isra.0+0x2b5/0xc80
[ 1041.071545][ T1030]  ? walk_page_test+0x78/0x180
[ 1041.076304][ T1030]  walk_page_range+0x30d/0x4a0
[ 1041.081064][ T1030]  ? __walk_page_range+0x5e0/0x5e0
[ 1041.086177][ T1030]  madvise_pageout+0x2f1/0x4f0
[ 1041.090953][ T1030]  ? madvise_dontneed_free_valid_vma+0x310/0x310
[ 1041.097319][ T1030]  ? preempt_schedule_common+0x59/0xc0
[ 1041.102837][ T1030]  ? mas_prev_nentry+0x65b/0x12b0
[ 1041.107871][ T1030]  madvise_vma_behavior+0xc7f/0x1cc0
[ 1041.113161][ T1030]  ? mas_prev+0x153/0x650
[ 1041.117489][ T1030]  ? madvise_vma_anon_name+0xc0/0xc0
[ 1041.122769][ T1030]  ? mas_walk+0x48a/0x670
[ 1041.127095][ T1030]  ? find_vma_prev+0xe0/0x160
[ 1041.131772][ T1030]  ? vm_unmapped_area+0x760/0x760
[ 1041.136797][ T1030]  ? lock_release+0x810/0x810
[ 1041.141491][ T1030]  madvise_walk_vmas+0x1c7/0x2b0
[ 1041.146465][ T1030]  ? madvise_vma_anon_name+0xc0/0xc0
[ 1041.151835][ T1030]  ? __remove_memory+0x40/0x40
[ 1041.156593][ T1030]  ? rcu_read_lock_sched_held+0xd/0x70
[ 1041.162045][ T1030]  ? lock_release+0x5cb/0x810
[ 1041.166731][ T1030]  do_madvise.part.0+0x24a/0x340
[ 1041.171697][ T1030]  ? madvise_cold+0x2f0/0x2f0
[ 1041.176369][ T1030]  ? restore_fpregs_from_fpstate+0xbd/0x1c0
[ 1041.182272][ T1030]  ? vtime_user_exit+0x218/0x6c0
[ 1041.187244][ T1030]  __ia32_sys_madvise+0x115/0x150
[ 1041.192281][ T1030]  ? trace_hardirqs_on+0x2d/0x160
[ 1041.197420][ T1030]  __do_fast_syscall_32+0x65/0xf0
[ 1041.202459][ T1030]  do_fast_syscall_32+0x2f/0x70
[ 1041.207328][ T1030]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 1041.213663][ T1030] RIP: 0023:0xf7fc5549
[ 1041.217722][ T1030] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1041.237349][ T1030] RSP: 002b:00000000f7fc05cc EFLAGS: 00000296 ORIG_RAX: 00000000000000db
[ 1041.245764][ T1030] RAX: ffffffffffffffda RBX: 00000000200b3000 RCX: 0000000000004000
[ 1041.253732][ T1030] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000
[ 1041.261701][ T1030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1041.269669][ T1030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1041.277633][ T1030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1041.285602][ T1030]  </TASK>
[ 1041.288794][ T1030] Kernel Offset: disabled
[ 1041.293123][ T1030] Rebooting in 86400 seconds..