0240)={0x0, 0x38}}, 0x0)

07:40:52 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

07:40:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone3(&(0x7f00000002c0)={0xa1048000, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/200, 0xc8, &(0x7f0000000800)=""/4096, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
process_vm_readv(r2, 0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002a40)=""/217, 0xd9}, {&(0x7f0000001840)=""/28, 0x1c}, {&(0x7f0000002b40)=""/79, 0x4f}, {&(0x7f0000002bc0)=""/248, 0xf8}, {&(0x7f0000001880)=""/30, 0x1e}], 0x5, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80cb8caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"})
sendfile(r3, r0, 0x0, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:40:53 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xprtrdma_nomrs_err\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0xfffffffb}, 0x10}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x7ffff019)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8208200)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x105001, 0x0)
fstat(r3, &(0x7f00000007c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = creat(&(0x7f0000000a80)='./file0\x00', 0x0)
ioctl$UI_SET_SWBIT(r4, 0x6611, 0x0)

07:40:53 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

07:40:53 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)

[ 1010.993147][T28489] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1011.015926][T28489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:40:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone3(&(0x7f00000002c0)={0xa1048000, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/200, 0xc8, &(0x7f0000000800)=""/4096, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
process_vm_readv(r2, 0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002a40)=""/217, 0xd9}, {&(0x7f0000001840)=""/28, 0x1c}, {&(0x7f0000002b40)=""/79, 0x4f}, {&(0x7f0000002bc0)=""/248, 0xf8}, {&(0x7f0000001880)=""/30, 0x1e}], 0x5, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80cb8caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c502191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd198af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
sendfile(r3, r0, 0x0, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:40:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

[ 1011.439771][T28509] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1011.456087][T28509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:40:53 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

07:40:53 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

07:40:53 executing program 4:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x4d8800, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xfe5e)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x9, 0x5}, {0xc, 0xf}}, ["", "", "", ""]}, 0xffffffffffffffec}, 0x1, 0x0, 0x0, 0x24048006}, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x8001, 0x10001}, 0x14)
shutdown(r1, 0x2)

07:40:54 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003a40), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x16, 0x0, 'client0\x00', 0x0, "c7082428a47ec2c7", "137820fd4b5517e872d243fa041dd4327a9017414a1aafec633f5c1f298274b6"})

07:40:54 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003a40), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x16, 0x0, 'client0\x00', 0x0, "c7082428a47ec2c7", "137820fd4b5517e872d243fa041dd4327a9017414a1aafec633f5c1f298274b6"})

07:40:54 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003a40), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x16, 0x0, 'client0\x00', 0x0, "c7082428a47ec2c7", "137820fd4b5517e872d243fa041dd4327a9017414a1aafec633f5c1f298274b6"})

07:40:54 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003a40), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x16, 0x0, 'client0\x00', 0x0, "c7082428a47ec2c7", "137820fd4b5517e872d243fa041dd4327a9017414a1aafec633f5c1f298274b6"})

07:40:54 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xprtrdma_nomrs_err\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0xfffffffb}, 0x10}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x7ffff019)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8208200)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x105001, 0x0)
fstat(r3, &(0x7f00000007c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = creat(&(0x7f0000000a80)='./file0\x00', 0x0)
ioctl$UI_SET_SWBIT(r4, 0x6611, 0x0)

07:40:54 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc0, 0x7f, 0xc8, 0x10, 0xccd, 0x80, 0x324f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0x27, 0xf1}}]}}]}}, 0x0)

07:40:54 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1)
select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0)
write$tun(r1, &(0x7f0000000440)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}, 0x30)

07:40:54 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

07:40:54 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

[ 1012.149186][ T3697] usb 5-1: new high-speed USB device number 43 using dummy_hcd
07:40:54 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = memfd_secret(0x80000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r1 = memfd_secret(0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x38}}, 0x0)

07:40:54 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

07:40:54 executing program 2:
io_setup(0x20, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, &(0x7f0000000500)="0100000065d33b15598b4260318639b16ab6f11095c78e2dea1417b5e26c1eebe502e9ffac781dcc", 0x28}])

07:40:54 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

07:40:54 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000001280)='net/snmp\x00')
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffff00000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1012.399184][ T3697] usb 5-1: Using ep0 maxpacket: 16
07:40:54 executing program 2:
io_setup(0x20, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, &(0x7f0000000500)="0100000065d33b15598b4260318639b16ab6f11095c78e2dea1417b5e26c1eebe502e9ffac781dcc", 0x28}])

[ 1012.520399][ T3697] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=32.4f
07:40:54 executing program 2:
io_setup(0x20, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, &(0x7f0000000500)="0100000065d33b15598b4260318639b16ab6f11095c78e2dea1417b5e26c1eebe502e9ffac781dcc", 0x28}])

[ 1012.602240][ T3697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.646563][ T3697] usb 5-1: config 0 descriptor??
07:40:55 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xprtrdma_nomrs_err\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0xfffffffb}, 0x10}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x7ffff019)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8208200)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x105001, 0x0)
fstat(r3, &(0x7f00000007c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = creat(&(0x7f0000000a80)='./file0\x00', 0x0)
ioctl$UI_SET_SWBIT(r4, 0x6611, 0x0)

[ 1012.909433][ T3697] snd-usb-6fire 5-1:0.0: unable to receive device firmware state.
[ 1012.917306][ T3697] snd-usb-6fire: probe of 5-1:0.0 failed with error -71
[ 1012.943750][ T3697] usb 5-1: USB disconnect, device number 43
07:40:55 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc0, 0x7f, 0xc8, 0x10, 0xccd, 0x80, 0x324f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0x27, 0xf1}}]}}]}}, 0x0)

07:40:55 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000001280)='net/snmp\x00')
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffff00000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:40:55 executing program 2:
io_setup(0x20, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, &(0x7f0000000500)="0100000065d33b15598b4260318639b16ab6f11095c78e2dea1417b5e26c1eebe502e9ffac781dcc", 0x28}])

07:40:55 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1)
select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0)
write$tun(r1, &(0x7f0000000440)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}, 0x30)

07:40:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0)

07:40:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0)

07:40:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0)

07:40:55 executing program 2:
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
utime(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)={0x7fffffffffffffff})

07:40:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0)

07:40:55 executing program 2:
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
utime(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)={0x7fffffffffffffff})

07:40:55 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x803, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x28)

07:40:55 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xprtrdma_nomrs_err\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0xfffffffb}, 0x10}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x7ffff019)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8208200)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x105001, 0x0)
fstat(r3, &(0x7f00000007c0))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r4 = creat(&(0x7f0000000a80)='./file0\x00', 0x0)
ioctl$UI_SET_SWBIT(r4, 0x6611, 0x0)

[ 1013.721227][T12976] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1013.989058][T12976] usb 5-1: Using ep0 maxpacket: 16
[ 1014.129272][T12976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=32.4f
[ 1014.138477][T12976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.154628][T12976] usb 5-1: config 0 descriptor??
[ 1014.429237][T12976] snd-usb-6fire 5-1:0.0: unable to receive device firmware state.
[ 1014.437118][T12976] snd-usb-6fire: probe of 5-1:0.0 failed with error -71
[ 1014.451341][T12976] usb 5-1: USB disconnect, device number 44
07:40:57 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000001280)='net/snmp\x00')
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffff00000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:40:57 executing program 2:
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
utime(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)={0x7fffffffffffffff})

07:40:57 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x803, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x28)

07:40:57 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1)
select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0)
write$tun(r1, &(0x7f0000000440)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}, 0x30)

07:40:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
read$midi(r0, 0x0, 0x0)

07:40:57 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc0, 0x7f, 0xc8, 0x10, 0xccd, 0x80, 0x324f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0x27, 0xf1}}]}}]}}, 0x0)

07:40:57 executing program 2:
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
utime(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)={0x7fffffffffffffff})

07:40:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
read$midi(r0, 0x0, 0x0)

07:40:57 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x803, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x28)

07:40:57 executing program 2:
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

07:40:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
read$midi(r0, 0x0, 0x0)

07:40:57 executing program 2:
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

07:40:57 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000001280)='net/snmp\x00')
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffffff00000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:40:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
read$midi(r0, 0x0, 0x0)

07:40:57 executing program 2:
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

[ 1015.279240][T12976] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1015.549200][T12976] usb 5-1: Using ep0 maxpacket: 16
[ 1015.689210][T12976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=32.4f
[ 1015.698366][T12976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.711907][T12976] usb 5-1: config 0 descriptor??
07:40:58 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1)
select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0)
write$tun(r1, &(0x7f0000000440)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}, 0x30)

07:40:58 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x803, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x28)

[ 1015.969254][T12976] snd-usb-6fire 5-1:0.0: unable to receive device firmware state.
[ 1015.977526][T12976] snd-usb-6fire: probe of 5-1:0.0 failed with error -71
[ 1015.989227][T12976] usb 5-1: USB disconnect, device number 45
07:40:58 executing program 2:
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

07:40:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

07:40:58 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc0, 0x7f, 0xc8, 0x10, 0xccd, 0x80, 0x324f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0x27, 0xf1}}]}}]}}, 0x0)

07:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x2}]}]}]}]}, 0x40}}, 0x0)

07:40:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x511})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x400})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@void, @val, @eth={@link_local, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}}}, 0x30)

07:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x2}]}]}]}]}, 0x40}}, 0x0)

07:40:58 executing program 2:
r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0)

07:40:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[ 1016.496969][T28661] __nla_validate_parse: 10 callbacks suppressed
[ 1016.496989][T28661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
07:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x2}]}]}]}]}, 0x40}}, 0x0)

[ 1016.584946][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
07:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x2}]}]}]}]}, 0x40}}, 0x0)

07:40:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x511})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x400})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@void, @val, @eth={@link_local, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}}}, 0x30)

07:40:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

07:40:58 executing program 2:
r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0)

07:40:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[ 1016.742505][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1016.762937][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1016.782688][T28571] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1017.029156][T28571] usb 5-1: Using ep0 maxpacket: 16
[ 1017.150669][T28571] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=32.4f
[ 1017.159818][T28571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.168641][T28571] usb 5-1: config 0 descriptor??
[ 1017.429224][T28571] snd-usb-6fire 5-1:0.0: unable to receive device firmware state.
[ 1017.437104][T28571] snd-usb-6fire: probe of 5-1:0.0 failed with error -71
[ 1017.445329][T28571] usb 5-1: USB disconnect, device number 46
07:41:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

07:41:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x176}]})

07:41:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

07:41:00 executing program 2:
r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0)

07:41:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x511})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x400})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@void, @val, @eth={@link_local, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}}}, 0x30)

07:41:00 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:41:00 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

[ 1017.950643][T28689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1017.971104][T28695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:00 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:41:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x4, 0x7)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0xfffffff8, 0x7, 0x0, 0x700, 0x7fffffff, 0x4200021})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x2004a081, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

07:41:00 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665003c1b570c000500080005"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

07:41:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x176}]})

07:41:00 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:41:00 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665003c1b570c000500080005"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

[ 1018.114828][T28708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:00 executing program 2:
r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0)

07:41:00 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev}, @pad1]}, 0x20)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

07:41:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x176}]})

07:41:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x511})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x400})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@void, @val, @eth={@link_local, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}}}, 0x30)

07:41:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000fa0100040500"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x287, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7fff}}]}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'lo\x00', {}, {}, 0x6}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

07:41:00 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665003c1b570c000500080005"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

07:41:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000fa0100040500"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x287, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7fff}}]}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'lo\x00', {}, {}, 0x6}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

07:41:00 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665003c1b570c000500080005"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

07:41:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000fa0100040500"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x287, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7fff}}]}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'lo\x00', {}, {}, 0x6}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

07:41:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x176}]})

07:41:00 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev}, @pad1]}, 0x20)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

07:41:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000fa0100040500"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x287, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7fff}}]}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'lo\x00', {}, {}, 0x6}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

07:41:00 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_open(r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
waitid$P_PIDFD(0x3, r1, 0x0, 0x80000007, 0x0)

07:41:00 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000002180)=""/181, 0xb5}], 0x1, 0x0, 0x0)

07:41:00 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x6}, 'syz1\x00', 0x5})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
read(r0, &(0x7f0000000100)=""/159, 0x6a)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfea6)

[ 1018.536411][T28754] input: syz1 as /devices/virtual/input/input138
07:41:00 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:00 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000002180)=""/181, 0xb5}], 0x1, 0x0, 0x0)

07:41:00 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_open(r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
waitid$P_PIDFD(0x3, r1, 0x0, 0x80000007, 0x0)

07:41:00 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

07:41:00 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88))
msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}})

07:41:00 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000002180)=""/181, 0xb5}], 0x1, 0x0, 0x0)

07:41:00 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_open(r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
waitid$P_PIDFD(0x3, r1, 0x0, 0x80000007, 0x0)

07:41:00 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev}, @pad1]}, 0x20)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

[ 1018.626133][T28760] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1018.665301][T28760] 8021q: adding VLAN 0 to HW filter on device bond10
07:41:00 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

07:41:00 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000002180)=""/181, 0xb5}], 0x1, 0x0, 0x0)

07:41:00 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

07:41:01 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:01 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_open(r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
waitid$P_PIDFD(0x3, r1, 0x0, 0x80000007, 0x0)

07:41:01 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

[ 1018.694120][T28771] bond10: (slave bridge13): making interface the new active one
[ 1018.705236][T28771] bond10: (slave bridge13): Enslaving as an active interface with an up link
[ 1018.716194][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
07:41:01 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:01 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

[ 1018.807527][T28788] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1018.867835][T28788] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1018.883763][T28790] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1018.915653][T28790] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1018.928811][T28795] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[ 1018.946043][T28795] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1018.964757][T28796] bond5: (slave bridge14): making interface the new active one
[ 1018.980025][T28796] bond5: (slave bridge14): Enslaving as an active interface with an up link
[ 1018.997077][T28797] bond11: (slave bridge14): making interface the new active one
[ 1019.008550][T28797] bond11: (slave bridge14): Enslaving as an active interface with an up link
[ 1019.025813][T28799] bond12: (slave bridge20): making interface the new active one
[ 1019.036609][T28799] bond12: (slave bridge20): Enslaving as an active interface with an up link
[ 1019.046241][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[ 1019.061212][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready
[ 1019.075953][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
07:41:01 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88))
msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}})

07:41:01 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400003)

07:41:01 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev}, @pad1]}, 0x20)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

07:41:01 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:01 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:01 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:01 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400003)

[ 1019.511273][T28808] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1019.547476][T28808] 8021q: adding VLAN 0 to HW filter on device bond12
07:41:01 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400003)

[ 1019.554957][T28809] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
07:41:01 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400003)

[ 1019.603436][T28809] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1019.612656][T28812] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
07:41:01 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd89})

07:41:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

[ 1019.661256][T28812] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1019.684301][T28819] bond12: (slave bridge15): making interface the new active one
[ 1019.694184][T28819] bond12: (slave bridge15): Enslaving as an active interface with an up link
07:41:01 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd89})

[ 1019.715542][T28820] bond6: (slave bridge15): making interface the new active one
[ 1019.740842][T28820] bond6: (slave bridge15): Enslaving as an active interface with an up link
[ 1019.787322][T28825] bond13: (slave bridge21): making interface the new active one
[ 1019.796866][T28825] bond13: (slave bridge21): Enslaving as an active interface with an up link
[ 1019.816405][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
[ 1019.827202][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[ 1019.848684][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready
07:41:02 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88))
msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}})

07:41:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd89})

07:41:02 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:02 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:02 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xb63, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x200000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r6, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xffe00000, 0x8, 0xf, 0x1298, r2, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x311}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

07:41:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd89})

07:41:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0200811e38c600fbcbfc33453b1a9c21cc7422", @ANYRES16=r0, @ANYRESHEX=r1], 0x22c}}, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open$dir(&(0x7f00000002c0)='./file0\x00', 0x12c03, 0xb0)
lseek(r2, 0x0, 0x1)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x6000, 0x0)
sendfile(r4, r5, 0x0, 0x80000044)

[ 1020.380970][T28846] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[ 1020.406006][T28846] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1020.413720][T28844] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1020.441415][T28844] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1020.448786][T28843] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1020.465842][T28843] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1020.480140][T28846] bond14: (slave bridge22): making interface the new active one
[ 1020.492016][T28846] bond14: (slave bridge22): Enslaving as an active interface with an up link
[ 1020.516442][T28855] bond13: (slave bridge16): making interface the new active one
07:41:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

[ 1020.535661][T28855] bond13: (slave bridge16): Enslaving as an active interface with an up link
[ 1020.560835][T28856] bond7: (slave bridge16): making interface the new active one
[ 1020.580553][T28856] bond7: (slave bridge16): Enslaving as an active interface with an up link
07:41:02 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120117004c794a40ca081820917c000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1020.602531][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready
[ 1020.621233][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready
[ 1020.640609][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
07:41:02 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1020.790777][T28871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
07:41:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1020.878271][T28872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1020.925106][T28874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1020.979227][T28571] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1021.029176][ T3697] usb 6-1: new high-speed USB device number 61 using dummy_hcd
07:41:03 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88))
msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}})

07:41:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

07:41:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

07:41:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1021.269581][ T3697] usb 6-1: Using ep0 maxpacket: 16
07:41:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1021.342445][T28571] usb 4-1: New USB device found, idVendor=08ca, idProduct=2018, bcdDevice=7c.91
[ 1021.351677][T28885] syz_tun: tun_net_xmit 42
[ 1021.351804][T28885] syz_tun: tun_net_xmit 42
[ 1021.351910][T28885] syz_tun: tun_net_xmit 42
[ 1021.366977][T28571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.370096][T28885] syz_tun: tun_net_xmit 42
[ 1021.381707][T28885] syz_tun: tun_net_xmit 42
[ 1021.386279][T28885] syz_tun: tun_net_xmit 42
07:41:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

07:41:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1021.389437][ T3697] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1021.394003][T28885] syz_tun: tun_net_xmit 42
[ 1021.399375][T28571] usb 4-1: config 0 descriptor??
[ 1021.406350][T28885] syz_tun: tun_net_xmit 42
[ 1021.408238][ T3697] usb 6-1: config 0 has no interface number 0
[ 1021.419701][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1021.431459][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1021.460736][T28571] gspca_main: sunplus-2.14.0 probing 08ca:2018
[ 1021.564548][T28892] __nla_validate_parse: 10 callbacks suppressed
[ 1021.564569][T28892] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1021.609886][ T3697] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1021.633353][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1021.644616][ T3697] usb 6-1: Product: syz
[ 1021.648859][ T3697] usb 6-1: Manufacturer: syz
[ 1021.653803][ T3697] usb 6-1: SerialNumber: syz
[ 1021.662784][ T3697] usb 6-1: config 0 descriptor??
[ 1021.700209][ T3697] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1021.707459][ T3697] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input143
[ 1021.905350][ T3697] usb 6-1: USB disconnect, device number 61
[ 1021.911334][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1021.911353][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1021.932233][ T3697] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1022.779167][T28571] gspca_sunplus: reg_w_riv err -71
[ 1022.784401][T28571] sunplus: probe of 4-1:0.0 failed with error -71
[ 1022.795825][T28571] usb 4-1: USB disconnect, device number 69
07:41:05 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:05 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000002c0))

07:41:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

07:41:05 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000002c0))

[ 1023.276955][T28897] syz_tun: tun_net_xmit 42
[ 1023.294994][T28897] syz_tun: tun_net_xmit 42
[ 1023.310819][T28897] syz_tun: tun_net_xmit 42
[ 1023.315446][T28897] syz_tun: tun_net_xmit 42
[ 1023.320714][T28897] syz_tun: tun_net_xmit 42
07:41:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000002c0))

[ 1023.325317][T28897] syz_tun: tun_net_xmit 42
[ 1023.332180][T28897] syz_tun: tun_net_xmit 42
07:41:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000002c0))

07:41:05 executing program 2:
close(0xffffffffffffffff)

[ 1023.371019][T28909] syz_tun: tun_net_xmit 42
[ 1023.389802][T28909] syz_tun: tun_net_xmit 42
[ 1023.406403][T28909] syz_tun: tun_net_xmit 42
07:41:05 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

07:41:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

[ 1023.559355][T28571] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1023.563637][T28920] syz_tun: tun_net_xmit 42
[ 1023.572961][ T3695] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1023.581204][T28920] syz_tun: tun_net_xmit 42
[ 1023.585851][T28920] syz_tun: tun_net_xmit 42
[ 1023.591334][T28920] syz_tun: tun_net_xmit 42
[ 1023.596033][T28920] syz_tun: tun_net_xmit 42
[ 1023.602532][T28920] syz_tun: tun_net_xmit 42
[ 1023.607206][T28920] syz_tun: tun_net_xmit 42
[ 1023.612211][T28920] syz_tun: tun_net_xmit 42
[ 1023.779254][ T3697] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1023.809071][T28571] usb 6-1: Using ep0 maxpacket: 16
[ 1023.829196][ T3695] usb 4-1: Using ep0 maxpacket: 16
[ 1023.929203][T28571] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1023.937273][T28571] usb 6-1: config 0 has no interface number 0
[ 1023.943515][T28571] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1023.954538][T28571] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1023.969265][ T3695] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1023.977478][ T3695] usb 4-1: config 0 has no interface number 0
[ 1023.984209][ T3695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1023.995600][ T3695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1024.019759][ T3697] usb 3-1: Using ep0 maxpacket: 8
[ 1024.119315][T28571] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1024.133669][T28571] usb 6-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1024.142081][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1024.153068][T28571] usb 6-1: Product: syz
[ 1024.157268][T28571] usb 6-1: Manufacturer: syz
[ 1024.162119][T28571] usb 6-1: SerialNumber: syz
[ 1024.168243][T28571] usb 6-1: config 0 descriptor??
[ 1024.199486][ T3695] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1024.208607][ T3695] usb 4-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1024.210394][T28571] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1024.217412][ T3695] usb 4-1: Product: syz
[ 1024.227960][ T3695] usb 4-1: Manufacturer: syz
[ 1024.230461][T28571] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input144
[ 1024.233200][ T3695] usb 4-1: SerialNumber: syz
[ 1024.242817][ T3697] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1024.255879][ T3695] usb 4-1: config 0 descriptor??
[ 1024.257023][ T3697] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1024.269995][ T3697] usb 3-1: Manufacturer: syz
[ 1024.279939][ T3697] usb 3-1: config 0 descriptor??
[ 1024.300572][ T3695] cm109 4-1:0.8: invalid payload size 0, expected 4
[ 1024.310450][ T3695] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input145
[ 1024.426510][T28571] usb 6-1: USB disconnect, device number 62
[ 1024.432501][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1024.432520][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1024.454424][T28571] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1024.525273][ T6120] usb 4-1: USB disconnect, device number 70
[ 1024.539190][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2
[ 1024.546235][ T6120] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1024.599227][ T3697] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[ 1024.619797][ T3697] appledisplay: probe of 3-1:0.0 failed with error -110
[ 1024.725117][ T3695] usb 3-1: USB disconnect, device number 71
07:41:07 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:07 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:07 executing program 4:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:07 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

[ 1025.078805][T28930] syz_tun: tun_net_xmit 42
[ 1025.083520][T28930] syz_tun: tun_net_xmit 42
[ 1025.088155][T28930] syz_tun: tun_net_xmit 42
[ 1025.093975][T28930] syz_tun: tun_net_xmit 42
[ 1025.099370][T28930] syz_tun: tun_net_xmit 42
[ 1025.099613][T28931] syz_tun: tun_net_xmit 42
[ 1025.104086][T28930] syz_tun: tun_net_xmit 42
[ 1025.110158][T28931] syz_tun: tun_net_xmit 42
[ 1025.113494][T28930] syz_tun: tun_net_xmit 42
[ 1025.117930][T28931] syz_tun: tun_net_xmit 42
[ 1025.122044][T28930] syz_tun: tun_net_xmit 42
[ 1025.128847][T28931] syz_tun: tun_net_xmit 42
[ 1025.131808][T28930] syz_tun: tun_net_xmit 42
[ 1025.135711][T28931] syz_tun: tun_net_xmit 42
[ 1025.146640][T28931] syz_tun: tun_net_xmit 42
[ 1025.153399][T28931] syz_tun: tun_net_xmit 42
07:41:07 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

07:41:07 executing program 4:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8, 0xfffffffe}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00']})

07:41:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

07:41:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

[ 1025.319148][ T3697] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1025.339089][ T3695] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1025.350106][T28946] syz_tun: tun_net_xmit 42
[ 1025.354814][T28946] syz_tun: tun_net_xmit 42
[ 1025.360163][T28946] syz_tun: tun_net_xmit 42
[ 1025.364850][T28946] syz_tun: tun_net_xmit 42
07:41:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

07:41:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

[ 1025.370913][T28946] syz_tun: tun_net_xmit 42
[ 1025.375554][T28946] syz_tun: tun_net_xmit 42
[ 1025.380210][T28946] syz_tun: tun_net_xmit 42
[ 1025.384828][T28946] syz_tun: tun_net_xmit 42
[ 1025.390035][T28946] syz_tun: tun_net_xmit 42
[ 1025.395486][T28946] syz_tun: tun_net_xmit 42
[ 1025.401229][T28946] syz_tun: tun_net_xmit 42
[ 1025.539378][T12975] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1025.569106][ T3697] usb 6-1: Using ep0 maxpacket: 16
[ 1025.589098][ T3695] usb 4-1: Using ep0 maxpacket: 16
[ 1025.689260][ T3697] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1025.697346][ T3697] usb 6-1: config 0 has no interface number 0
[ 1025.704659][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1025.715789][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1025.719223][ T3695] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1025.734627][ T3695] usb 4-1: config 0 has no interface number 0
[ 1025.740779][ T3695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1025.751749][ T3695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1025.779233][T12975] usb 3-1: Using ep0 maxpacket: 8
[ 1025.879948][ T3697] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1025.889095][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1025.897201][ T3697] usb 6-1: Product: syz
[ 1025.901488][ T3697] usb 6-1: Manufacturer: syz
[ 1025.906130][ T3697] usb 6-1: SerialNumber: syz
[ 1025.909361][T12975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1025.922343][ T3695] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1025.923166][ T3697] usb 6-1: config 0 descriptor??
[ 1025.934418][ T3695] usb 4-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1025.945278][ T3695] usb 4-1: Product: syz
[ 1025.950597][ T3695] usb 4-1: Manufacturer: syz
[ 1025.955304][ T3695] usb 4-1: SerialNumber: syz
[ 1025.961625][ T3695] usb 4-1: config 0 descriptor??
[ 1025.990778][ T3697] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1025.998026][ T3697] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input146
[ 1026.028542][ T3695] cm109 4-1:0.8: invalid payload size 0, expected 4
[ 1026.036105][T12975] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1026.046490][ T3695] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input147
[ 1026.057020][T12975] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1026.065087][T12975] usb 3-1: Manufacturer: syz
[ 1026.075927][T12975] usb 3-1: config 0 descriptor??
[ 1026.206593][ T3697] usb 6-1: USB disconnect, device number 63
[ 1026.219066][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1026.226042][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1026.246416][ T3697] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1026.249037][T12976] usb 4-1: USB disconnect, device number 71
[ 1026.260801][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1026.260820][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1026.278733][T12976] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1026.399191][T12975] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[ 1026.419629][T12975] appledisplay: probe of 3-1:0.0 failed with error -110
[ 1026.537407][T12975] usb 3-1: USB disconnect, device number 72
07:41:09 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x0)

07:41:09 executing program 4:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:09 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008fb60118030109021b0001000000000904080001030000000905", @ANYBLOB="8fc3"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096)

07:41:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

07:41:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

07:41:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x0)

07:41:09 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

07:41:09 executing program 4:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
writev(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

07:41:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x0)

07:41:09 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

[ 1027.069071][ T3697] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1027.081403][T12975] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1027.309313][ T3697] usb 6-1: Using ep0 maxpacket: 16
[ 1027.339200][T12975] usb 4-1: Using ep0 maxpacket: 16
[ 1027.344538][T12976] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1027.429158][ T3697] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1027.437378][ T3697] usb 6-1: config 0 has no interface number 0
[ 1027.443920][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1027.454977][ T3697] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1027.469528][T12975] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1027.477553][T12975] usb 4-1: config 0 has no interface number 0
[ 1027.483964][T12975] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1027.495022][T12975] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1027.599079][T12976] usb 3-1: Using ep0 maxpacket: 8
[ 1027.619247][ T3697] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1027.628343][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1027.637806][ T3697] usb 6-1: Product: syz
[ 1027.642148][ T3697] usb 6-1: Manufacturer: syz
[ 1027.646774][ T3697] usb 6-1: SerialNumber: syz
[ 1027.652885][ T3697] usb 6-1: config 0 descriptor??
[ 1027.679406][T12975] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 1027.688573][T12975] usb 4-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3
[ 1027.696806][T12975] usb 4-1: Product: syz
[ 1027.701144][T12975] usb 4-1: Manufacturer: syz
[ 1027.705806][T12975] usb 4-1: SerialNumber: syz
[ 1027.707110][ T3697] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1027.716892][T12975] usb 4-1: config 0 descriptor??
[ 1027.721552][ T3697] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input148
[ 1027.722703][T12976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.790068][T12975] cm109 4-1:0.8: invalid payload size 0, expected 4
[ 1027.797219][T12975] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input149
[ 1027.839378][T12976] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1027.848450][T12976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1027.856763][T12976] usb 3-1: Manufacturer: syz
[ 1027.863277][T12976] usb 3-1: config 0 descriptor??
[ 1027.908607][ T3697] usb 6-1: USB disconnect, device number 64
[ 1027.914664][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1027.914684][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1027.934012][ T3697] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1028.005778][T12975] usb 4-1: USB disconnect, device number 72
[ 1028.011815][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1028.011849][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1028.029087][T12975] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1028.179173][T12976] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[ 1028.200246][T12976] appledisplay: probe of 3-1:0.0 failed with error -110
[ 1028.315756][ T3697] usb 3-1: USB disconnect, device number 73
07:41:10 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:41:10 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x0)

07:41:10 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:41:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3400000037000900000000000000000001000000040800000c000180e958971c08ac0000080002"], 0x34}}, 0x0)

07:41:10 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3400000037000900000000000000000001000000040800000c000180e958971c08ac0000080002"], 0x34}}, 0x0)

07:41:10 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

[ 1028.538784][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1028.554019][T28996] device éX—¬ entered promiscuous mode
[ 1028.597511][T29000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:11 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

07:41:11 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:41:11 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:11 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:41:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3400000037000900000000000000000001000000040800000c000180e958971c08ac0000080002"], 0x34}}, 0x0)

07:41:11 executing program 0:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:11 executing program 0:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:11 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:11 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

[ 1028.855245][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:11 executing program 0:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3400000037000900000000000000000001000000040800000c000180e958971c08ac0000080002"], 0x34}}, 0x0)

07:41:11 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

[ 1028.955613][T29023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1029.129272][T12976] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1029.389200][T12976] usb 3-1: Using ep0 maxpacket: 8
[ 1029.509936][T12976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.599267][T12976] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1029.608423][T12976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1029.617043][T12976] usb 3-1: Manufacturer: syz
[ 1029.622667][T12976] usb 3-1: config 0 descriptor??
[ 1029.939171][T12976] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[ 1029.959924][T12976] appledisplay: probe of 3-1:0.0 failed with error -110
[ 1030.073671][ T3697] usb 3-1: USB disconnect, device number 74
07:41:12 executing program 1:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:12 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x5}]]}}}]}, 0x38}}, 0x0)

07:41:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000002a40)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)

07:41:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

07:41:12 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x2e8, 0x29, 0x4, {0x0, 0x5a, '\x00', [@jumbo, @generic={0x0, 0xdf, "aac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0xfffffffffffffd74, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x2e8}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0)

07:41:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000002a40)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)

07:41:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x5}]]}}}]}, 0x38}}, 0x0)

07:41:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

07:41:12 executing program 1:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:12 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:12 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x2e8, 0x29, 0x4, {0x0, 0x5a, '\x00', [@jumbo, @generic={0x0, 0xdf, "aac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0xfffffffffffffd74, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x2e8}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0)

07:41:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000002a40)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)

07:41:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x5}]]}}}]}, 0x38}}, 0x0)

07:41:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

07:41:12 executing program 1:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000002a40)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)

07:41:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

07:41:12 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x2e8, 0x29, 0x4, {0x0, 0x5a, '\x00', [@jumbo, @generic={0x0, 0xdf, "aac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0xfffffffffffffd74, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x2e8}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0)

07:41:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x38}}, 0x0)

07:41:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x5}]]}}}]}, 0x38}}, 0x0)

07:41:13 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340), 0x12)

07:41:13 executing program 3:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff})
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6})
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240))
mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000})
epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8)

07:41:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x38}}, 0x0)

07:41:13 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x2e8, 0x29, 0x4, {0x0, 0x5a, '\x00', [@jumbo, @generic={0x0, 0xdf, "aac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0xfffffffffffffd74, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x2e8}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0)

07:41:13 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:13 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340), 0x12)

07:41:13 executing program 0:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0011}]})
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

07:41:13 executing program 0:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0011}]})
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

07:41:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x38}}, 0x0)

07:41:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

07:41:13 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340), 0x12)

07:41:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x38}}, 0x0)

07:41:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

07:41:14 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:14 executing program 0:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0011}]})
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

07:41:14 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340), 0x12)

07:41:14 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3f56, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006e9000/0x2000)=nil, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_io_uring_setup(0x77b, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:41:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

07:41:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:14 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:14 executing program 0:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0011}]})
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

07:41:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

07:41:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000480)={r2, 0x0, 0x1})

07:41:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x8e1})

07:41:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x8e1})

07:41:15 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:15 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3f56, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006e9000/0x2000)=nil, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_io_uring_setup(0x77b, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:41:15 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x8e1})

07:41:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x8e1})

07:41:15 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:16 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:16 executing program 0:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:16 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:16 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3f56, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006e9000/0x2000)=nil, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_io_uring_setup(0x77b, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:41:16 executing program 0:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:16 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:16 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:16 executing program 0:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:16 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3f56, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006e9000/0x2000)=nil, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_io_uring_setup(0x77b, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:41:16 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:16 executing program 0:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:17 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:17 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x1e, 0x0, 0x0)
connect$tipc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080), 0x1a1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r4, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff}, {0xfff3, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88000, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

07:41:17 executing program 2:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:17 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:17 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x6088, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@pppol2tpv3, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x330, 0x0, 0x0, 0x0, 0x0)

07:41:17 executing program 2:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

[ 1035.196978][T29220] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
07:41:17 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[ 1035.414719][T29231] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
07:41:18 executing program 2:
r0 = syz_io_uring_setup(0xccf, &(0x7f00000003c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lseek(r1, 0x9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "c5bfcb21488d38fd", "dba37e63d935d5007a965260f6273a02", "46e57c64", "7a3b78de15f54c0b"}, 0x28)
sendfile(r2, r1, 0x0, 0x7ffff004)
close(r0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), 0x0)

07:41:18 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:18 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[ 1035.864829][T29239] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
07:41:18 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[ 1035.934990][T29242] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
07:41:18 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x6088, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@pppol2tpv3, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x330, 0x0, 0x0, 0x0, 0x0)

[ 1036.065668][T29247] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
07:41:18 executing program 3:
semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffd)

07:41:18 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:18 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:18 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:18 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x53, 0x90, 0x91, 0x40, 0xac8, 0xc001, 0xfc30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xeb, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000080"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1036.725106][T29260] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1036.737782][T29262] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1036.748630][T29261] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
07:41:19 executing program 3:
semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffd)

07:41:19 executing program 3:
semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffd)

07:41:19 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x6088, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@pppol2tpv3, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x330, 0x0, 0x0, 0x0, 0x0)

07:41:19 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[ 1036.919173][ T6120] usb 6-1: new high-speed USB device number 65 using dummy_hcd
07:41:19 executing program 3:
semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffd)

07:41:19 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x1c1, 0x8}, 0x18)
unshare(0x40000400)
unshare(0x10100)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=@newsa={0x138, 0x16, 0x713, 0x0, 0x0, {{@in=@private=0x4000, @in6=@local}, {@in6=@private2, 0x0, 0x32}, @in=@private, {}, {}, {0x0, 0x5, 0x3}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:41:19 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xac, 0x62, 0x8e, 0x40, 0x728, 0xd001, 0xeeee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xcb, 0x4}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:19 executing program 3:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2e00)

[ 1037.054915][T29276] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
07:41:19 executing program 3:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2e00)

07:41:19 executing program 4:
r0 = io_uring_setup(0x6bb1, &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, 0x0, 0x7)

07:41:19 executing program 4:
r0 = io_uring_setup(0x6bb1, &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, 0x0, 0x7)

[ 1037.152410][T29287] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1037.311108][ T6120] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c001, bcdDevice=fc.30
[ 1037.321695][ T6120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.340805][ T6120] usb 6-1: config 0 descriptor??
[ 1037.369494][ T3697] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1037.390791][ T6120] gspca_main: vc032x-2.14.0 probing 0ac8:c001
[ 1037.779342][ T3697] usb 1-1: New USB device found, idVendor=0728, idProduct=d001, bcdDevice=ee.ee
[ 1037.788494][ T3697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.797559][ T3697] usb 1-1: config 0 descriptor??
[ 1037.852629][ T3697] gspca_main: nw80x-2.14.0 probing 0728:d001
[ 1038.481401][T12976] usb 1-1: USB disconnect, device number 55
[ 1040.589230][ T6120] gspca_vc032x: reg_r err -71
[ 1040.593943][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.599786][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.605122][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.610680][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.615993][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.621847][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.627164][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.632640][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.637947][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.643417][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.648746][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.654213][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.660063][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.665413][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.670969][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.676514][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.682051][ T6120] gspca_vc032x: I2c Bus Busy Wait 00
[ 1040.687359][ T6120] gspca_vc032x: Unknown sensor...
[ 1040.692570][ T6120] vc032x: probe of 6-1:0.0 failed with error -22
[ 1040.706376][ T6120] usb 6-1: USB disconnect, device number 65
07:41:23 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x53, 0x90, 0x91, 0x40, 0xac8, 0xc001, 0xfc30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xeb, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000080"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:23 executing program 3:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2e00)

07:41:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x0, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0)

07:41:23 executing program 4:
r0 = io_uring_setup(0x6bb1, &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, 0x0, 0x7)

07:41:23 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x6088, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@pppol2tpv3, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x330, 0x0, 0x0, 0x0, 0x0)

07:41:23 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xac, 0x62, 0x8e, 0x40, 0x728, 0xd001, 0xeeee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xcb, 0x4}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x0, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0)

07:41:23 executing program 4:
r0 = io_uring_setup(0x6bb1, &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, 0x0, 0x7)

07:41:23 executing program 3:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2e00)

07:41:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x0, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0)

07:41:23 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, 0x0, 0x0)

07:41:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f00000000c0)={'L+'}, 0x16, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000300)="9a00000080de006464dc4900650fc735008800000f229e3e0f20a70f20d835080000000f22d8f7464c00000100c4c39949d908c7442400a1000000c7442402c1000000c7442406000000000f011424c4e1fd11d6", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1041.258872][T29315] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1041.273260][T29315] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1041.389433][ T6120] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1041.410848][ T3697] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1041.789484][ T6120] usb 1-1: New USB device found, idVendor=0728, idProduct=d001, bcdDevice=ee.ee
[ 1041.806270][ T6120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.814869][ T3697] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c001, bcdDevice=fc.30
[ 1041.829867][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.852404][ T6120] usb 1-1: config 0 descriptor??
[ 1041.865621][ T3697] usb 6-1: config 0 descriptor??
[ 1041.930228][ T3697] gspca_main: vc032x-2.14.0 probing 0ac8:c001
[ 1041.941900][ T6120] gspca_main: nw80x-2.14.0 probing 0728:d001
[ 1042.590127][T12976] usb 1-1: USB disconnect, device number 56
[ 1045.249169][ T3697] gspca_vc032x: reg_r err -71
[ 1045.253891][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.259423][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.264760][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.270258][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.275594][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.280955][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.286529][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.292063][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.297378][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.302724][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.308040][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.313419][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.318734][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.324238][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.329590][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.334937][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.340274][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1045.345611][ T3697] gspca_vc032x: Unknown sensor...
[ 1045.350731][ T3697] vc032x: probe of 6-1:0.0 failed with error -22
[ 1045.360983][ T3697] usb 6-1: USB disconnect, device number 66
07:41:28 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, 0x0, 0x0)

07:41:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x0, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0)

07:41:28 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x14, 0x0, 0x0)

07:41:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f00000000c0)={'L+'}, 0x16, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000300)="9a00000080de006464dc4900650fc735008800000f229e3e0f20a70f20d835080000000f22d8f7464c00000100c4c39949d908c7442400a1000000c7442402c1000000c7442406000000000f011424c4e1fd11d6", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:41:28 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xac, 0x62, 0x8e, 0x40, 0x728, 0xd001, 0xeeee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xcb, 0x4}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:28 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x53, 0x90, 0x91, 0x40, 0xac8, 0xc001, 0xfc30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xeb, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000080"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:28 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, 0x0, 0x0)

07:41:28 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x14, 0x0, 0x0)

07:41:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x13, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0)

07:41:28 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x14, 0x0, 0x0)

07:41:28 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, 0x0, 0x0)

07:41:28 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x14, 0x0, 0x0)

07:41:28 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

[ 1045.843680][T29329] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1045.852342][T29329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:41:28 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0xf8, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private0}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, [@proto={0x5, 0x19, 0x33}]}, 0xf8}}, 0x0)

07:41:28 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r1, &(0x7f0000000140)='.', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

[ 1045.907786][   T27] audit: type=1326 audit(1666424488.142:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff128b5f9 code=0x0
[ 1046.059995][ T6120] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1046.109415][ T3693] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1046.461793][ T6120] usb 1-1: New USB device found, idVendor=0728, idProduct=d001, bcdDevice=ee.ee
[ 1046.471091][ T6120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.489691][ T6120] usb 1-1: config 0 descriptor??
[ 1046.510960][ T3693] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c001, bcdDevice=fc.30
[ 1046.522543][ T3693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.532509][ T6120] gspca_main: nw80x-2.14.0 probing 0728:d001
[ 1046.542183][ T3693] usb 6-1: config 0 descriptor??
[ 1046.593353][ T3693] gspca_main: vc032x-2.14.0 probing 0ac8:c001
07:41:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f00000000c0)={'L+'}, 0x16, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000300)="9a00000080de006464dc4900650fc735008800000f229e3e0f20a70f20d835080000000f22d8f7464c00000100c4c39949d908c7442400a1000000c7442402c1000000c7442406000000000f011424c4e1fd11d6", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1046.716206][T29357] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1046.724592][T29357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1047.184893][T12975] usb 1-1: USB disconnect, device number 57
07:41:29 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xac, 0x62, 0x8e, 0x40, 0x728, 0xd001, 0xeeee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xcb, 0x4}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1047.999237][ T3697] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1048.379852][ T3697] usb 1-1: New USB device found, idVendor=0728, idProduct=d001, bcdDevice=ee.ee
[ 1048.388918][ T3697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.398646][ T3697] usb 1-1: config 0 descriptor??
[ 1048.451600][ T3697] gspca_main: nw80x-2.14.0 probing 0728:d001
[ 1049.121601][ T3697] usb 1-1: USB disconnect, device number 58
[ 1049.869301][ T3693] gspca_vc032x: reg_r err -71
[ 1049.874139][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.879850][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.885196][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.891564][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.896923][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.902380][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.907705][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.913153][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.918507][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.924160][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.929663][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.935002][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.940432][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.945781][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.951278][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.956598][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.962024][ T3693] gspca_vc032x: I2c Bus Busy Wait 00
[ 1049.967346][ T3693] gspca_vc032x: Unknown sensor...
[ 1049.972553][ T3693] vc032x: probe of 6-1:0.0 failed with error -22
[ 1049.985689][ T3693] usb 6-1: USB disconnect, device number 67
07:41:32 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0xf8, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private0}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, [@proto={0x5, 0x19, 0x33}]}, 0xf8}}, 0x0)

07:41:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r1, &(0x7f0000000140)='.', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

07:41:32 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f00000000c0)={'L+'}, 0x16, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000300)="9a00000080de006464dc4900650fc735008800000f229e3e0f20a70f20d835080000000f22d8f7464c00000100c4c39949d908c7442400a1000000c7442402c1000000c7442406000000000f011424c4e1fd11d6", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:41:32 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:32 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x53, 0x90, 0x91, 0x40, 0xac8, 0xc001, 0xfc30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xeb, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000080"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:32 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0xf8, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private0}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, [@proto={0x5, 0x19, 0x33}]}, 0xf8}}, 0x0)

[ 1050.374592][   T27] audit: type=1326 audit(1666424492.612:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff128b5f9 code=0x0
07:41:32 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0xf8, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private0}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, [@proto={0x5, 0x19, 0x33}]}, 0xf8}}, 0x0)

07:41:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r1, &(0x7f0000000140)='.', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

07:41:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r1, &(0x7f0000000140)='.', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

[ 1050.408291][   T27] audit: type=1326 audit(1666424492.612:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29370 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08a608b5f9 code=0x0
07:41:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:32 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

[ 1050.689135][ T3697] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1051.049334][ T3697] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c001, bcdDevice=fc.30
[ 1051.058472][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.071261][ T3697] usb 6-1: config 0 descriptor??
[ 1051.111807][ T3697] gspca_main: vc032x-2.14.0 probing 0ac8:c001
[ 1054.110329][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.116910][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.409134][ T3697] gspca_vc032x: reg_r err -71
[ 1054.413884][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.419630][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.424965][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.430775][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.436108][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.441691][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.447001][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.452881][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.458229][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.463755][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.469475][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.474801][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.480292][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.485620][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.491083][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.496418][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.502111][ T3697] gspca_vc032x: I2c Bus Busy Wait 00
[ 1054.507448][ T3697] gspca_vc032x: Unknown sensor...
[ 1054.512751][ T3697] vc032x: probe of 6-1:0.0 failed with error -22
[ 1054.520503][ T3697] usb 6-1: USB disconnect, device number 68
07:41:37 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:37 executing program 1:
r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0xc82, 0x0)
write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}], 0x1)

07:41:37 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:37 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:37 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:37 executing program 1:
r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0xc82, 0x0)
write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}], 0x1)

07:41:37 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x2f, 0x0, 0x0)

07:41:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x3fffffffffffcb1, 0x3000000, '\x00', [{0xffffffff}]})

07:41:37 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180), 0x1)

07:41:37 executing program 1:
r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0xc82, 0x0)
write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}], 0x1)

07:41:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x3fffffffffffcb1, 0x3000000, '\x00', [{0xffffffff}]})

[ 1054.935975][   T27] audit: type=1326 audit(1666424497.172:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08a608b5f9 code=0x0
07:41:37 executing program 1:
r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0xc82, 0x0)
write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}], 0x1)

07:41:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x3fffffffffffcb1, 0x3000000, '\x00', [{0xffffffff}]})

07:41:37 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2)
r2 = dup2(r0, r1)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386105, &(0x7f0000000080))

[ 1055.002366][   T27] audit: type=1326 audit(1666424497.172:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff128b5f9 code=0x0
07:41:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x3fffffffffffcb1, 0x3000000, '\x00', [{0xffffffff}]})

07:41:38 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:38 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2040, 0x1}, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000))

07:41:38 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:38 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2)
r2 = dup2(r0, r1)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386105, &(0x7f0000000080))

07:41:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000980)={"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"})

07:41:38 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x2f, 0x0, 0x0)

07:41:38 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2)
r2 = dup2(r0, r1)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386105, &(0x7f0000000080))

[ 1055.805663][   T27] audit: type=1326 audit(1666424498.042:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff128b5f9 code=0x0
07:41:38 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2)
r2 = dup2(r0, r1)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386105, &(0x7f0000000080))

[ 1055.848470][   T27] audit: type=1326 audit(1666424498.042:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29442 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08a608b5f9 code=0x0
07:41:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x58}}, 0x0)

07:41:38 executing program 2:
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ff4000/0xa000)=nil, 0x20000, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)

07:41:38 executing program 2:
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ff4000/0xa000)=nil, 0x20000, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)

07:41:38 executing program 2:
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ff4000/0xa000)=nil, 0x20000, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)

[ 1055.954116][T29458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1055.976362][T29458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:38 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x2f, 0x0, 0x0)

07:41:38 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:38 executing program 2:
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ff4000/0xa000)=nil, 0x20000, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)

07:41:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x58}}, 0x0)

07:41:38 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

07:41:38 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

[ 1056.680180][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1056.753987][T29478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1056.804716][T29471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

07:41:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x58}}, 0x0)

07:41:39 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x2f, 0x0, 0x0)

07:41:39 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

[ 1056.930865][T29490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1056.996667][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

[ 1057.073338][T29492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1057.132195][T29503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
07:41:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x58}}, 0x0)

[ 1057.267812][T29511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
07:41:39 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:39 executing program 5:
clock_gettime(0x3, &(0x7f0000000000))

07:41:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

07:41:39 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:39 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:39 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff9f0000}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1cd30000}, 0x48)

07:41:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff9f0000}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1cd30000}, 0x48)

07:41:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff9f0000}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1cd30000}, 0x48)

07:41:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:39 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff9f0000}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1cd30000}, 0x48)

07:41:40 executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

[ 1057.749780][T29535] ALSA: seq fatal error: cannot create timer (-22)
07:41:40 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

[ 1057.973928][T29537] kvm_set_msr_common: 10 callbacks suppressed
[ 1057.973942][T29537] kvm [29536]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
07:41:40 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

[ 1058.069755][T29554] ALSA: seq fatal error: cannot create timer (-22)
07:41:40 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:40 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:40 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x719})
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

07:41:40 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:41 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

[ 1059.021586][T29567] kvm [29561]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
[ 1059.128373][T29570] kvm [29563]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
07:41:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:41 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1059.571119][T29591] kvm [29588]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
07:41:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1059.671459][T29589] kvm [29587]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
[ 1059.872660][T29603] kvm [29602]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
[ 1059.986676][T29608] kvm [29607]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
07:41:42 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, 0x0)

07:41:42 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:42 executing program 1:
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='none', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c)

07:41:42 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, 0x0)

07:41:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee20700760000000004f85800155141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:41:42 executing program 1:
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='none', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c)

07:41:42 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, 0x0)

07:41:42 executing program 1:
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='none', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c)

07:41:42 executing program 1:
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='none', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c)

07:41:42 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, 0x0)

07:41:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0)

[ 1060.463323][T29621] kvm [29613]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
[ 1060.475531][T29649] net_ratelimit: 1014 callbacks suppressed
[ 1060.475544][T29649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
07:41:42 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3480, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0x402c5342, &(0x7f0000000180)={0x0, 0x7a120, 'client0\x00', 0x0, "c09978361f8feac9", "e57b9a462f556a53acbb27c68ec6ba85d2d032481f41508ade60d1fa9b1fc0a9"})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r5], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0x10000000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x0, 0x20000005, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
io_uring_enter(r1, 0x2ff, 0xf000, 0x0, 0x0, 0x0)

07:41:42 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

[ 1060.637448][T29618] kvm [29617]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
[ 1060.665533][T29637] kvm [29634]: vcpu0, guest rIP: 0x29 disabled perfctr wrmsr: 0x187 data 0xffff0000
07:41:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

07:41:43 executing program 0:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc05a67080d26c3f5, 0x0, 0x0, 0x0)

07:41:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0)

07:41:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

07:41:43 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0xa0, 0xb8, 0x40, 0x458, 0x7003, 0x1eb0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x89, 0xde}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'f'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:43 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

07:41:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

07:41:43 executing program 0:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc05a67080d26c3f5, 0x0, 0x0, 0x0)

07:41:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0)

07:41:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

07:41:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

07:41:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

07:41:43 executing program 0:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc05a67080d26c3f5, 0x0, 0x0, 0x0)

07:41:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0)

07:41:43 executing program 1:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04f0"], 0xe)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4)

07:41:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

[ 1061.199088][ T3695] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1061.549199][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.559150][ T3695] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=1e.b0
[ 1061.568540][ T3695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.581525][ T3695] usb 4-1: config 0 descriptor??
[ 1061.622077][ T3695] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1061.839143][ T3695] gspca_sn9c2028: read1 error -32
[ 1061.879793][ T3695] gspca_sn9c2028: read1 error -32
[ 1062.123095][ T3697] usb 4-1: USB disconnect, device number 73
07:41:44 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

07:41:44 executing program 0:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc05a67080d26c3f5, 0x0, 0x0, 0x0)

07:41:44 executing program 1:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04f0"], 0xe)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4)

07:41:44 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:44 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0xa0, 0xb8, 0x40, 0x458, 0x7003, 0x1eb0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x89, 0xde}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'f'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:44 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

[ 1062.599089][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
07:41:44 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:44 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:44 executing program 1:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04f0"], 0xe)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4)

07:41:44 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

07:41:44 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:44 executing program 1:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04f0"], 0xe)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4)

07:41:44 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:45 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:45 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0), 0x8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

07:41:45 executing program 1:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

[ 1062.929119][  T147] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1063.329203][  T147] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=1e.b0
[ 1063.338267][  T147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.352040][  T147] usb 4-1: config 0 descriptor??
[ 1063.391673][  T147] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1063.599191][  T147] gspca_sn9c2028: read1 error -32
[ 1063.649232][  T147] gspca_sn9c2028: read1 error -32
[ 1063.903637][ T3697] usb 4-1: USB disconnect, device number 74
07:41:46 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0xa0, 0xb8, 0x40, 0x458, 0x7003, 0x1eb0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x89, 0xde}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'f'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

07:41:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
fchdir(r0)
quotactl(0x2080000200, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)='-0')

07:41:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

07:41:46 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

07:41:46 executing program 1:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

07:41:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
fchdir(r0)
quotactl(0x2080000200, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)='-0')

07:41:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

[ 1064.453219][T29735] __nla_validate_parse: 2 callbacks suppressed
[ 1064.453238][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
fchdir(r0)
quotactl(0x2080000200, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)='-0')

07:41:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

07:41:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
fchdir(r0)
quotactl(0x2080000200, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)='-0')

[ 1064.519276][T29735] 8021q: adding VLAN 0 to HW filter on device bond8
07:41:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

[ 1064.655219][T29743] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1064.669609][T29743] bond8: (slave bond9): Enslaving as an active interface with an up link
[ 1064.678260][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[ 1064.741189][  T147] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1065.129339][  T147] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=1e.b0
[ 1065.138431][  T147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.151896][  T147] usb 4-1: config 0 descriptor??
[ 1065.191218][  T147] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1065.409165][  T147] gspca_sn9c2028: read1 error -32
[ 1065.449155][  T147] gspca_sn9c2028: read1 error -32
[ 1065.701154][  T147] usb 4-1: USB disconnect, device number 75
07:41:48 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0xa0, 0xb8, 0x40, 0x458, 0x7003, 0x1eb0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x89, 0xde}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'f'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:41:48 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4)
r1 = socket$inet(0x2, 0x80803, 0x5)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="002b3726b15273b205de50c8c1d152abc1d4038ae168b1c3939f744530a77a11cdbc851c239ff742667aa54218baa7f6be5e3f20098ff429eb4bc83e1253d8f86082a80e954d6fec790c649a3f55d73c6736295e9a0e7aa1e74acb4e0359ee1dd9a8f103817d24d3a0dbdf028fbf534817413cf7e2c447335ca8d853eb308fcddba8e79378107021404dded13e9762cd20ec5b3751e870980680872e759bdb796016bf20a6bfee9ee432bd23c4fe"], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="d9e80127a89901a5ce43be2df15faaaf56b6c0ee24455b988ff1ec328d3bb02fcea0407d9dda7be6aba8b96a5f066c81ee922321873db61b6da8de87b0abd7bbbc34b3f72601b48ab7a22790c32257d102d503b6afb464d06baceaf88f79fe8ccbe16f8f", 0x64}, {&(0x7f00000002c0)="99bde8217d52fec428febec16c0ff9ac839dd78f80d6a7ffbace10fddd5dfada460c399e75d7709ceef568838d6eef911d61dc3eddd13eac2058b4623e9c8e4d76f391e0584712f749004b5149067e008bfb56f8c5707b8a4189439d687a61e5078205dd6ebbd376fc6324da6479c2a9107a2ca683fe4b0153f3c2a5d30296cf51521839ed1e49e7332c9a56be01b371f75100e52ea564774ff9ce29b454bd258ea23e45c49d3f25701548a5810a7bbe167ca6268ebd", 0xb6}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c00080000d742c73fdfe6f800", @ANYRES32=0x0, @ANYBLOB="6401010064010100000000001c000400000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x4000000)
r3 = syz_open_dev$rtc(0x0, 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0xfffffffd, 0x33, 0x1, 0x0, 0x1, 0x117})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/901], 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1d0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @local, 0xffffff00, 0xffffff00, 'tunl0\x00', 'bond0\x00', {0xff}, {}, 0x29, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0xb, [0x37, 0x2d, 0x7, 0x2b, 0x3f, 0xe, 0x37, 0x3c, 0x1f, 0x36, 0x6, 0x4, 0x34, 0x14, 0x3d, 0x7], 0x2, 0x9, 0x204}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d3, 0x4d4], 0x1}}, @common=@addrtype={{0x30}, {0x401, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x4}, {0x0, 0x4, 0x2}, 0x100, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0x0, [0x8, 0x2f, 0x11, 0x0, 0x4, 0x15, 0x27, 0x30, 0x36, 0x25, 0x33, 0x35, 0x0, 0xe, 0x18, 0x3e], 0x1, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

07:41:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

07:41:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

07:41:48 executing program 1:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

07:41:48 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = memfd_create(&(0x7f0000000440)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6]~\xb5\xf4\xd0\nL8\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
write(r1, &(0x7f00000000c0)='{', 0xfffffe1e)
fallocate(r1, 0x0, 0x0, 0x7ffd)
lseek(r1, 0x0, 0x4)

07:41:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

[ 1066.230665][T29764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:48 executing program 4:
r0 = socket$kcm(0x11, 0x8000000000000003, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x78, 0x0, 0x0, "0fba5c382e293b47c809776cbb600ff399e0e70ba0f29ddcdff3d27220795eccd1cdb467dcfded501bf4b4ec569460a8e180a319e68ba336391582b15e9a87203397fb0d2b0a64c5d022686829dadf5d7c9ef0d4694540abfbc352b40abbf28da15a7d0363de"}], 0x78}, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x9}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840200903b08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)="e6", 0x20ad}], 0x2, 0x0, 0x0, 0x1a0}, 0x80)

[ 1066.280911][T29764] 8021q: adding VLAN 0 to HW filter on device bond10
07:41:48 executing program 4:
r0 = socket$kcm(0x11, 0x8000000000000003, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x78, 0x0, 0x0, "0fba5c382e293b47c809776cbb600ff399e0e70ba0f29ddcdff3d27220795eccd1cdb467dcfded501bf4b4ec569460a8e180a319e68ba336391582b15e9a87203397fb0d2b0a64c5d022686829dadf5d7c9ef0d4694540abfbc352b40abbf28da15a7d0363de"}], 0x78}, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x9}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)="e6", 0x20ad}], 0x2, 0x0, 0x0, 0x1a0}, 0x80)

07:41:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

[ 1066.363552][T29764] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1066.371919][T29764] bond10: (slave bond11): Enslaving as an active interface with an up link
[ 1066.389950][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
07:41:48 executing program 4:
r0 = socket$kcm(0x11, 0x8000000000000003, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x78, 0x0, 0x0, "0fba5c382e293b47c809776cbb600ff399e0e70ba0f29ddcdff3d27220795eccd1cdb467dcfded501bf4b4ec569460a8e180a319e68ba336391582b15e9a87203397fb0d2b0a64c5d022686829dadf5d7c9ef0d4694540abfbc352b40abbf28da15a7d0363de"}], 0x78}, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x9}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)="e6", 0x20ad}], 0x2, 0x0, 0x0, 0x1a0}, 0x80)

[ 1066.434799][T29785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:48 executing program 4:
r0 = socket$kcm(0x11, 0x8000000000000003, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x78, 0x0, 0x0, "0fba5c382e293b47c809776cbb600ff399e0e70ba0f29ddcdff3d27220795eccd1cdb467dcfded501bf4b4ec569460a8e180a319e68ba336391582b15e9a87203397fb0d2b0a64c5d022686829dadf5d7c9ef0d4694540abfbc352b40abbf28da15a7d0363de"}], 0x78}, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x9}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)="e6", 0x20ad}], 0x2, 0x0, 0x0, 0x1a0}, 0x80)

[ 1066.499196][T12976] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1066.513093][T29785] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1066.657873][T29790] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1066.694821][T29790] bond12: (slave bond13): Enslaving as an active interface with an up link
[ 1066.725140][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
[ 1066.859192][T12976] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=1e.b0
[ 1066.868427][T12976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.883197][T12976] usb 4-1: config 0 descriptor??
[ 1066.934812][T12976] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1067.139159][T12976] gspca_sn9c2028: read1 error -32
[ 1067.179304][T12976] gspca_sn9c2028: read1 error -32
[ 1067.430900][ T3697] usb 4-1: USB disconnect, device number 76
07:41:50 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\xc7[\xc5\xfc}w\xc3-q\xee'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)

07:41:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000006c0), 0x0)

07:41:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5})

07:41:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

07:41:50 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4)
r1 = socket$inet(0x2, 0x80803, 0x5)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="002b3726b15273b205de50c8c1d152abc1d4038ae168b1c3939f744530a77a11cdbc851c239ff742667aa54218baa7f6be5e3f20098ff429eb4bc83e1253d8f86082a80e954d6fec790c649a3f55d73c6736295e9a0e7aa1e74acb4e0359ee1dd9a8f103817d24d3a0dbdf028fbf534817413cf7e2c447335ca8d853eb308fcddba8e79378107021404dded13e9762cd20ec5b3751e870980680872e759bdb796016bf20a6bfee9ee432bd23c4fe"], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="d9e80127a89901a5ce43be2df15faaaf56b6c0ee24455b988ff1ec328d3bb02fcea0407d9dda7be6aba8b96a5f066c81ee922321873db61b6da8de87b0abd7bbbc34b3f72601b48ab7a22790c32257d102d503b6afb464d06baceaf88f79fe8ccbe16f8f", 0x64}, {&(0x7f00000002c0)="99bde8217d52fec428febec16c0ff9ac839dd78f80d6a7ffbace10fddd5dfada460c399e75d7709ceef568838d6eef911d61dc3eddd13eac2058b4623e9c8e4d76f391e0584712f749004b5149067e008bfb56f8c5707b8a4189439d687a61e5078205dd6ebbd376fc6324da6479c2a9107a2ca683fe4b0153f3c2a5d30296cf51521839ed1e49e7332c9a56be01b371f75100e52ea564774ff9ce29b454bd258ea23e45c49d3f25701548a5810a7bbe167ca6268ebd", 0xb6}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c00080000d742c73fdfe6f800", @ANYRES32=0x0, @ANYBLOB="6401010064010100000000001c000400000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x4000000)
r3 = syz_open_dev$rtc(0x0, 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0xfffffffd, 0x33, 0x1, 0x0, 0x1, 0x117})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/901], 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1d0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @local, 0xffffff00, 0xffffff00, 'tunl0\x00', 'bond0\x00', {0xff}, {}, 0x29, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0xb, [0x37, 0x2d, 0x7, 0x2b, 0x3f, 0xe, 0x37, 0x3c, 0x1f, 0x36, 0x6, 0x4, 0x34, 0x14, 0x3d, 0x7], 0x2, 0x9, 0x204}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d3, 0x4d4], 0x1}}, @common=@addrtype={{0x30}, {0x401, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x4}, {0x0, 0x4, 0x2}, 0x100, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0x0, [0x8, 0x2f, 0x11, 0x0, 0x4, 0x15, 0x27, 0x30, 0x36, 0x25, 0x33, 0x35, 0x0, 0xe, 0x18, 0x3e], 0x1, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

07:41:50 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\xc7[\xc5\xfc}w\xc3-q\xee'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)

07:41:50 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

07:41:50 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

07:41:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5})

[ 1067.964972][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000006c0), 0x0)

07:41:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5})

07:41:50 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

07:41:50 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

07:41:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5})

07:41:50 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\xc7[\xc5\xfc}w\xc3-q\xee'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)

[ 1068.075828][T29804] 8021q: adding VLAN 0 to HW filter on device bond14
07:41:50 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\xc7[\xc5\xfc}w\xc3-q\xee'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)

[ 1068.212708][T29813] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1068.225089][T29813] bond14: (slave bond15): Enslaving as an active interface with an up link
[ 1068.235557][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready
07:41:50 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4)
r1 = socket$inet(0x2, 0x80803, 0x5)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="002b3726b15273b205de50c8c1d152abc1d4038ae168b1c3939f744530a77a11cdbc851c239ff742667aa54218baa7f6be5e3f20098ff429eb4bc83e1253d8f86082a80e954d6fec790c649a3f55d73c6736295e9a0e7aa1e74acb4e0359ee1dd9a8f103817d24d3a0dbdf028fbf534817413cf7e2c447335ca8d853eb308fcddba8e79378107021404dded13e9762cd20ec5b3751e870980680872e759bdb796016bf20a6bfee9ee432bd23c4fe"], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="d9e80127a89901a5ce43be2df15faaaf56b6c0ee24455b988ff1ec328d3bb02fcea0407d9dda7be6aba8b96a5f066c81ee922321873db61b6da8de87b0abd7bbbc34b3f72601b48ab7a22790c32257d102d503b6afb464d06baceaf88f79fe8ccbe16f8f", 0x64}, {&(0x7f00000002c0)="99bde8217d52fec428febec16c0ff9ac839dd78f80d6a7ffbace10fddd5dfada460c399e75d7709ceef568838d6eef911d61dc3eddd13eac2058b4623e9c8e4d76f391e0584712f749004b5149067e008bfb56f8c5707b8a4189439d687a61e5078205dd6ebbd376fc6324da6479c2a9107a2ca683fe4b0153f3c2a5d30296cf51521839ed1e49e7332c9a56be01b371f75100e52ea564774ff9ce29b454bd258ea23e45c49d3f25701548a5810a7bbe167ca6268ebd", 0xb6}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c00080000d742c73fdfe6f800", @ANYRES32=0x0, @ANYBLOB="6401010064010100000000001c000400000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000014000000000000000000000002000000ffffffff00000000e00000000000000000000000070000000044247813ffffffff0000000000000000000000000a010102000000070a01010100000005865100000002060a5d5ac3cd46dadabe0102060e704f38c930f71406d60d6bed011114df646924cfd5a20381891d2d0674070e6f4da03384e7a76eada6901b0104fa580604b6c5000a25ea45bc3898a7ff070f84ac1414aa00000000ac1e010144040b30832777ac1e0001ac14140b7f000001ac14141964010101e0000001e0000001ffffffffe0000001861000000000000a923b28c1b2a5406c860dfffffffc0703910704bed4000000"], 0x138}, 0x4000000)
r3 = syz_open_dev$rtc(0x0, 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0xfffffffd, 0x33, 0x1, 0x0, 0x1, 0x117})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/901], 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1d0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @local, 0xffffff00, 0xffffff00, 'tunl0\x00', 'bond0\x00', {0xff}, {}, 0x29, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0xb, [0x37, 0x2d, 0x7, 0x2b, 0x3f, 0xe, 0x37, 0x3c, 0x1f, 0x36, 0x6, 0x4, 0x34, 0x14, 0x3d, 0x7], 0x2, 0x9, 0x204}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d3, 0x4d4], 0x1}}, @common=@addrtype={{0x30}, {0x401, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x4}, {0x0, 0x4, 0x2}, 0x100, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0x0, [0x8, 0x2f, 0x11, 0x0, 0x4, 0x15, 0x27, 0x30, 0x36, 0x25, 0x33, 0x35, 0x0, 0xe, 0x18, 0x3e], 0x1, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

07:41:50 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1)

07:41:50 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @loopback}, 0x8)

07:41:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000006c0), 0x0)

07:41:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf000, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0)

07:41:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:50 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @loopback}, 0x8)

07:41:50 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1)

[ 1068.489200][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:50 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1)

07:41:50 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @loopback}, 0x8)

07:41:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000006c0), 0x0)

[ 1068.551199][T29837] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1068.562104][T29837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1068.582446][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:41:50 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @loopback}, 0x8)

07:41:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1)

07:41:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)

07:41:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet(0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})

07:41:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4)
r1 = socket$inet(0x2, 0x80803, 0x5)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="002b3726b15273b205de50c8c1d152abc1d4038ae168b1c3939f744530a77a11cdbc851c239ff742667aa54218baa7f6be5e3f20098ff429eb4bc83e1253d8f86082a80e954d6fec790c649a3f55d73c6736295e9a0e7aa1e74acb4e0359ee1dd9a8f103817d24d3a0dbdf028fbf534817413cf7e2c447335ca8d853eb308fcddba8e79378107021404dded13e9762cd20ec5b3751e870980680872e759bdb796016bf20a6bfee9ee432bd23c4fe"], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="d9e80127a89901a5ce43be2df15faaaf56b6c0ee24455b988ff1ec328d3bb02fcea0407d9dda7be6aba8b96a5f066c81ee922321873db61b6da8de87b0abd7bbbc34b3f72601b48ab7a22790c32257d102d503b6afb464d06baceaf88f79fe8ccbe16f8f", 0x64}, {&(0x7f00000002c0)="99bde8217d52fec428febec16c0ff9ac839dd78f80d6a7ffbace10fddd5dfada460c399e75d7709ceef568838d6eef911d61dc3eddd13eac2058b4623e9c8e4d76f391e0584712f749004b5149067e008bfb56f8c5707b8a4189439d687a61e5078205dd6ebbd376fc6324da6479c2a9107a2ca683fe4b0153f3c2a5d30296cf51521839ed1e49e7332c9a56be01b371f75100e52ea564774ff9ce29b454bd258ea23e45c49d3f25701548a5810a7bbe167ca6268ebd", 0xb6}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c00080000d742c73fdfe6f800", @ANYRES32=0x0, @ANYBLOB="6401010064010100000000001c000400000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x4000000)
r3 = syz_open_dev$rtc(0x0, 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0xfffffffd, 0x33, 0x1, 0x0, 0x1, 0x117})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/901], 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1d0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @local, 0xffffff00, 0xffffff00, 'tunl0\x00', 'bond0\x00', {0xff}, {}, 0x29, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0xb, [0x37, 0x2d, 0x7, 0x2b, 0x3f, 0xe, 0x37, 0x3c, 0x1f, 0x36, 0x6, 0x4, 0x34, 0x14, 0x3d, 0x7], 0x2, 0x9, 0x204}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d3, 0x4d4], 0x1}}, @common=@addrtype={{0x30}, {0x401, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x4}, {0x0, 0x4, 0x2}, 0x100, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0x0, [0x8, 0x2f, 0x11, 0x0, 0x4, 0x15, 0x27, 0x30, 0x36, 0x25, 0x33, 0x35, 0x0, 0xe, 0x18, 0x3e], 0x1, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

07:41:51 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:51 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)

07:41:51 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:51 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)

[ 1069.217395][T29868] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1069.236527][T29868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1069.317711][T29875] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1069.346251][T29875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:41:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:51 executing program 5:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)

07:41:51 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

[ 1069.740990][T29898] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1069.749591][T29898] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:41:52 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

07:41:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet(0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})

07:41:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:52 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:52 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/175, 0xaf}], 0x1}}], 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'})

07:41:52 executing program 4:
r0 = syz_io_uring_setup(0x36e3, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r4, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080))
io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x2)

07:41:52 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

07:41:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:41:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0xc1, 0x1ff, 0x20203843, 0x3, [0x80002], [0x800, 0x9]})

07:41:52 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

07:41:52 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

07:41:52 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:41:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0xc1, 0x1ff, 0x20203843, 0x3, [0x80002], [0x800, 0x9]})

[ 1070.026714][T29911] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1070.040466][T29911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1070.107276][T29923] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1070.118960][T29923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
07:41:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b)
r3 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r3, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/58, 0x3a}], 0x4, 0x8000000000000000, 0x0)
preadv(r3, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000018c0)="b9290300000f320f35b9c50200000f324801c266baf80cb82dbd7f8aef66bafc0cec66bad004ee660f3880a4ca570000000f18155e76ccb566baf80cb89a99f680efec66baf80c07caffdd8bef66bafc0c66b8005866ef", 0x57}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1070.289223][ T3693] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1070.337262][T29941] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1070.345765][T29941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1070.650475][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1070.661514][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1070.671345][ T3693] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1070.680825][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.690485][ T3693] usb 1-1: config 0 descriptor??
07:41:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet(0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})

07:41:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0xc1, 0x1ff, 0x20203843, 0x3, [0x80002], [0x800, 0x9]})

07:41:52 executing program 3:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0305302, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:52 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r0, 0x10d, 0x5, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)

07:41:52 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r0, 0x10d, 0x5, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)

07:41:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0xc1, 0x1ff, 0x20203843, 0x3, [0x80002], [0x800, 0x9]})

07:41:53 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r0, 0x10d, 0x5, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)

07:41:53 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r0, 0x10d, 0x5, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)

07:41:53 executing program 3:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0305302, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

[ 1071.182011][ T3693] nti 0003:0757:0A00.003E: unknown main item tag 0x0
[ 1071.190646][ T3693] nti 0003:0757:0A00.003E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0
[ 1071.382599][T12976] usb 1-1: USB disconnect, device number 59
07:41:54 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:41:54 executing program 3:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0305302, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

07:41:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet(0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})

07:41:54 executing program 3:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000400)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x59})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0305302, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4e5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140))
tkill(r0, 0x7)

[ 1072.201330][ T3693] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1072.579216][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1072.590198][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1072.600016][ T3693] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1072.609111][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.618331][ T3693] usb 1-1: config 0 descriptor??
[ 1073.112045][ T3693] nti 0003:0757:0A00.003F: unknown main item tag 0x0
[ 1073.119692][ T3693] nti 0003:0757:0A00.003F: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0
[ 1073.325061][ T3693] usb 1-1: USB disconnect, device number 60
07:41:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1074.119261][ T3693] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1074.479206][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1074.490228][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1074.500131][ T3693] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1074.509382][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.519219][ T3693] usb 1-1: config 0 descriptor??
[ 1075.000379][ T3693] nti 0003:0757:0A00.0040: unknown main item tag 0x0
[ 1075.007790][ T3693] nti 0003:0757:0A00.0040: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0
[ 1075.213929][ T3693] usb 1-1: USB disconnect, device number 61
07:41:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1076.009298][ T3693] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1076.439235][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1076.450244][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1076.460213][ T3693] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1076.469469][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.478706][ T3693] usb 1-1: config 0 descriptor??
[ 1076.960341][ T3693] nti 0003:0757:0A00.0041: unknown main item tag 0x0
[ 1076.967734][ T3693] nti 0003:0757:0A00.0041: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0
[ 1077.173629][ T3693] usb 1-1: USB disconnect, device number 62
07:42:03 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:42:03 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)='f', 0x1}], 0x2}, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="1ccd0df9dfdd"}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0)

07:42:03 executing program 4:
keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0x0, 0x0)

07:42:03 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x801c581f, 0x0)

07:42:03 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xd, 0x0, "7effbd411d8a6998f1f9c3b133232c486fc8f89f32218b85bacf223370e34fab"})

07:42:03 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x801c581f, 0x0)

07:42:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xd, 0x0, "7effbd411d8a6998f1f9c3b133232c486fc8f89f32218b85bacf223370e34fab"})

07:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

[ 1081.137138][T30006] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it!
07:42:03 executing program 4:
keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0x0, 0x0)

07:42:03 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x801c581f, 0x0)

[ 1081.389877][ T3693] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1081.789281][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.800218][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.810510][ T3693] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1081.819613][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.828360][ T3693] usb 3-1: config 0 descriptor??
[ 1082.310178][ T3693] nti 0003:0757:0A00.0042: unknown main item tag 0x0
[ 1082.317598][ T3693] nti 0003:0757:0A00.0042: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0
[ 1082.524206][ T3693] usb 3-1: USB disconnect, device number 75
07:42:05 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:42:05 executing program 4:
keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0x0, 0x0)

07:42:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xd, 0x0, "7effbd411d8a6998f1f9c3b133232c486fc8f89f32218b85bacf223370e34fab"})

07:42:05 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x801c581f, 0x0)

07:42:05 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:05 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:05 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:05 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xd, 0x0, "7effbd411d8a6998f1f9c3b133232c486fc8f89f32218b85bacf223370e34fab"})

07:42:05 executing program 4:
keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0x0, 0x0)

07:42:05 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:05 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:05 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

[ 1083.349470][ T3693] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1083.779176][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1083.838204][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1083.915715][ T3693] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[ 1083.983147][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.030617][ T3693] usb 3-1: config 0 descriptor??
[ 1084.539970][ T3693] nti 0003:0757:0A00.0043: unknown main item tag 0x0
[ 1084.547445][ T3693] nti 0003:0757:0A00.0043: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0
[ 1084.752251][ T3693] usb 3-1: USB disconnect, device number 76
07:42:07 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x757, 0xa00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:42:07 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:07 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:07 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:07 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:07 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:07 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:07 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:07 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

[ 1085.589257][ T3693] usb 3-1: new high-speed USB device number 77 using dummy_hcd
07:42:08 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

07:42:08 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

[ 1085.959518][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1086.013170][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1086.064896][ T3693] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
07:42:08 executing program 0:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

[ 1086.130403][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.165409][ T3693] usb 3-1: config 0 descriptor??
[ 1086.680311][ T3693] nti 0003:0757:0A00.0044: unknown main item tag 0x0
[ 1086.687699][ T3693] nti 0003:0757:0A00.0044: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0
[ 1086.891850][ T3693] usb 3-1: USB disconnect, device number 77
07:42:09 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:09 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:09 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:09 executing program 0:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:09 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800)
ioctl$int_in(r2, 0x5421, 0x0)
creat(0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "e13e52d714316376f9df354cc92a2ce22890166a8a4da52eb0215b53aeff3b8221e78f21c676b5badd3700ac1e7c335d9358ad561a73653bd4352c49d3376f908933d00a69913f321811c30bd6cad71925f8024203da21fae3f4a5abd8157667a5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0xff)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000b1170900757ce6eea91d918cc7c4e76f11", @ANYBLOB="ffff00002f0000002e2f66696c653000"])
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff3000/0x4000)=nil)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)

07:42:09 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:10 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:10 executing program 0:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:10 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:10 executing program 0:
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9b1a, 0x2)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x2000039f}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(0xffffffffffffffff, r2, 0x0)

07:42:10 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f0000000e00)="6c5a81")

07:42:10 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x82, 0x83, 0x40, 0x5ac, 0x224, 0xd311, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0xb00ab0843a2015ee, 0x200}}]}}]}}]}}, 0x0)

07:42:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:10 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

[ 1088.639108][ T3693] usb 6-1: new high-speed USB device number 69 using dummy_hcd
07:42:10 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x7}, 0x0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup3(r2, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x9, 0x7}, 0x10}, 0x80)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000001700))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
dup3(0xffffffffffffffff, r2, 0x80000)

07:42:10 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:11 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

07:42:11 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

07:42:11 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffd, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040))

[ 1088.779135][  T147] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1088.919188][ T3693] usb 6-1: Using ep0 maxpacket: 8
[ 1089.039236][ T3693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1089.131561][ T3693] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1089.140686][ T3693] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1089.148696][ T3693] usb 6-1: Manufacturer: syz
[ 1089.149312][  T147] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1089.159730][ T3693] usb 6-1: config 0 descriptor??
[ 1089.319190][  T147] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=d3.11
[ 1089.328241][  T147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.336619][  T147] usb 3-1: Product: syz
[ 1089.341065][  T147] usb 3-1: Manufacturer: syz
[ 1089.345769][  T147] usb 3-1: SerialNumber: syz
[ 1089.353240][  T147] usb 3-1: config 0 descriptor??
[ 1089.390810][  T147] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input150
[ 1089.409164][    C0] usb 6-1: OVERFLOW with data length 2, actual length is 2
[ 1089.499182][ T3693] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[ 1089.507646][ T3693] appledisplay: probe of 6-1:0.0 failed with error -110
[ 1089.599132][ T2955] bcm5974 3-1:0.0: could not read from device
[ 1089.604775][ T3693] usb 6-1: USB disconnect, device number 69
[ 1089.623562][  T147] usb 3-1: USB disconnect, device number 78
[ 1089.632829][ T2955] bcm5974 3-1:0.0: could not read from device
07:42:12 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0xa, 0x204e0000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9effff39}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0)

07:42:12 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

07:42:12 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

07:42:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x7}, 0x0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup3(r2, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x9, 0x7}, 0x10}, 0x80)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000001700))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
dup3(0xffffffffffffffff, r2, 0x80000)

07:42:12 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x82, 0x83, 0x40, 0x5ac, 0x224, 0xd311, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0xb00ab0843a2015ee, 0x200}}]}}]}}]}}, 0x0)

07:42:12 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f0000000e00)="6c5a81")

07:42:12 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0xa, 0x204e0000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9effff39}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0)

07:42:12 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0xa, 0x204e0000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9effff39}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0)

07:42:12 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0xa, 0x204e0000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9effff39}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0)

07:42:12 executing program 0:
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x541b, 0x0)
syz_clone(0x40006000, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)="0242334693f0220a018eb08db1493082c7e5e6475b6012fb90c28b71dcaa61c6194088b4ef0a2408a36fe320b81cb43ed1bec607f6e0f8d593d833937f7a3823b3f570ee9da909c9b4a2a1018e3ece64f962478f7302022903fa8e83531ba34d201fd134af81eae3c974f21b512ab017d4bf8c5dc69df0272433729bb9ce0917866ec7736ba1a2f395a4ab99e29b1c540c2de24651dbc1b1eeb4e67b9467b56a872c")

07:42:12 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

[ 1090.399114][T12976] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1090.539186][ T3697] usb 6-1: new high-speed USB device number 70 using dummy_hcd
07:42:12 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, &(0x7f00000000c0)={'wg2\x00'})

07:42:12 executing program 0:
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x541b, 0x0)
syz_clone(0x40006000, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)="0242334693f0220a018eb08db1493082c7e5e6475b6012fb90c28b71dcaa61c6194088b4ef0a2408a36fe320b81cb43ed1bec607f6e0f8d593d833937f7a3823b3f570ee9da909c9b4a2a1018e3ece64f962478f7302022903fa8e83531ba34d201fd134af81eae3c974f21b512ab017d4bf8c5dc69df0272433729bb9ce0917866ec7736ba1a2f395a4ab99e29b1c540c2de24651dbc1b1eeb4e67b9467b56a872c")

[ 1090.769144][T12976] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1090.819698][ T3697] usb 6-1: Using ep0 maxpacket: 8
[ 1090.949152][T12976] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=d3.11
[ 1090.967477][T12976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.971159][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1090.975640][T12976] usb 3-1: Product: syz
[ 1090.990656][T12976] usb 3-1: Manufacturer: syz
[ 1090.995327][T12976] usb 3-1: SerialNumber: syz
[ 1091.034965][T12976] usb 3-1: config 0 descriptor??
[ 1091.091745][T12976] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input151
[ 1091.129285][ T3697] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
07:42:13 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

07:42:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, &(0x7f00000000c0)={'wg2\x00'})

07:42:13 executing program 0:
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x541b, 0x0)
syz_clone(0x40006000, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)="0242334693f0220a018eb08db1493082c7e5e6475b6012fb90c28b71dcaa61c6194088b4ef0a2408a36fe320b81cb43ed1bec607f6e0f8d593d833937f7a3823b3f570ee9da909c9b4a2a1018e3ece64f962478f7302022903fa8e83531ba34d201fd134af81eae3c974f21b512ab017d4bf8c5dc69df0272433729bb9ce0917866ec7736ba1a2f395a4ab99e29b1c540c2de24651dbc1b1eeb4e67b9467b56a872c")

[ 1091.142018][ T3697] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1091.157268][ T3697] usb 6-1: Manufacturer: syz
[ 1091.163010][ T3697] usb 6-1: config 0 descriptor??
[ 1091.309117][ T2955] bcm5974 3-1:0.0: could not read from device
[ 1091.340962][T12976] usb 3-1: USB disconnect, device number 79
[ 1091.368210][T30145] bcm5974 3-1:0.0: could not read from device
[ 1091.419134][    C0] usb 6-1: OVERFLOW with data length 2, actual length is 2
[ 1091.499768][ T3697] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[ 1091.520436][ T3697] appledisplay: probe of 6-1:0.0 failed with error -110
[ 1091.640653][ T3697] usb 6-1: USB disconnect, device number 70
07:42:14 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x82, 0x83, 0x40, 0x5ac, 0x224, 0xd311, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0xb00ab0843a2015ee, 0x200}}]}}]}}]}}, 0x0)

07:42:14 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f0000000e00)="6c5a81")

07:42:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x7}, 0x0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup3(r2, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x9, 0x7}, 0x10}, 0x80)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000001700))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
dup3(0xffffffffffffffff, r2, 0x80000)

07:42:14 executing program 0:
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x541b, 0x0)
syz_clone(0x40006000, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)="0242334693f0220a018eb08db1493082c7e5e6475b6012fb90c28b71dcaa61c6194088b4ef0a2408a36fe320b81cb43ed1bec607f6e0f8d593d833937f7a3823b3f570ee9da909c9b4a2a1018e3ece64f962478f7302022903fa8e83531ba34d201fd134af81eae3c974f21b512ab017d4bf8c5dc69df0272433729bb9ce0917866ec7736ba1a2f395a4ab99e29b1c540c2de24651dbc1b1eeb4e67b9467b56a872c")

07:42:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, &(0x7f00000000c0)={'wg2\x00'})

07:42:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x100048)

07:42:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, &(0x7f00000000c0)={'wg2\x00'})

[ 1092.149877][T12976] usb 3-1: new high-speed USB device number 80 using dummy_hcd
07:42:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x550, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100})

07:42:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x550, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100})

07:42:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x550, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100})

[ 1092.459200][ T3693] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1092.509795][T12976] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
07:42:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}})

07:42:14 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x1, 0x1000, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000580), 0x400, r0}, 0x38)

[ 1092.669273][T12976] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=d3.11
[ 1092.684018][T12976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.709051][ T3693] usb 6-1: Using ep0 maxpacket: 8
[ 1092.714292][T12976] usb 3-1: Product: syz
[ 1092.724727][T12976] usb 3-1: Manufacturer: syz
[ 1092.735030][T12976] usb 3-1: SerialNumber: syz
[ 1092.757854][T12976] usb 3-1: config 0 descriptor??
[ 1092.801300][T12976] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input152
[ 1092.839265][ T3693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1092.959347][ T3693] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1092.977484][ T3693] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1093.006648][ T3693] usb 6-1: Manufacturer: syz
[ 1093.009437][ T2955] bcm5974 3-1:0.0: could not read from device
[ 1093.022351][T12976] usb 3-1: USB disconnect, device number 80
[ 1093.025817][ T3693] usb 6-1: config 0 descriptor??
[ 1093.309124][    C0] usb 6-1: OVERFLOW with data length 2, actual length is 2
[ 1093.369195][ T3693] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[ 1093.378398][ T3693] appledisplay: probe of 6-1:0.0 failed with error -110
07:42:15 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x82, 0x83, 0x40, 0x5ac, 0x224, 0xd311, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0xb00ab0843a2015ee, 0x200}}]}}]}}]}}, 0x0)

[ 1093.509789][ T3693] usb 6-1: USB disconnect, device number 71
[ 1093.829094][ T3695] usb 3-1: new high-speed USB device number 81 using dummy_hcd
07:42:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b40"], 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f0000000e00)="6c5a81")

07:42:16 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x550, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100})

07:42:16 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x1, 0x1000, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000580), 0x400, r0}, 0x38)

07:42:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x7}, 0x0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup3(r2, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x9, 0x7}, 0x10}, 0x80)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000001700))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
dup3(0xffffffffffffffff, r2, 0x80000)

07:42:16 executing program 3:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="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", 0x1000)

07:42:16 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x1, 0x1000, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000580), 0x400, r0}, 0x38)

07:42:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0)

07:42:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0)

[ 1094.143866][T30245] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1094.178706][T30249] openvswitch: netlink: Missing key (keys=40, expected=100)
07:42:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0)

07:42:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0)

07:42:16 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x1, 0x1000, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000580), 0x400, r0}, 0x38)

[ 1094.189798][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1094.233008][T30252] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1094.288876][T30256] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1094.340818][ T3693] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1094.369296][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=d3.11
[ 1094.388099][ T3695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.408276][ T3695] usb 3-1: Product: syz
[ 1094.417116][ T3695] usb 3-1: Manufacturer: syz
[ 1094.434994][ T3695] usb 3-1: SerialNumber: syz
[ 1094.445688][ T3695] usb 3-1: config 0 descriptor??
[ 1094.491306][ T3695] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input153
[ 1094.621248][ T3693] usb 6-1: Using ep0 maxpacket: 8
[ 1094.719153][ T2955] bcm5974 3-1:0.0: could not read from device
[ 1094.729279][ T3695] usb 3-1: USB disconnect, device number 81
[ 1094.749416][ T2955] bcm5974 3-1:0.0: could not read from device
[ 1094.779343][ T3693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.869292][ T3693] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1094.878452][ T3693] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1094.886648][ T3693] usb 6-1: Manufacturer: syz
[ 1094.894541][ T3693] usb 6-1: config 0 descriptor??
07:42:17 executing program 3:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="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", 0x1000)

[ 1095.179125][    C0] usb 6-1: OVERFLOW with data length 2, actual length is 2
[ 1095.239205][ T3693] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[ 1095.253901][ T3693] appledisplay: probe of 6-1:0.0 failed with error -110
[ 1095.383323][ T3693] usb 6-1: USB disconnect, device number 72
07:42:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x2, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x74}}, 0x0)

07:42:18 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x1})

07:42:18 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

07:42:18 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="6c5959d840af1619bf24320217fb4f71c8d4727fc49aa7fa724274724aacdc4dca6c8a9370632b8238d48b544198484a35f6a8179b0557dd118141948a0d8f31b14c92a5dc936e51da5c73265425117f70cdb372d37274b2ef5cd60f40efa17fd43629790ec0cd397576f3c2257a0ae11e0bb2ed43592d1c530810f9e9d5af8f5030d2ad2581a1357547a70c001718d93f505bffd992fec9ebde7d79f70dc5b05391e64e49a5a80460b96f37d087b04bb3fc5d7ee94962ffc3f489420639b69485b18cc7f598d8a10bdb6ca92eeae8b88c70615bea41880820e622c17c88bbb069b45e96565e2a254e6cfe19efc3cca8ced007cef9f32a44a59df8dc3cf315ebf812ef0226c678948e11c4038a96832a8edfc16284c184ff4c9fdc2cc14af3a51285af0cf6626b8e559a82316483779dfdcee71ad64ded64588cd2d39f3f62941722ecf5f594d2da010af4779b943ba742de146661d9f90c081d7b7f242654db300a519bd7032883a990af03230e9cbb181305dd12a464756582c54420fedd952a9ca6bc0a6ce1488589d7384b2550d638c8d2a1aeba337af8cb4d6b80b1e9b46e3d8f8b5edacebfd95098aceb474f76b25610ab559501bbf799e3f1eef06a080e9eecbf8f4a645c971568cccf9e380edb91a73d11f6a1759bc1d110ff68dfb60eea34098109d8a0ea7a5d90d093cde0ae309a60a01b1ffafd8cbb58faeaeb7a4893011ed3efaaa65157e28077cb73ff35c87b054c12cf1bc58ee34b6bc2d75e615e2c3427cf3441ee3696cb8e7564b83752a556b610952a4fe83d48adee74d24f226eeb28e0e3105eea366b5608bdb1b5d602896ebeb660e0bab490e976fba7009cb7541678f2b8313a20937b73971cb0a28a15367ffd9ac61d03f9af005c6727a3a776403e269c4af0d707dc6949138bd3b341c1614af2c9c61d6145db570123cb6eaf341c0c0ed76bf2a1919130598121b062fed38dbd1cb05fd89c8cc624acdcd01e6b23ce7632ea5c086cf8d18813c18b2f19bd67b765a80e51a27e2e883ead3eccbeb22b16bc42cdd12817411f076aea0d9c80d2c47f68f4559d96432072947ee405492080b36cc48ce0aa359f77a611eb6735ee6d9bdb9ae8ba2d5ff9b0c28f709e24b4daf731371235547a63cec2b91676afd8542811f712544a25ce6d95e9fbb5e036e4974e012c0c799742a357f067de532489ad56c6725f6cf4b6c3a4d92850e7524472a4be3e266ca08987c2fe3b169b783e570e67e1dd6f19a9a260ae8077a20e5335484f677c269d59350ebd7ec32ea27e291cc376473efd603578c8a8d5933c4cfdbe3db9f6808299e03731cf882e29142c52eb17c7e66d6063d2bd88662656364ecbb383e73947de37b2b9e2c2cf9933f9f72e7d07498efc25b97d959cfa05ec403ce15977f3546751114fed87f12d24e20aae4d8311cbb05d96f548e86a3fac141715df9dec0df677823fd4790704171a975eb27c4ab3443d6366a136cb92868203a76987f33c3b8a58ffa1674099509bc842367a150b894e03cc3b1f4e4fc3cf85a1c8a6212ad3ff07f58916d4da337053a7fb16f8f4dfd5a475c35788fa76e08fd73e3ed36b2a7e3eaa253b1f0318d256ef2901feca02e8b3f6250b4adc6775eed9f557422850fc47b765910dcd5e3b7391fd56f1f9ec7ba4fae65ea73e01685f88197f05efb337370136678cf41d06b14e262ff2288335978c47487be75a4e4ce5668a5f021e03ede8f30763c11c5451c5628343a06f81df28f920e96be324d0ff0be6515c1ad0d8fb3ff7e7edcfb35e9e2735cef47832c0c0840a9300048fd4ab3fdfb36a4dd10df9f41b75275c5c74f0b16c6310bad248a1abf7487d3702769fcaab4ed3c605c8937f5f9d82f72f91544ae7b57c7ae8c924bd5492575693699a6a4ebc3412f4381168bbf212cf2bc4db3e5eea429d687debfbd236548ea035df87a64b976c86e790dcf846f695517a78926c9ecc1cec0eaf494af0f9fa490a68257d7b6299c4a2ca6cd4e49f05786c012d3f7c1195e5e5436c45c7f164ac3d9f9e76ee339c446c0cd83a8330eb582fd2e78574bbb3571060511ebad066c2c5f07593d07cb04534d3a2e3c0b93f69b52ec3d5a309a57fb26e609516b6f765a3b94289219dd67e3f5dec28c36894ffe7474649e4b191929881d1d23433ea8df11794a8b768d5b0648f48b233a72c577bec73254d14ce208e955f1a72ac76270ff8d8ebb442486c8c2b637a907c762e30f4a714394af880835e3079648ac33410ebcc3d3c1cce8c38b7acaf81b63a6041b71d7b196c91a8e981f9d3fb9e27e741a3782b6be1ba20a8526402d74d6f25fee75cd25990d4d0ec89c6a88bcc7998f9e40085a8d95774ecaf1689e44095c28c41e33a8805b09d91ddeabb24a76e8b1a35a74f6a50109cdb6e594120fb62b75439b6966bce0941b92f636134fa117b2f6d10baf19e3af202369c7021d2a3bcb1eef1735dd264633c5adfedc0272f2d42ab8506fdf405ed3617ff6e6274f26af7a01033830e197a7825bb9466c4d1f48801c74b3997e9c994cfe95dc7513a9cdc174787d03b9e6c3cacd8c3998ef6783de176d3286b18bc09829dc3db8f00c7ec727b1c8b23c42795864c4ce674a0472e3cdaf971541ad17bc3561766343d21d237209a32b54f8e4cbcc13fb086460e0c8196d1e6663e9fa2dd9d6ffb57fa9cd8f310dc3c25b403c15349ad800e50e6c5c992aaa520959d636be8642b82fc0aed44ccb50223c12099aa03a9e13bd3fe5cf68fa06e9bf9e8aefa99dccef4d232665994929108b98e88d7419095ae9b9797dce0012dd754f1d29628a958c94b8bf4c1d9ae870d8a48a24c808c691b1cad25d76c6dd5f797062ea92ec38cc5a09b2e70ea021793d9ea30a25dc660c7212f099617fe671f528586515f3fc4521c00c66f873b07edeffa29e5eda32d2d13ff8d51ab18038181d240de8f987dd8f8aca700b71adcceeaca2a6917b379d3f5a4812efc9db962a2048482ae0fb57a73878e7486bfab03e6b3524c958a4b51c12e3967dfd7030765b31e956ff5e6dcddc1fa80a7e4e6b486cd3502f80f1c717f0994b0dec41f8492402e25cdda29f63d80da6dddccf59ea019fc93e54deeeeb70cf5ba8108d2d0affad8455a85601b9c14b67971a90d0043e369a8cd957af5db14d6df85ff734b2861e0edda19de05d4997ff3ae3a9202a7407b983eb376d1624570f4478187de8177f7b8d665ccffdda8ef0911f573859428e41865536afb50bad1d5bf5552282fb5598ae37dc1c27f7568c02c83cd70610cb5eab39339d5ce4c6ed72a78d941dff230c5560f75d1eac5ee7fc409ea67e5bd2c1fcb4fbfac063a572c06b50ee1bb21e229d87a286b3ded4491617fabd3dc1a2a401614d4866ffb8855c0bf5794cd7b833ba95ddb85ed9e4681eeb013a174a15ff6590884dd551aa37153cf4ffe708f4fd2c5d49f1d396c7c10cc69e8e4ac28c67b72b34ec93d6cbdb5664f20106f1cdc52ab4c812b108a441554b3bd215efcb699840a0ba62aa8954c4b580f4ba0e6c10618c9ed7492b307e6bbc125274feab42a9a5a282eeb9962129d545a28a00bac63fc693672db4f893caa49a549ff1a21fb62b7a09ffd3a9e7eaa80906c6e42227df433473d2eb6146568515d0bb6b88d9a1a792b5c5a165149c25a5a216133a2de940b5d8561c20e4785b1856489813fb151c02a927e109c5aed9a00826e13675be258145f4834ab422e1e48e8ccebc43ff03842499b47835c90c99ffe59636c897fda67f186356b0f90c7ac468ef76170dfd78aef857aeff199f1319474b47fee8ed7e17c89fc1a5a8c2f9e3ac99bf967863fa794c1ba9b78ad86cc8ae831aa748b272ec250cce04374115307c3c26872dcf69d435a4af124ed58bb22d47d92268f6be7e86725283c31310c9619d5e8b916343a6c7d2664e5abdb46b8677d0f8205c35166aec50640df92f3fa419c9f91b1ea58ed7fd1090b447d195443d75f7b81c2d23db3b3b41027b781d44fd8ebf0126e29235105959965db9d866d97a568b4f87efff6da0a0083545c0262dccce1910adcbfcad1b755c90d9006db813a15161ebf083a6e1aad50602094aa522bccaf4d54641a1a0a6a978146789e2576a8bdb2fbc1bf0407afdf5d39000a0f4e1f1db8b0353ef40d96886a088c39bfbcb77f55a875b473f9b4fa84591652a0d44b3d4e84e7b7e029210f9b11595bacc5d2e2aeaae481064cfdf75959a8a51271c08960ad9ebed922a003cba5208346fe12cfb87c8be1a0cbe0d401f92fc43373eb2e13483c020a967b0c802f7d2668a8ad8db65273d9fa36304f93bff2e02ef98236548c8fd26c7a6d9000a362161eee4add32166877c4e75ebf029e7851fa71e4868c68fde54900ff68370321ba10df03b900e2bbd758ec515b8a03ec7021c140c2dc266a9959eda854dd7cfc0e0f40c84ac87db80f540e629e6e568f21fd7c9ccdb7bdbd42d8edc42de0cd8fd7cdd01ffff78a831b2f7f72bcf48dfc302cc09021e80e56d8114dc90a397f9b34acede22b7b3d12f84c3c93480dce920d78700e78aae7278650cee74ffb06c72ab9fcb7a452aecd1c6223583f5884dd4520ebb50b24f8462c0562dcc69757b30c119cf19bf15134d42ae9b368af123417e4b7deea5aa70105d19164d206956de4442202c31090d1391d6523abaabbf91920d02eec344a132e7472e4b71b1ea8248aa384a96416dd5bb2afef7ee30766257f91cb417b7670b269e8d5b67b2573f5e320004f6d75d0220e86313075ce1cf6a3caf638f46d60e23b3e972da1436b6a80a3c7031443d52fa099cc3a47d8bd99ada0f2b3a3b5fd8a196053dfb8c39a668179fd5e9ff57171f6e9157caeb51c67c3bde38e291adb88b1c8e44e597bfa94d6947488a0e80531e212d01d673ce278008e7fed083a08e4afa206a0d814aa13478d872c37b22196a0fe1e476f90b01a5586ab04f8b6c9e726cdbad985d02303bbc8a86707e5b84a33b5413a009861c25a31baa94c269029e1c1711d713c4cf3d49b373393d05b75ff868ce82c1de80eb98f605147f847b2633f75bfbc0416a5def2b2dc9719cc1a7a726a3d11c4c3bb964b2de45703d5b77e53b2bb24038bad24926184bd0658107d4abdd6b0abeaa769cf4f1497aa78dbb98a93b260f3f4859f5158ac8a68465a186c8e2bec9423996303d91b90a31541aa0d29ccdeaaefdc88f87e24ca0b2dc171781f557d311495d765ff8ac79cdaba71f6524c7fd0702d46c676e371e4f2347403236f5145eb1b55165751af0b825e1e8a67ae99644af1b9c9d9476bc14a5df2114174f76736a78fe45b3feaf5f5fa83642cff14fe677dea7586a38e7cd2f8669989af6782014fc34bea91765dbdc997fdbf7bba9bcc0eb03d5c35e75e1fdc6574097fec034ac464e314e11abb56ac44e6d587eef448a20a7034b2ff1415a9d5bb7ecd439a49379194fed7d5dd46d27c57380194c4d0d45787e61e368bd7ffa031bc62ce591a6f64027cbc2bbf0c29a2e21cc46b1d8f2ec96b9260a468e49541dc363e6d590c1456cd3e8cf79e96bbcdfd23a94995b8ae3de7ac3e326effc8f0998b0dd444d06f6e5339f99b3abe96a9462f9a7bf126f7b6d7b46d0098bfe941a326c71a9cc713f83cfe6b50d1c72d730c30c5b2bdaf6cbf1d1a6b94843a22f8eac5af8657fdf892ab7d7cfc684b64bd45f1f93892ceb7218d43fa345b66ece498e0dbb431662b3bce04afbe6a0483c14be7e22a6116d7e438d48b7a7c8f9fdc681a26b79c14cd", 0x1000)

07:42:18 executing program 3:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="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", 0x1000)

07:42:18 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x1})

07:42:18 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf8, 0x2, 0xdf, 0x10, 0x7fd, 0x1, 0xc4cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x7b, 0x3c}}]}}]}}, 0x0)

07:42:18 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

07:42:18 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x1})

[ 1095.912324][T30265] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1095.923522][T30266] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:42:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x2, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x74}}, 0x0)

07:42:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x2, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x74}}, 0x0)

07:42:18 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x1})

07:42:18 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

[ 1095.970067][T30274] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1095.987021][T30276] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:42:18 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:18 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

[ 1096.035725][T30283] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1096.046001][T30284] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[ 1096.067921][T30288] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1096.219150][ T3697] usb 6-1: new high-speed USB device number 73 using dummy_hcd
07:42:18 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="6c5959d840af1619bf24320217fb4f71c8d4727fc49aa7fa724274724aacdc4dca6c8a9370632b8238d48b544198484a35f6a8179b0557dd118141948a0d8f31b14c92a5dc936e51da5c73265425117f70cdb372d37274b2ef5cd60f40efa17fd43629790ec0cd397576f3c2257a0ae11e0bb2ed43592d1c530810f9e9d5af8f5030d2ad2581a1357547a70c001718d93f505bffd992fec9ebde7d79f70dc5b05391e64e49a5a80460b96f37d087b04bb3fc5d7ee94962ffc3f489420639b69485b18cc7f598d8a10bdb6ca92eeae8b88c70615bea41880820e622c17c88bbb069b45e96565e2a254e6cfe19efc3cca8ced007cef9f32a44a59df8dc3cf315ebf812ef0226c678948e11c4038a96832a8edfc16284c184ff4c9fdc2cc14af3a51285af0cf6626b8e559a82316483779dfdcee71ad64ded64588cd2d39f3f62941722ecf5f594d2da010af4779b943ba742de146661d9f90c081d7b7f242654db300a519bd7032883a990af03230e9cbb181305dd12a464756582c54420fedd952a9ca6bc0a6ce1488589d7384b2550d638c8d2a1aeba337af8cb4d6b80b1e9b46e3d8f8b5edacebfd95098aceb474f76b25610ab559501bbf799e3f1eef06a080e9eecbf8f4a645c971568cccf9e380edb91a73d11f6a1759bc1d110ff68dfb60eea34098109d8a0ea7a5d90d093cde0ae309a60a01b1ffafd8cbb58faeaeb7a4893011ed3efaaa65157e28077cb73ff35c87b054c12cf1bc58ee34b6bc2d75e615e2c3427cf3441ee3696cb8e7564b83752a556b610952a4fe83d48adee74d24f226eeb28e0e3105eea366b5608bdb1b5d602896ebeb660e0bab490e976fba7009cb7541678f2b8313a20937b73971cb0a28a15367ffd9ac61d03f9af005c6727a3a776403e269c4af0d707dc6949138bd3b341c1614af2c9c61d6145db570123cb6eaf341c0c0ed76bf2a1919130598121b062fed38dbd1cb05fd89c8cc624acdcd01e6b23ce7632ea5c086cf8d18813c18b2f19bd67b765a80e51a27e2e883ead3eccbeb22b16bc42cdd12817411f076aea0d9c80d2c47f68f4559d96432072947ee405492080b36cc48ce0aa359f77a611eb6735ee6d9bdb9ae8ba2d5ff9b0c28f709e24b4daf731371235547a63cec2b91676afd8542811f712544a25ce6d95e9fbb5e036e4974e012c0c799742a357f067de532489ad56c6725f6cf4b6c3a4d92850e7524472a4be3e266ca08987c2fe3b169b783e570e67e1dd6f19a9a260ae8077a20e5335484f677c269d59350ebd7ec32ea27e291cc376473efd603578c8a8d5933c4cfdbe3db9f6808299e03731cf882e29142c52eb17c7e66d6063d2bd88662656364ecbb383e73947de37b2b9e2c2cf9933f9f72e7d07498efc25b97d959cfa05ec403ce15977f3546751114fed87f12d24e20aae4d8311cbb05d96f548e86a3fac141715df9dec0df677823fd4790704171a975eb27c4ab3443d6366a136cb92868203a76987f33c3b8a58ffa1674099509bc842367a150b894e03cc3b1f4e4fc3cf85a1c8a6212ad3ff07f58916d4da337053a7fb16f8f4dfd5a475c35788fa76e08fd73e3ed36b2a7e3eaa253b1f0318d256ef2901feca02e8b3f6250b4adc6775eed9f557422850fc47b765910dcd5e3b7391fd56f1f9ec7ba4fae65ea73e01685f88197f05efb337370136678cf41d06b14e262ff2288335978c47487be75a4e4ce5668a5f021e03ede8f30763c11c5451c5628343a06f81df28f920e96be324d0ff0be6515c1ad0d8fb3ff7e7edcfb35e9e2735cef47832c0c0840a9300048fd4ab3fdfb36a4dd10df9f41b75275c5c74f0b16c6310bad248a1abf7487d3702769fcaab4ed3c605c8937f5f9d82f72f91544ae7b57c7ae8c924bd5492575693699a6a4ebc3412f4381168bbf212cf2bc4db3e5eea429d687debfbd236548ea035df87a64b976c86e790dcf846f695517a78926c9ecc1cec0eaf494af0f9fa490a68257d7b6299c4a2ca6cd4e49f05786c012d3f7c1195e5e5436c45c7f164ac3d9f9e76ee339c446c0cd83a8330eb582fd2e78574bbb3571060511ebad066c2c5f07593d07cb04534d3a2e3c0b93f69b52ec3d5a309a57fb26e609516b6f765a3b94289219dd67e3f5dec28c36894ffe7474649e4b191929881d1d23433ea8df11794a8b768d5b0648f48b233a72c577bec73254d14ce208e955f1a72ac76270ff8d8ebb442486c8c2b637a907c762e30f4a714394af880835e3079648ac33410ebcc3d3c1cce8c38b7acaf81b63a6041b71d7b196c91a8e981f9d3fb9e27e741a3782b6be1ba20a8526402d74d6f25fee75cd25990d4d0ec89c6a88bcc7998f9e40085a8d95774ecaf1689e44095c28c41e33a8805b09d91ddeabb24a76e8b1a35a74f6a50109cdb6e594120fb62b75439b6966bce0941b92f636134fa117b2f6d10baf19e3af202369c7021d2a3bcb1eef1735dd264633c5adfedc0272f2d42ab8506fdf405ed3617ff6e6274f26af7a01033830e197a7825bb9466c4d1f48801c74b3997e9c994cfe95dc7513a9cdc174787d03b9e6c3cacd8c3998ef6783de176d3286b18bc09829dc3db8f00c7ec727b1c8b23c42795864c4ce674a0472e3cdaf971541ad17bc3561766343d21d237209a32b54f8e4cbcc13fb086460e0c8196d1e6663e9fa2dd9d6ffb57fa9cd8f310dc3c25b403c15349ad800e50e6c5c992aaa520959d636be8642b82fc0aed44ccb50223c12099aa03a9e13bd3fe5cf68fa06e9bf9e8aefa99dccef4d232665994929108b98e88d7419095ae9b9797dce0012dd754f1d29628a958c94b8bf4c1d9ae870d8a48a24c808c691b1cad25d76c6dd5f797062ea92ec38cc5a09b2e70ea021793d9ea30a25dc660c7212f099617fe671f528586515f3fc4521c00c66f873b07edeffa29e5eda32d2d13ff8d51ab18038181d240de8f987dd8f8aca700b71adcceeaca2a6917b379d3f5a4812efc9db962a2048482ae0fb57a73878e7486bfab03e6b3524c958a4b51c12e3967dfd7030765b31e956ff5e6dcddc1fa80a7e4e6b486cd3502f80f1c717f0994b0dec41f8492402e25cdda29f63d80da6dddccf59ea019fc93e54deeeeb70cf5ba8108d2d0affad8455a85601b9c14b67971a90d0043e369a8cd957af5db14d6df85ff734b2861e0edda19de05d4997ff3ae3a9202a7407b983eb376d1624570f4478187de8177f7b8d665ccffdda8ef0911f573859428e41865536afb50bad1d5bf5552282fb5598ae37dc1c27f7568c02c83cd70610cb5eab39339d5ce4c6ed72a78d941dff230c5560f75d1eac5ee7fc409ea67e5bd2c1fcb4fbfac063a572c06b50ee1bb21e229d87a286b3ded4491617fabd3dc1a2a401614d4866ffb8855c0bf5794cd7b833ba95ddb85ed9e4681eeb013a174a15ff6590884dd551aa37153cf4ffe708f4fd2c5d49f1d396c7c10cc69e8e4ac28c67b72b34ec93d6cbdb5664f20106f1cdc52ab4c812b108a441554b3bd215efcb699840a0ba62aa8954c4b580f4ba0e6c10618c9ed7492b307e6bbc125274feab42a9a5a282eeb9962129d545a28a00bac63fc693672db4f893caa49a549ff1a21fb62b7a09ffd3a9e7eaa80906c6e42227df433473d2eb6146568515d0bb6b88d9a1a792b5c5a165149c25a5a216133a2de940b5d8561c20e4785b1856489813fb151c02a927e109c5aed9a00826e13675be258145f4834ab422e1e48e8ccebc43ff03842499b47835c90c99ffe59636c897fda67f186356b0f90c7ac468ef76170dfd78aef857aeff199f1319474b47fee8ed7e17c89fc1a5a8c2f9e3ac99bf967863fa794c1ba9b78ad86cc8ae831aa748b272ec250cce04374115307c3c26872dcf69d435a4af124ed58bb22d47d92268f6be7e86725283c31310c9619d5e8b916343a6c7d2664e5abdb46b8677d0f8205c35166aec50640df92f3fa419c9f91b1ea58ed7fd1090b447d195443d75f7b81c2d23db3b3b41027b781d44fd8ebf0126e29235105959965db9d866d97a568b4f87efff6da0a0083545c0262dccce1910adcbfcad1b755c90d9006db813a15161ebf083a6e1aad50602094aa522bccaf4d54641a1a0a6a978146789e2576a8bdb2fbc1bf0407afdf5d39000a0f4e1f1db8b0353ef40d96886a088c39bfbcb77f55a875b473f9b4fa84591652a0d44b3d4e84e7b7e029210f9b11595bacc5d2e2aeaae481064cfdf75959a8a51271c08960ad9ebed922a003cba5208346fe12cfb87c8be1a0cbe0d401f92fc43373eb2e13483c020a967b0c802f7d2668a8ad8db65273d9fa36304f93bff2e02ef98236548c8fd26c7a6d9000a362161eee4add32166877c4e75ebf029e7851fa71e4868c68fde54900ff68370321ba10df03b900e2bbd758ec515b8a03ec7021c140c2dc266a9959eda854dd7cfc0e0f40c84ac87db80f540e629e6e568f21fd7c9ccdb7bdbd42d8edc42de0cd8fd7cdd01ffff78a831b2f7f72bcf48dfc302cc09021e80e56d8114dc90a397f9b34acede22b7b3d12f84c3c93480dce920d78700e78aae7278650cee74ffb06c72ab9fcb7a452aecd1c6223583f5884dd4520ebb50b24f8462c0562dcc69757b30c119cf19bf15134d42ae9b368af123417e4b7deea5aa70105d19164d206956de4442202c31090d1391d6523abaabbf91920d02eec344a132e7472e4b71b1ea8248aa384a96416dd5bb2afef7ee30766257f91cb417b7670b269e8d5b67b2573f5e320004f6d75d0220e86313075ce1cf6a3caf638f46d60e23b3e972da1436b6a80a3c7031443d52fa099cc3a47d8bd99ada0f2b3a3b5fd8a196053dfb8c39a668179fd5e9ff57171f6e9157caeb51c67c3bde38e291adb88b1c8e44e597bfa94d6947488a0e80531e212d01d673ce278008e7fed083a08e4afa206a0d814aa13478d872c37b22196a0fe1e476f90b01a5586ab04f8b6c9e726cdbad985d02303bbc8a86707e5b84a33b5413a009861c25a31baa94c269029e1c1711d713c4cf3d49b373393d05b75ff868ce82c1de80eb98f605147f847b2633f75bfbc0416a5def2b2dc9719cc1a7a726a3d11c4c3bb964b2de45703d5b77e53b2bb24038bad24926184bd0658107d4abdd6b0abeaa769cf4f1497aa78dbb98a93b260f3f4859f5158ac8a68465a186c8e2bec9423996303d91b90a31541aa0d29ccdeaaefdc88f87e24ca0b2dc171781f557d311495d765ff8ac79cdaba71f6524c7fd0702d46c676e371e4f2347403236f5145eb1b55165751af0b825e1e8a67ae99644af1b9c9d9476bc14a5df2114174f76736a78fe45b3feaf5f5fa83642cff14fe677dea7586a38e7cd2f8669989af6782014fc34bea91765dbdc997fdbf7bba9bcc0eb03d5c35e75e1fdc6574097fec034ac464e314e11abb56ac44e6d587eef448a20a7034b2ff1415a9d5bb7ecd439a49379194fed7d5dd46d27c57380194c4d0d45787e61e368bd7ffa031bc62ce591a6f64027cbc2bbf0c29a2e21cc46b1d8f2ec96b9260a468e49541dc363e6d590c1456cd3e8cf79e96bbcdfd23a94995b8ae3de7ac3e326effc8f0998b0dd444d06f6e5339f99b3abe96a9462f9a7bf126f7b6d7b46d0098bfe941a326c71a9cc713f83cfe6b50d1c72d730c30c5b2bdaf6cbf1d1a6b94843a22f8eac5af8657fdf892ab7d7cfc684b64bd45f1f93892ceb7218d43fa345b66ece498e0dbb431662b3bce04afbe6a0483c14be7e22a6116d7e438d48b7a7c8f9fdc681a26b79c14cd", 0x1000)

07:42:18 executing program 3:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="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", 0x1000)

07:42:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x2, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x74}}, 0x0)

[ 1096.470939][ T3697] usb 6-1: Using ep0 maxpacket: 16
[ 1096.497259][T30294] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[ 1096.790151][ T3697] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=c4.cc
[ 1096.799526][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.807544][ T3697] usb 6-1: Product: syz
[ 1096.812613][ T3697] usb 6-1: Manufacturer: syz
[ 1096.817358][ T3697] usb 6-1: SerialNumber: syz
[ 1096.827427][ T3697] usb 6-1: config 0 descriptor??
[ 1097.109424][ T3697] snd-usb-audio: probe of 6-1:0.0 failed with error -2
[ 1097.119495][ T3697] usb 6-1: USB disconnect, device number 73
07:42:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee235cb0700760049085141e9fc"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:42:19 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:19 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
write$dsp(r1, &(0x7f0000000180)="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", 0x1000)

07:42:19 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04130121"], 0x4)

07:42:19 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x3c, 0x0, 0x0, "abe7a4e23d5a"}})

07:42:19 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:19 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:20 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
dup3(0xffffffffffffffff, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)

07:42:20 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
write$binfmt_script(r1, 0x0, 0x0)
close(r0)

07:42:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x5ffd)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:20 executing program 2:
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

07:42:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe545b0176b2cb793}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

07:42:20 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a10040000102030109025c0002010000000904000001020d000005240600000d240f010000000000000000000624"], 0x0)

07:42:20 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:20 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:20 executing program 0:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

[ 1098.589180][ T3693] usb 6-1: new high-speed USB device number 74 using dummy_hcd
07:42:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0)

07:42:21 executing program 0:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

07:42:21 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
dup3(0xffffffffffffffff, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)

07:42:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0)

07:42:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0)

[ 1098.992363][ T3693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.026549][ T3693] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
07:42:21 executing program 0:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

07:42:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0)

[ 1099.060370][ T3693] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
07:42:21 executing program 1:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

[ 1099.269784][ T3693] usb 6-1: New USB device found, idVendor=0525, idProduct=00a1, bcdDevice= 0.40
[ 1099.304533][ T3693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.339195][ T3693] usb 6-1: Product: syz
[ 1099.356889][ T3693] usb 6-1: Manufacturer: syz
[ 1099.369207][ T3693] usb 6-1: SerialNumber: syz
[ 1099.429801][ T3693] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[ 1099.452174][ T3693] cdc_ncm 6-1:1.0: bind() failure
[ 1099.633795][ T3693] usb 6-1: USB disconnect, device number 74
07:42:22 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a10040000102030109025c0002010000000904000001020d000005240600000d240f010000000000000000000624"], 0x0)

07:42:22 executing program 1:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

07:42:22 executing program 0:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

07:42:22 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:22 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
dup3(0xffffffffffffffff, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)

07:42:22 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'macsec0\x00'})

07:42:22 executing program 1:
unshare(0x42020400)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000}})

[ 1100.486734][T30403] device veth1_macvtap left promiscuous mode
[ 1100.519368][T28571] usb 6-1: new high-speed USB device number 75 using dummy_hcd
07:42:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'macsec0\x00'})

07:42:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'macsec0\x00'})

07:42:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'macsec0\x00'})

07:42:23 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x1e, 0x9}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="d0", &(0x7f0000000740)=""/4096}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48)

[ 1100.919301][T28571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.934006][T28571] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1100.977774][T28571] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1101.229372][T28571] usb 6-1: New USB device found, idVendor=0525, idProduct=00a1, bcdDevice= 0.40
[ 1101.247670][T28571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.265230][T28571] usb 6-1: Product: syz
[ 1101.280639][T28571] usb 6-1: Manufacturer: syz
[ 1101.300954][T28571] usb 6-1: SerialNumber: syz
[ 1101.360430][T28571] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[ 1101.367862][T28571] cdc_ncm 6-1:1.0: bind() failure
[ 1101.588833][T28571] usb 6-1: USB disconnect, device number 75
07:42:24 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a10040000102030109025c0002010000000904000001020d000005240600000d240f010000000000000000000624"], 0x0)

07:42:24 executing program 1:
mq_open(&(0x7f0000000000)='{\x00', 0x60, 0x0, 0x0)

07:42:24 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:24 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
dup3(0xffffffffffffffff, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)

07:42:24 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
unlink(&(0x7f0000000140)='./file0\x00')
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

07:42:24 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x1e, 0x9}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="d0", &(0x7f0000000740)=""/4096}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48)

07:42:24 executing program 1:
mq_open(&(0x7f0000000000)='{\x00', 0x60, 0x0, 0x0)

07:42:24 executing program 1:
mq_open(&(0x7f0000000000)='{\x00', 0x60, 0x0, 0x0)

07:42:24 executing program 1:
mq_open(&(0x7f0000000000)='{\x00', 0x60, 0x0, 0x0)

07:42:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0))

07:42:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0))

07:42:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0))

[ 1102.430102][ T3697] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1102.839377][ T3697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1102.859161][ T3697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1102.868282][ T3697] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1103.059316][ T3697] usb 6-1: New USB device found, idVendor=0525, idProduct=00a1, bcdDevice= 0.40
[ 1103.082489][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.107302][ T3697] usb 6-1: Product: syz
[ 1103.125031][ T3697] usb 6-1: Manufacturer: syz
[ 1103.135331][ T3697] usb 6-1: SerialNumber: syz
[ 1103.210048][ T3697] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[ 1103.217484][ T3697] cdc_ncm 6-1:1.0: bind() failure
[ 1103.424848][ T3697] usb 6-1: USB disconnect, device number 76
07:42:26 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a10040000102030109025c0002010000000904000001020d000005240600000d240f010000000000000000000624"], 0x0)

07:42:26 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x1e, 0x9}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="d0", &(0x7f0000000740)=""/4096}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48)

07:42:26 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0))

07:42:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:26 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000080001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1)
close(r0)
r2 = socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="b1e156a124d8ffb72d4d6be40e06ea11", 0x10}], 0x1)

07:42:26 executing program 3:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961bd0abc0aa5440ef0f09020a"], 0x0)

07:42:26 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x56c, &(0x7f0000003540), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000003480)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x0)

07:42:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a82bc565625b8d720020000000000000007f000001ac1414000000000000000000008430d49edf3c0b08681e5e9de62a7329ba77ff72f76fdf5d5b0400000000000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b"]}, 0x1f0)

07:42:26 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x8000)

07:42:26 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x8000)

[ 1104.229284][  T147] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1104.259038][ T3697] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1104.519270][  T147] usb 4-1: too many configurations: 15, using maximum allowed: 8
[ 1104.611289][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1104.620869][  T147] usb 4-1: config 0 has no interfaces?
[ 1104.640882][ T3697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.679087][ T3697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1104.688235][ T3697] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1104.710967][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1104.718665][  T147] usb 4-1: config 0 has no interfaces?
[ 1104.829350][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1104.841180][  T147] usb 4-1: config 0 has no interfaces?
[ 1104.889345][ T3697] usb 6-1: New USB device found, idVendor=0525, idProduct=00a1, bcdDevice= 0.40
[ 1104.905612][ T3697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.916352][ T3697] usb 6-1: Product: syz
[ 1104.919288][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1104.920949][ T3697] usb 6-1: Manufacturer: syz
[ 1104.927741][  T147] usb 4-1: config 0 has no interfaces?
[ 1104.940036][ T3697] usb 6-1: SerialNumber: syz
[ 1104.999255][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1104.999908][ T3697] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[ 1105.008397][  T147] usb 4-1: config 0 has no interfaces?
[ 1105.019379][ T3697] cdc_ncm 6-1:1.0: bind() failure
[ 1105.099240][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1105.106560][  T147] usb 4-1: config 0 has no interfaces?
[ 1105.191251][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1105.198496][  T147] usb 4-1: config 0 has no interfaces?
[ 1105.215900][ T3697] usb 6-1: USB disconnect, device number 77
[ 1105.279239][  T147] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1105.286508][  T147] usb 4-1: config 0 has no interfaces?
[ 1105.449167][  T147] usb 4-1: New USB device found, idVendor=1b96, idProduct=abd0, bcdDevice=aa.c0
[ 1105.458212][  T147] usb 4-1: New USB device strings: Mfr=84, Product=64, SerialNumber=239
[ 1105.466668][  T147] usb 4-1: Product: syz
[ 1105.471030][  T147] usb 4-1: Manufacturer: syz
[ 1105.475632][  T147] usb 4-1: SerialNumber: syz
[ 1105.481328][  T147] usb 4-1: config 0 descriptor??
07:42:27 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x1e, 0x9}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="d0", &(0x7f0000000740)=""/4096}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48)

07:42:27 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x8000)

07:42:27 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x9, @raw_data="1d45f5ed681d622ab59a26a873a1a5f6b9d83fa2fffb6f72c08ce918df58e914e224527b01668221bc265a930a7d7efde854a2bb96cfd7d81c420893dc0ceaba56c37b644439bdf7399676426eaa6636acd5e6aedbfdf0bc526d92bfcc98db11c10e19ef14a29fe3393a48918c4a7254aaff873d0506a2e08320e4a1137aceb075824903382c1a13f6978193cf07379767124e48a327f85a828f0fb33302577de5c36ae2eea86903b151bb8325e85b1366095fb4ab34060aa1e7520329d0a19debc98062d2907670"})

07:42:27 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000080001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1)
close(r0)
r2 = socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="b1e156a124d8ffb72d4d6be40e06ea11", 0x10}], 0x1)

07:42:28 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x8000)

[ 1105.723707][ T3697] usb 4-1: USB disconnect, device number 77
07:42:28 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0)
io_uring_setup(0x26ee, &(0x7f0000001040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0})

07:42:28 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x102053, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006)

07:42:28 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\xfdD(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xad\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\xc5\xf7Q\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCng@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\x97\xbc\xa3\xc9\xc6\xe2\r\xf5\x01\x9f\xd4b\x1d\x84\xab\xdf\xa2\xbe+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
ftruncate(r0, 0x0)

07:42:28 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x37, 0x20, 0xb7, 0x40, 0x17ef, 0xa387, 0xf71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2b, 0x1b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x4, "4d0c14e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:42:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x3c}}, 0x0)

07:42:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x3c}}, 0x0)

07:42:28 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\xfdD(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xad\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\xc5\xf7Q\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCng@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\x97\xbc\xa3\xc9\xc6\xe2\r\xf5\x01\x9f\xd4b\x1d\x84\xab\xdf\xa2\xbe+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
ftruncate(r0, 0x0)

07:42:28 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\xfdD(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xad\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\xc5\xf7Q\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCng@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\x97\xbc\xa3\xc9\xc6\xe2\r\xf5\x01\x9f\xd4b\x1d\x84\xab\xdf\xa2\xbe+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
ftruncate(r0, 0x0)

07:42:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x3c}}, 0x0)

[ 1106.521851][  T147] usb 5-1: new high-speed USB device number 47 using dummy_hcd
07:42:28 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000080001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1)
close(r0)
r2 = socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="b1e156a124d8ffb72d4d6be40e06ea11", 0x10}], 0x1)

07:42:28 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\xfdD(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xad\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\xc5\xf7Q\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCng@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\x97\xbc\xa3\xc9\xc6\xe2\r\xf5\x01\x9f\xd4b\x1d\x84\xab\xdf\xa2\xbe+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
ftruncate(r0, 0x0)

07:42:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x3c}}, 0x0)

[ 1107.039773][  T147] usb 5-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=f7.1e
[ 1107.059171][  T147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.067595][  T147] usb 5-1: Product: syz
[ 1107.075548][  T147] usb 5-1: Manufacturer: syz
[ 1107.080478][  T147] usb 5-1: SerialNumber: syz
07:42:29 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x102053, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006)

07:42:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1107.089849][  T147] usb 5-1: config 0 descriptor??
[ 1107.351758][  T147] r8152 5-1:0.0: Expected endpoints are not found
[ 1107.555827][  T147] usb 5-1: USB disconnect, device number 47
07:42:30 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x37, 0x20, 0xb7, 0x40, 0x17ef, 0xa387, 0xf71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2b, 0x1b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x4, "4d0c14e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:42:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:30 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000080001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1)
close(r0)
r2 = socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="b1e156a124d8ffb72d4d6be40e06ea11", 0x10}], 0x1)

07:42:30 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x102053, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006)

[ 1108.370097][ T3693] usb 5-1: new high-speed USB device number 48 using dummy_hcd
07:42:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1108.929189][ T3693] usb 5-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=f7.1e
[ 1108.938272][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.984636][ T3693] usb 5-1: Product: syz
[ 1109.009024][ T3693] usb 5-1: Manufacturer: syz
[ 1109.030188][ T3693] usb 5-1: SerialNumber: syz
[ 1109.077067][ T3693] usb 5-1: config 0 descriptor??
07:42:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:42:31 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x102053, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"a2e3ad08ed6b52f99cfbf4c0879b45b4d04fe7ff7fc6e5539b3c68093b546a9b374c94370890e0878fdb1ac6e7049b0ab4956c0a9a472a5b47f3988f7ef31952a981ffe8d178708c523c921b1b9b580a169b50d336cd3b78130daa09d8e809ea882f6e02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0eee26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6000200000000000065d5e880576286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37de0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2360fe763c43470833ac96d3f3357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6c6224779415d97b9a6d6d5495c1180459043f41c2fc4f4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54a3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bc09ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be7fc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5d3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebfeffffff82bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864d0270d81eaee5ee6cf1d0ab3785e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc0488506dbd17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57234ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06d21e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a6045951f9a93ab5d99c066f7aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d068edc746b0827cbf652f406c6b95f2722e58c050400ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f16c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0463ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071ffdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c29743bc613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654575576e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274018c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c34c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce85dbd02ee46c5cd5892587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec660080934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df090000008562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000200", 0x1000}}, 0x1006)

07:42:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f063ef30f017d0c660f38411c2e2e260fc72ac4c33544483f00640fc76800ba4000ed360f78e066b80c0000000f23c00f21f86635000002000f23f80fc79c0010", 0x42}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1109.359216][ T3693] r8152 5-1:0.0: Expected endpoints are not found
[ 1109.605434][ T3693] usb 5-1: USB disconnect, device number 48
07:42:32 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

07:42:32 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:32 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280))

07:42:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x8, 0x2}, 0x10}}, 0x0)

07:42:32 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:32 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x37, 0x20, 0xb7, 0x40, 0x17ef, 0xa387, 0xf71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2b, 0x1b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x4, "4d0c14e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:42:32 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x8, 0x2}, 0x10}}, 0x0)

07:42:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

07:42:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x8, 0x2}, 0x10}}, 0x0)

07:42:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x8, 0x2}, 0x10}}, 0x0)

[ 1110.439893][ T3693] usb 5-1: new high-speed USB device number 49 using dummy_hcd
07:42:33 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:33 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

07:42:33 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:33 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:33 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:33 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

[ 1111.051038][ T3693] usb 5-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=f7.1e
[ 1111.067188][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.077245][ T3693] usb 5-1: Product: syz
[ 1111.081840][ T3693] usb 5-1: Manufacturer: syz
[ 1111.092767][ T3693] usb 5-1: SerialNumber: syz
[ 1111.102446][ T3693] usb 5-1: config 0 descriptor??
[ 1111.369179][ T3693] r8152 5-1:0.0: Expected endpoints are not found
[ 1111.619074][ T3693] usb 5-1: USB disconnect, device number 49
07:42:34 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x37, 0x20, 0xb7, 0x40, 0x17ef, 0xa387, 0xf71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2b, 0x1b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x4, "4d0c14e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:42:34 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:34 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

07:42:34 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:34 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:34 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:34 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:34 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2)

[ 1112.449129][ T3693] usb 5-1: new high-speed USB device number 50 using dummy_hcd
07:42:34 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

[ 1113.089465][ T3693] usb 5-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=f7.1e
[ 1113.111125][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:42:35 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

[ 1113.204226][ T3693] usb 5-1: Product: syz
07:42:35 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

[ 1113.242929][ T3693] usb 5-1: Manufacturer: syz
[ 1113.296259][ T3693] usb 5-1: SerialNumber: syz
[ 1113.357436][ T3693] usb 5-1: config 0 descriptor??
07:42:35 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1113.669880][ T3693] r8152 5-1:0.0: Expected endpoints are not found
[ 1113.895789][T12975] usb 5-1: USB disconnect, device number 50
07:42:36 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10)

07:42:36 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:36 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:36 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0)

[ 1114.439241][T30668] device team0 entered promiscuous mode
07:42:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x1a001}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1114.554819][T30668] device team_slave_0 entered promiscuous mode
07:42:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0)

[ 1114.640005][T30668] device team_slave_1 entered promiscuous mode
07:42:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1114.685419][T30675] device dummy0 entered promiscuous mode
07:42:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0)

[ 1114.819489][T30663] device dummy0 left promiscuous mode
[ 1114.826440][T30663] device team0 left promiscuous mode
[ 1114.859049][T30663] device team_slave_0 left promiscuous mode
07:42:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1114.872692][T30663] device team_slave_1 left promiscuous mode
07:42:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0)

07:42:37 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10)

07:42:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1115.102692][T30694] device team0 entered promiscuous mode
[ 1115.114154][T30694] device team_slave_0 entered promiscuous mode
[ 1115.191473][T30694] device team_slave_1 entered promiscuous mode
[ 1115.247724][T30695] device dummy0 entered promiscuous mode
[ 1115.350155][T30693] device dummy0 left promiscuous mode
07:42:37 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

[ 1115.414634][T30693] device team0 left promiscuous mode
[ 1115.420334][T30693] device team_slave_0 left promiscuous mode
[ 1115.426864][T30693] device team_slave_1 left promiscuous mode
07:42:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:37 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x10000)
openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
lseek(r5, 0xbb6, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0)
sendfile(r5, r6, 0x0, 0x80000007)

07:42:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:37 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10)

07:42:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1115.538063][T30706] device team0 entered promiscuous mode
[ 1115.560199][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.566602][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.597687][T30706] device team_slave_0 entered promiscuous mode
07:42:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1115.684681][T30706] device team_slave_1 entered promiscuous mode
07:42:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1115.741661][T30711] device dummy0 entered promiscuous mode
[ 1115.807728][T30702] device dummy0 left promiscuous mode
[ 1115.813366][T30702] device team0 left promiscuous mode
[ 1115.818807][T30702] device team_slave_0 left promiscuous mode
[ 1115.826058][T30702] device team_slave_1 left promiscuous mode
07:42:38 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10)

07:42:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1115.997992][T30720] device team0 entered promiscuous mode
[ 1116.040086][T30720] device team_slave_0 entered promiscuous mode
[ 1116.095429][T30720] device team_slave_1 entered promiscuous mode
07:42:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

[ 1116.197982][T30725] device dummy0 entered promiscuous mode
[ 1116.291640][T30719] device dummy0 left promiscuous mode
[ 1116.369250][T30719] device team0 left promiscuous mode
[ 1116.374724][T30719] device team_slave_0 left promiscuous mode
07:42:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:38 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

07:42:38 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:38 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104faeefffeffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)=ANY=[@ANYBLOB="7000000024000b0e000000000080000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c000580180001000180ffff000000000000000000000000000000000800070001"], 0x70}}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$packet(r0, &(0x7f0000000340)="7ca745710b71619b9a2be11a86dd", 0xe, 0x0, 0x0, 0x0)

[ 1116.427153][T30719] device team_slave_1 left promiscuous mode
07:42:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'wlan1\x00', &(0x7f0000000840)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x2}})

07:42:38 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

07:42:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'wlan1\x00', &(0x7f0000000840)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x2}})

[ 1116.502731][T30736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
07:42:38 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

07:42:38 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104faeefffeffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)=ANY=[@ANYBLOB="7000000024000b0e000000000080000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c000580180001000180ffff000000000000000000000000000000000800070001"], 0x70}}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$packet(r0, &(0x7f0000000340)="7ca745710b71619b9a2be11a86dd", 0xe, 0x0, 0x0, 0x0)

07:42:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'wlan1\x00', &(0x7f0000000840)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x2}})

07:42:38 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

07:42:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:38 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x18, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)

[ 1116.662426][T30748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
07:42:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'wlan1\x00', &(0x7f0000000840)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x2}})

07:42:39 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x18, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)

07:42:39 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104faeefffeffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)=ANY=[@ANYBLOB="7000000024000b0e000000000080000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c000580180001000180ffff000000000000000000000000000000000800070001"], 0x70}}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$packet(r0, &(0x7f0000000340)="7ca745710b71619b9a2be11a86dd", 0xe, 0x0, 0x0, 0x0)

07:42:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0x5, 0x2, 0x1, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/196, 0xc4}]}, &(0x7f0000000500)="6ae5", &(0x7f0000000540)=""/192, 0x4, 0x10, 0x2, &(0x7f0000000600)})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x9, 0x0, &(0x7f0000001100))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x800, 0xfffffffffffffffd, 0x3f, 0x800, 0x9}, {0x6, 0x7ff, 0xaa, 0x2, 0x2, 0x200}], ['\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000640)={'U-', 0x9}, 0x16, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000680)=0x4, 0x4)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008005}, 0x0)

07:42:39 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xb8003})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4080aea2, &(0x7f0000000000))

07:42:39 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:39 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x18, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)

07:42:39 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x18, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)

[ 1117.350487][T30764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
07:42:39 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:39 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104faeefffeffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)=ANY=[@ANYBLOB="7000000024000b0e000000000080000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c000580180001000180ffff000000000000000000000000000000000800070001"], 0x70}}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$packet(r0, &(0x7f0000000340)="7ca745710b71619b9a2be11a86dd", 0xe, 0x0, 0x0, 0x0)

07:42:39 executing program 4:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)

07:42:39 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, <r2=>0x0})
close(r0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r3})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3})

07:42:39 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, <r2=>0x0})
close(r0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r3})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3})

07:42:39 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, <r2=>0x0})
close(r0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r3})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3})

07:42:39 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e002176820e067611d293bdf1aabd730178da", @ANYBLOB="7319"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1117.542067][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
07:42:40 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:40 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, <r2=>0x0})
close(r0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r3})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3})

07:42:40 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newneigh={0x3c, 0x1c, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x0)

07:42:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e002176820e067611d293bdf1aabd730178da", @ANYBLOB="7319"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:42:40 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:40 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newneigh={0x3c, 0x1c, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x0)

07:42:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e002176820e067611d293bdf1aabd730178da", @ANYBLOB="7319"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:42:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newneigh={0x3c, 0x1c, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x0)

07:42:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e002176820e067611d293bdf1aabd730178da", @ANYBLOB="7319"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:42:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newneigh={0x3c, 0x1c, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x0)

07:42:41 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:41 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x11, "011f6cb7fc88446b6d6b0370963ac38ab5ccf1d134782c5d97261422809c696e", "5f3123293cc3c7a1a35748bf9df23a405f72839c6ade3a6a7b4ea6bda059ea47", "1ac45044d89b63e11d69870d48f96041b84737a1981ab6cabfa22e7ea3499edf", "2be30693c27eba9ea27072282d45f66b3d73cea280442f49cda06c9d37695987", "152f62673d5a8bf73bac01a46542f5acc3a0c2eacab40fe4017b781c345b2e85", "f153a517951921731bfd2235"}})

07:42:41 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:41 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
close(r3)
close(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x11011, r6, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES16=r4], 0x4a8}, 0x1, 0x0, 0x0, 0xc004}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200, 0x0)

07:42:41 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x11, "011f6cb7fc88446b6d6b0370963ac38ab5ccf1d134782c5d97261422809c696e", "5f3123293cc3c7a1a35748bf9df23a405f72839c6ade3a6a7b4ea6bda059ea47", "1ac45044d89b63e11d69870d48f96041b84737a1981ab6cabfa22e7ea3499edf", "2be30693c27eba9ea27072282d45f66b3d73cea280442f49cda06c9d37695987", "152f62673d5a8bf73bac01a46542f5acc3a0c2eacab40fe4017b781c345b2e85", "f153a517951921731bfd2235"}})

07:42:41 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x11, "011f6cb7fc88446b6d6b0370963ac38ab5ccf1d134782c5d97261422809c696e", "5f3123293cc3c7a1a35748bf9df23a405f72839c6ade3a6a7b4ea6bda059ea47", "1ac45044d89b63e11d69870d48f96041b84737a1981ab6cabfa22e7ea3499edf", "2be30693c27eba9ea27072282d45f66b3d73cea280442f49cda06c9d37695987", "152f62673d5a8bf73bac01a46542f5acc3a0c2eacab40fe4017b781c345b2e85", "f153a517951921731bfd2235"}})

07:42:41 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x11, "011f6cb7fc88446b6d6b0370963ac38ab5ccf1d134782c5d97261422809c696e", "5f3123293cc3c7a1a35748bf9df23a405f72839c6ade3a6a7b4ea6bda059ea47", "1ac45044d89b63e11d69870d48f96041b84737a1981ab6cabfa22e7ea3499edf", "2be30693c27eba9ea27072282d45f66b3d73cea280442f49cda06c9d37695987", "152f62673d5a8bf73bac01a46542f5acc3a0c2eacab40fe4017b781c345b2e85", "f153a517951921731bfd2235"}})

07:42:41 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x2, 0x0)

07:42:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0))

07:42:42 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x80000001)
r6 = syz_open_dev$mouse(&(0x7f0000002680), 0x0, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x0)

07:42:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0))

07:42:42 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:42 executing program 1:
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "354df2e9628029d1322088c9ef2df0a6e7108adad881c732739a5b981f6bd95aff65289c47b526fde4bbf3888082cf384e62a0a2d5de51b03f7ed3edd3825ac1"}, 0x48, 0xffffffffffffffff)

07:42:42 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)

07:42:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

07:42:42 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x13, 0x8}, 0x48)

07:42:42 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)

07:42:42 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:42 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)

07:42:42 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4)

07:42:42 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x13, 0x8}, 0x48)

07:42:43 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback=0xac141428}}, 0x1c)

07:42:43 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x13, 0x8}, 0x48)

07:42:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0))

07:42:43 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x80000001)
r6 = syz_open_dev$mouse(&(0x7f0000002680), 0x0, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x0)

07:42:43 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x13, 0x8}, 0x48)

07:42:43 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:43 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0))

07:42:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0)

07:42:43 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:43 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0)

07:42:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0)

07:42:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0)

07:42:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x48}, 0x1, 0xf00}, 0x0)

07:42:44 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:44 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x80000001)
r6 = syz_open_dev$mouse(&(0x7f0000002680), 0x0, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x0)

07:42:44 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x48}, 0x1, 0xf00}, 0x0)

07:42:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x48}, 0x1, 0xf00}, 0x0)

07:42:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x48}, 0x1, 0xf00}, 0x0)

07:42:44 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'erspan0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="03034c002a1c44070c030c2cfff57b016d2763bd563786dd398d537503e52b02591f111ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa011801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff)

07:42:44 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:44 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:44 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'erspan0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="03034c002a1c44070c030c2cfff57b016d2763bd563786dd398d537503e52b02591f111ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa011801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff)

07:42:45 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'erspan0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="03034c002a1c44070c030c2cfff57b016d2763bd563786dd398d537503e52b02591f111ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa011801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff)

07:42:45 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'erspan0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="03034c002a1c44070c030c2cfff57b016d2763bd563786dd398d537503e52b02591f111ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa011801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff)

07:42:45 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:45 executing program 1:
timer_create(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0)

07:42:45 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x80000001)
r6 = syz_open_dev$mouse(&(0x7f0000002680), 0x0, 0x2)
write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x0)

07:42:45 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80), 0x5a6, 0x2000c010)

07:42:45 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:45 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:46 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:46 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:46 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:46 executing program 3:
bpf$MAP_CREATE(0x1e, 0x0, 0x0)

07:42:46 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000180)='udf\x00', 0x1030084, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=<r2=>0x0)
write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{' ', r2}, {' ', 0xfff}, {' ', 0x6}}, 0x3f)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x52)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x43, 0x1, @thr={&(0x7f0000000500)="f4e66e6028ef7321f0fea3646add9c455601df3b0b4c1533030000000000000065845eed715f996c04d8f7322b08ba4774c16a0289fc49187709c29150b9713290bb9252b67e477410856ccd5889a94f111dafbbd645269d816601c66f09a24385ff3b6656b669dafadf645318cb19d9f310e677cdd257e76e798b5bed17c43639bf07cef86e760e6b717619a62eec7d0407b31985f4eca471ddaff0ddcec8de719ea25735adf1", &(0x7f00000003c0)="d17c27d39f50caa577bf1319b873b365fd27e3557453265388b65ffd05d3"}})
openat$cgroup_ro(r4, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4)
unshare(0x6c060000)

07:42:46 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x800, 0xd0, 0x310, 0x0, 0x310, 0x310, 0x730, 0x730, 0x730, 0x730, 0x730, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private0, [], [], 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c6}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1, @ipv4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x860)

07:42:46 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:46 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
gettid()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

[ 1124.650770][T31029] xt_bpf: check failed: parse error
07:42:46 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x800, 0xd0, 0x310, 0x0, 0x310, 0x310, 0x730, 0x730, 0x730, 0x730, 0x730, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private0, [], [], 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c6}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1, @ipv4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x860)

07:42:46 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:47 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
gettid()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

[ 1124.745779][T31039] xt_bpf: check failed: parse error
07:42:47 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x800, 0xd0, 0x310, 0x0, 0x310, 0x310, 0x730, 0x730, 0x730, 0x730, 0x730, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private0, [], [], 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c6}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1, @ipv4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x860)

[ 1124.817162][T31044] xt_bpf: check failed: parse error
07:42:47 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x800, 0xd0, 0x310, 0x0, 0x310, 0x310, 0x730, 0x730, 0x730, 0x730, 0x730, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private0, [], [], 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c6}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1, @ipv4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x860)

[ 1124.912429][T31050] xt_bpf: check failed: parse error
07:42:47 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
gettid()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:42:47 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0xa7c, &(0x7f00000001c0)="571c006c7dadc6ee00fb633e7c3fed2531497ac5cd72074936e461449b9541d92fb8d0c86b3962536fbd693a489855dc965a83db58877335256b7cdd9b29928112923a09ec4e9cd04c41c1d7f003483b1eebef4bcfb1bb4a5bb7b6a48e2977647535cd8c6bbb1ccc66dc3ac51d7d13725b96bc074dbe498132c58ead1ff98f629d47aa7d656319279483de0112c7966729b6cfba6fa80908357d121be49221b5f9659d68090e1846bb7d379064bdc98375851a"})

07:42:47 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "ca"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)

07:42:47 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="140000ef"])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, 0x8, 0x35)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x8000002b)

07:42:47 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "ca"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)

[ 1125.614344][T31060] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #1
07:42:47 executing program 0:
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

07:42:47 executing program 2:
rseq(&(0x7f0000000380), 0x20, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
eventfd2(0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710})

07:42:47 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0xa7c, &(0x7f00000001c0)="571c006c7dadc6ee00fb633e7c3fed2531497ac5cd72074936e461449b9541d92fb8d0c86b3962536fbd693a489855dc965a83db58877335256b7cdd9b29928112923a09ec4e9cd04c41c1d7f003483b1eebef4bcfb1bb4a5bb7b6a48e2977647535cd8c6bbb1ccc66dc3ac51d7d13725b96bc074dbe498132c58ead1ff98f629d47aa7d656319279483de0112c7966729b6cfba6fa80908357d121be49221b5f9659d68090e1846bb7d379064bdc98375851a"})

07:42:47 executing program 2:
rseq(&(0x7f0000000380), 0x20, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
eventfd2(0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710})

07:42:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

07:42:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

[ 1125.723625][T31070] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #1
07:42:48 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0xa7c, &(0x7f00000001c0)="571c006c7dadc6ee00fb633e7c3fed2531497ac5cd72074936e461449b9541d92fb8d0c86b3962536fbd693a489855dc965a83db58877335256b7cdd9b29928112923a09ec4e9cd04c41c1d7f003483b1eebef4bcfb1bb4a5bb7b6a48e2977647535cd8c6bbb1ccc66dc3ac51d7d13725b96bc074dbe498132c58ead1ff98f629d47aa7d656319279483de0112c7966729b6cfba6fa80908357d121be49221b5f9659d68090e1846bb7d379064bdc98375851a"})

07:42:48 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
gettid()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

07:42:48 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "ca"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)

07:42:48 executing program 2:
rseq(&(0x7f0000000380), 0x20, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
eventfd2(0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710})

[ 1125.827694][T31079] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #1
07:42:48 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:48 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "ca"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)

07:42:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

07:42:48 executing program 2:
rseq(&(0x7f0000000380), 0x20, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
eventfd2(0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710})

07:42:48 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0xa7c, &(0x7f00000001c0)="571c006c7dadc6ee00fb633e7c3fed2531497ac5cd72074936e461449b9541d92fb8d0c86b3962536fbd693a489855dc965a83db58877335256b7cdd9b29928112923a09ec4e9cd04c41c1d7f003483b1eebef4bcfb1bb4a5bb7b6a48e2977647535cd8c6bbb1ccc66dc3ac51d7d13725b96bc074dbe498132c58ead1ff98f629d47aa7d656319279483de0112c7966729b6cfba6fa80908357d121be49221b5f9659d68090e1846bb7d379064bdc98375851a"})

07:42:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1dd}]})

07:42:48 executing program 3:
socketpair(0x29, 0x2, 0x0, &(0x7f0000001100))

07:42:48 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0)

07:42:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

[ 1126.028347][T31099] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #1
07:42:48 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:48 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:49 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:49 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

07:42:49 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:49 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:49 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:49 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 1126.852771][T31127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1127.003687][T31134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
07:42:49 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:49 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:49 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:49 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1127.277436][T31154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1127.427889][T31155] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
07:42:50 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:50 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:50 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1127.824532][T31161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
07:42:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1127.897027][T31166] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1127.942878][T31169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
07:42:50 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1127.999807][T31169] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
07:42:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:51 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:51 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:51 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:51 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:51 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:52 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:52 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:53 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:53 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:54 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:54 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:54 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:54 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:54 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:54 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x15)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x8, r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xb}, 0x10)
bind$xdp(r0, &(0x7f0000000380), 0x10)

07:42:54 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004})
ppoll(&(0x7f00000001c0)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0)

07:42:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@remote, @in=@remote}]}]}, 0xec}}, 0x0)

07:42:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@remote, @in=@remote}]}]}, 0xec}}, 0x0)

07:42:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@remote, @in=@remote}]}]}, 0xec}}, 0x0)

07:42:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@remote, @in=@remote}]}]}, 0xec}}, 0x0)

07:42:55 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "a991f0264313a0370da7da7d559fc173be7437e81f3e000000000000fd0100"})

07:42:55 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000ff2414db726d68", @ANYRES32])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x0, 0x0, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x4004084)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

07:42:56 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:56 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "a991f0264313a0370da7da7d559fc173be7437e81f3e000000000000fd0100"})

07:42:56 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:56 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:56 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)

07:42:56 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "a991f0264313a0370da7da7d559fc173be7437e81f3e000000000000fd0100"})

07:42:56 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:56 executing program 4:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r1, 0x12081ff)
fcntl$setstatus(r0, 0x4, 0x46100)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)
lseek(r1, 0x0, 0x4)
readv(r1, 0x0, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)

07:42:56 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:56 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "a991f0264313a0370da7da7d559fc173be7437e81f3e000000000000fd0100"})

07:42:56 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)

07:42:57 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:57 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0)

07:42:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)

07:42:57 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:57 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:57 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)

07:42:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

07:42:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)

07:42:57 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

07:42:57 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:58 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:58 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

07:42:58 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:58 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x9)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r1, @ANYBLOB="0000000000faffff77e98631cc196650"])
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x3e75, 0x0, 0x0, 0x0, 0x0)

07:42:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:58 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

07:42:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{}, 0x0, 0x12, @unused, @subvolid})
r3 = inotify_init()
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:42:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{}, 0x0, 0x12, @unused, @subvolid})
r3 = inotify_init()
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:42:59 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

07:42:59 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = dup2(r0, r0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f00000000c0)='.\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

07:42:59 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

07:42:59 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x22ec}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000))

07:42:59 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

07:42:59 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000080)=[0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x1, 0x7, 0x1})

07:42:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000080)=[0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x1, 0x7, 0x1})

07:42:59 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

07:42:59 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0xe27f2af84613fe2f, &(0x7f0000ffd000/0x2000)=nil)

07:42:59 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:59 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0xe27f2af84613fe2f, &(0x7f0000ffd000/0x2000)=nil)

07:42:59 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{}, 0x0, 0x12, @unused, @subvolid})
r3 = inotify_init()
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:42:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000080)=[0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x1, 0x7, 0x1})

07:42:59 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

07:42:59 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008200000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

07:42:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0)

07:42:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000080)=[0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x1, 0x7, 0x1})

07:42:59 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

07:42:59 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0xe27f2af84613fe2f, &(0x7f0000ffd000/0x2000)=nil)

07:42:59 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008200000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

07:42:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0)

07:42:59 executing program 5:
r0 = socket(0x2, 0x6, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000000))

[ 1137.220445][T31412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1137.286751][T31424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
07:42:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{}, 0x0, 0x12, @unused, @subvolid})
r3 = inotify_init()
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae8a, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

07:42:59 executing program 5:
r0 = socket(0x2, 0x6, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000000))

07:42:59 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:42:59 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0xe27f2af84613fe2f, &(0x7f0000ffd000/0x2000)=nil)

07:42:59 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008200000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

07:42:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0)

07:42:59 executing program 5:
r0 = socket(0x2, 0x6, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000000))

07:42:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0)

[ 1137.523263][T31435] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
07:42:59 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008200000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

07:42:59 executing program 3:
r0 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@can}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:42:59 executing program 5:
r0 = socket(0x2, 0x6, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000000))

07:42:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x101001)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19)
r2 = dup3(r0, r1, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

[ 1137.642797][T31447] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
07:43:00 executing program 4:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
pipe(&(0x7f0000000380))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x123a02, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0xffffffffffff4606, 0x12)
dup(r4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012)

07:43:00 executing program 3:
r0 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@can}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:43:00 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "9d284cdc"}, @local=@item_012={0x1, 0x2, 0xa, 't'}]}}, 0x0}, 0x0)

07:43:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x101001)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19)
r2 = dup3(r0, r1, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

07:43:00 executing program 1:
userfaultfd(0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x9efffffe)

07:43:00 executing program 3:
r0 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@can}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

07:43:00 executing program 4:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
pipe(&(0x7f0000000380))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x123a02, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0xffffffffffff4606, 0x12)
dup(r4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012)

07:43:00 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x101001)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19)
r2 = dup3(r0, r1, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

07:43:00 executing program 3:
r0 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@can}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a)

[ 1138.116766][T31474] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
07:43:00 executing program 1:
userfaultfd(0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x9efffffe)

07:43:00 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x101001)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19)
r2 = dup3(r0, r1, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

[ 1138.236148][T31487] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
07:43:00 executing program 1:
userfaultfd(0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x9efffffe)

[ 1138.365002][T31494] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
[ 1138.419743][T28571] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1138.689031][T28571] usb 6-1: Using ep0 maxpacket: 32
[ 1138.829223][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1138.840835][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1138.851398][T28571] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00
[ 1138.860920][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.888167][T28571] usb 6-1: config 0 descriptor??
[ 1139.380407][T28571] apple 0003:05AC:0216.0045: nested delimiters
[ 1139.387086][T28571] apple 0003:05AC:0216.0045: item 0 1 2 10 parsing failed
[ 1139.394712][T28571] apple 0003:05AC:0216.0045: parse failed
[ 1139.400799][T28571] apple: probe of 0003:05AC:0216.0045 failed with error -22
[ 1139.590290][T28571] usb 6-1: USB disconnect, device number 78
07:43:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "9d284cdc"}, @local=@item_012={0x1, 0x2, 0xa, 't'}]}}, 0x0}, 0x0)

07:43:02 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:02 executing program 1:
userfaultfd(0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x9efffffe)

07:43:02 executing program 4:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
pipe(&(0x7f0000000380))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x123a02, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0xffffffffffff4606, 0x12)
dup(r4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012)

07:43:02 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:02 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

[ 1140.114096][T31504] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
07:43:02 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

[ 1140.449066][T28571] usb 6-1: new high-speed USB device number 79 using dummy_hcd
07:43:02 executing program 4:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
pipe(&(0x7f0000000380))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x123a02, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0xffffffffffff4606, 0x12)
dup(r4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012)

[ 1140.709006][T28571] usb 6-1: Using ep0 maxpacket: 32
[ 1140.850512][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1140.898777][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1140.953480][T28571] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00
[ 1140.962945][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.977504][T28571] usb 6-1: config 0 descriptor??
07:43:03 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0)

07:43:03 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0)

07:43:03 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0)

07:43:03 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aa0400000000010000773b030000004b754743dd8b11a336cc3822d86fbdaf80b2693b5f31d29c12b54f339af5ad6d3bbcaa25101358be4def5f60eec52304f5ab97449b676f25b66689ab6b6284a3edf1613ffd40cc5d9bc3ce7fa4ec43c6024a770702dfe6a09420957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c624521f15ef4714645278af9590c2b4241afa65245e5d013899035e86bd2a7406b35aa4490a8b95b8a95fb1be524ebac34d06b1255d53f34fa5e2868454e3c0bcd5ebccc03ff9b8506cb33c7a601f0f03d1ff6ff5db6be4e5b82e8fe9058ced704e2bded2ec873e4f6b2df8772054e16be9d5fc5f13c4a8954116fb7bcac4a6cc8289de190d48927551"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

[ 1141.449858][T28571] apple 0003:05AC:0216.0046: nested delimiters
[ 1141.456026][T28571] apple 0003:05AC:0216.0046: item 0 1 2 10 parsing failed
[ 1141.469319][T28571] apple 0003:05AC:0216.0046: parse failed
[ 1141.479063][T28571] apple: probe of 0003:05AC:0216.0046 failed with error -22
[ 1141.664536][T28571] usb 6-1: USB disconnect, device number 79
07:43:04 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aa0400000000010000773b030000004b754743dd8b11a336cc3822d86fbdaf80b2693b5f31d29c12b54f339af5ad6d3bbcaa25101358be4def5f60eec52304f5ab97449b676f25b66689ab6b6284a3edf1613ffd40cc5d9bc3ce7fa4ec43c6024a770702dfe6a09420957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c624521f15ef4714645278af9590c2b4241afa65245e5d013899035e86bd2a7406b35aa4490a8b95b8a95fb1be524ebac34d06b1255d53f34fa5e2868454e3c0bcd5ebccc03ff9b8506cb33c7a601f0f03d1ff6ff5db6be4e5b82e8fe9058ced704e2bded2ec873e4f6b2df8772054e16be9d5fc5f13c4a8954116fb7bcac4a6cc8289de190d48927551"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:04 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0)

07:43:04 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aa0400000000010000773b030000004b754743dd8b11a336cc3822d86fbdaf80b2693b5f31d29c12b54f339af5ad6d3bbcaa25101358be4def5f60eec52304f5ab97449b676f25b66689ab6b6284a3edf1613ffd40cc5d9bc3ce7fa4ec43c6024a770702dfe6a09420957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c624521f15ef4714645278af9590c2b4241afa65245e5d013899035e86bd2a7406b35aa4490a8b95b8a95fb1be524ebac34d06b1255d53f34fa5e2868454e3c0bcd5ebccc03ff9b8506cb33c7a601f0f03d1ff6ff5db6be4e5b82e8fe9058ced704e2bded2ec873e4f6b2df8772054e16be9d5fc5f13c4a8954116fb7bcac4a6cc8289de190d48927551"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:04 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:04 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "9d284cdc"}, @local=@item_012={0x1, 0x2, 0xa, 't'}]}}, 0x0}, 0x0)

07:43:04 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x19, &(0x7f0000001800)=""/4074, 0xfea)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/19, 0xfd5d)

07:43:04 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x19, &(0x7f0000001800)=""/4074, 0xfea)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/19, 0xfd5d)

07:43:04 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x19, &(0x7f0000001800)=""/4074, 0xfea)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/19, 0xfd5d)

07:43:04 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x19, &(0x7f0000001800)=""/4074, 0xfea)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/19, 0xfd5d)

07:43:04 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x42082)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0})

07:43:04 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x42082)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0})

[ 1142.519250][T28571] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1142.799503][T28571] usb 6-1: Using ep0 maxpacket: 32
[ 1142.939361][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.975026][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.996222][T28571] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00
[ 1143.007080][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.019934][T28571] usb 6-1: config 0 descriptor??
07:43:05 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
lseek(r4, 0x100000000000000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00')
lseek(r5, 0x100000000000000, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c)

07:43:05 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x42082)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0})

07:43:05 executing program 0:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b73740635d6"}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0)

07:43:05 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x589}]}]}, 0x44}}, 0x0)

07:43:05 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

[ 1143.491596][T28571] apple 0003:05AC:0216.0047: nested delimiters
[ 1143.500565][T28571] apple 0003:05AC:0216.0047: item 0 1 2 10 parsing failed
[ 1143.514569][T28571] apple 0003:05AC:0216.0047: parse failed
[ 1143.527023][T28571] apple: probe of 0003:05AC:0216.0047 failed with error -22
[ 1143.703487][T28571] usb 6-1: USB disconnect, device number 80
07:43:06 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

07:43:06 executing program 0:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b73740635d6"}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0)

07:43:06 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x42082)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0})

07:43:06 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x589}]}]}, 0x44}}, 0x0)

07:43:06 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004d00)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30)

07:43:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "9d284cdc"}, @local=@item_012={0x1, 0x2, 0xa, 't'}]}}, 0x0}, 0x0)

07:43:06 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x589}]}]}, 0x44}}, 0x0)

07:43:06 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

07:43:06 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="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"/987, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES16, @ANYRES32], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27ff, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

[ 1144.241295][   T27] audit: type=1326 audit(1666424586.472:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31571 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06eb28b5f9 code=0x0
07:43:06 executing program 0:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b73740635d6"}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0)

07:43:06 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

07:43:06 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x589}]}]}, 0x44}}, 0x0)

07:43:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

07:43:06 executing program 0:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b73740635d6"}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0)

07:43:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

07:43:06 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a7, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b2, &(0x7f0000000000)={@local})

[ 1144.519229][ T3697] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1144.789009][ T3697] usb 6-1: Using ep0 maxpacket: 32
[ 1144.929167][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1144.940199][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1144.950331][ T3697] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00
[ 1144.959589][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.972711][ T3697] usb 6-1: config 0 descriptor??
07:43:07 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004d00)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30)

[ 1145.081333][   T27] audit: type=1326 audit(1666424587.322:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06eb28b5f9 code=0x0
[ 1145.465570][ T3697] apple 0003:05AC:0216.0048: nested delimiters
[ 1145.471856][ T3697] apple 0003:05AC:0216.0048: item 0 1 2 10 parsing failed
[ 1145.479402][ T3697] apple 0003:05AC:0216.0048: parse failed
[ 1145.485180][ T3697] apple: probe of 0003:05AC:0216.0048 failed with error -22
[ 1145.685566][ T3697] usb 6-1: USB disconnect, device number 81
07:43:08 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a7, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b2, &(0x7f0000000000)={@local})

07:43:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x200, &(0x7f00000013c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x0, r1, 0x0}])

07:43:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

07:43:08 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000100)='cgroup2\x00')

07:43:08 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004d00)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30)

07:43:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

07:43:08 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

07:43:08 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000100)='cgroup2\x00')

07:43:08 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a7, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b2, &(0x7f0000000000)={@local})

07:43:08 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

[ 1146.219838][T31611] nfs: Unknown parameter 'cgroup2'
[ 1146.228530][   T27] audit: type=1326 audit(1666424588.462:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31612 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06eb28b5f9 code=0x0
07:43:08 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a7, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b2, &(0x7f0000000000)={@local})

07:43:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x200, &(0x7f00000013c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x0, r1, 0x0}])

07:43:08 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000100)='cgroup2\x00')

[ 1146.303351][T31626] nfs: Unknown parameter 'cgroup2'
07:43:08 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000100)='cgroup2\x00')

07:43:08 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000080)={'bond0\x00'})

[ 1146.361879][T31633] nfs: Unknown parameter 'cgroup2'
07:43:08 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000080)={'bond0\x00'})

[ 1146.394203][T31636] nfs: Unknown parameter 'cgroup2'
[ 1146.530116][T28571] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1146.939195][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1146.950310][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1146.960343][T28571] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1146.973661][T28571] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1146.982853][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.996755][T28571] usb 6-1: config 0 descriptor??
07:43:09 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004d00)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30)

07:43:09 executing program 0:
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000017c0)=ANY=[], 0x14}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50}, {0x50}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1147.073117][   T27] audit: type=1326 audit(1666424589.312:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06eb28b5f9 code=0x0
[ 1147.480901][T28571] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving
[ 1147.496454][T28571] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1147.769993][T28571] usb 6-1: USB disconnect, device number 82
07:43:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

07:43:10 executing program 0:
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000017c0)=ANY=[], 0x14}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50}, {0x50}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

07:43:10 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:10 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x200, &(0x7f00000013c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x0, r1, 0x0}])

07:43:10 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000080)={'bond0\x00'})

07:43:10 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000080)={'bond0\x00'})

07:43:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x83, &(0x7f0000000100)={r2}, 0x8)

07:43:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x200, &(0x7f00000013c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x0, r1, 0x0}])

07:43:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x83, &(0x7f0000000100)={r2}, 0x8)

07:43:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x83, &(0x7f0000000100)={r2}, 0x8)

07:43:10 executing program 0:
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000017c0)=ANY=[], 0x14}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50}, {0x50}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[ 1148.609212][T28571] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1149.009116][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.020630][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.030939][T28571] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1149.044356][T28571] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1149.053640][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.062565][T28571] usb 6-1: config 0 descriptor??
[ 1149.531210][T28571] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving
[ 1149.540706][T28571] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1149.828724][T28571] usb 6-1: USB disconnect, device number 83
07:43:12 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x83, &(0x7f0000000100)={r2}, 0x8)

07:43:12 executing program 2:
r0 = syz_io_uring_setup(0x73d7, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_setup(0x49ed, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SPLICE, 0x0)
io_uring_enter(r0, 0x2bc3, 0x0, 0x0, 0x0, 0x0)

07:43:12 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

07:43:12 executing program 0:
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000017c0)=ANY=[], 0x14}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50}, {0x50}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

07:43:12 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:12 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:43:12 executing program 2:
r0 = syz_io_uring_setup(0x73d7, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_setup(0x49ed, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SPLICE, 0x0)
io_uring_enter(r0, 0x2bc3, 0x0, 0x0, 0x0, 0x0)

07:43:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_ACT={0x5c, 0x6, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x98}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1150.502176][T31700] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
07:43:12 executing program 2:
r0 = syz_io_uring_setup(0x73d7, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_setup(0x49ed, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SPLICE, 0x0)
io_uring_enter(r0, 0x2bc3, 0x0, 0x0, 0x0, 0x0)

[ 1150.568531][T31700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:43:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_ACT={0x5c, 0x6, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x98}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

07:43:12 executing program 2:
r0 = syz_io_uring_setup(0x73d7, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_setup(0x49ed, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SPLICE, 0x0)
io_uring_enter(r0, 0x2bc3, 0x0, 0x0, 0x0, 0x0)

[ 1150.658021][T31707] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1150.659143][T28571] usb 6-1: new high-speed USB device number 84 using dummy_hcd
07:43:13 executing program 2:
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0xbd0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

[ 1150.742870][T31707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1151.059168][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1151.070500][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1151.080677][T28571] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1151.093841][T28571] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1151.103324][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.116410][T28571] usb 6-1: config 0 descriptor??
[ 1151.600951][T28571] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving
[ 1151.610484][T28571] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1151.883082][T28571] usb 6-1: USB disconnect, device number 84
07:43:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

07:43:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_ACT={0x5c, 0x6, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x98}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

07:43:14 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:14 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64], 0xfffffeba)
fcntl$addseals(r0, 0x409, 0x8)
ftruncate(r0, 0x7)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:43:14 executing program 2:
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0xbd0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

07:43:14 executing program 3:
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0xbd0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

[ 1152.415037][T31719] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
07:43:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_ACT={0x5c, 0x6, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x98}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1152.485573][T31719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:43:14 executing program 2:
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0xbd0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

07:43:14 executing program 3:
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0xbd0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

[ 1152.532917][T31731] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1152.594896][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1152.609395][T31718] ==================================================================
[ 1152.617488][T31718] BUG: KASAN: use-after-free in mtree_range_walk+0x7b2/0x920
[ 1152.624912][T31718] Read of size 8 at addr ffff88801fbb4a10 by task syz-executor.4/31718
[ 1152.633171][T31718] 
[ 1152.635510][T31718] CPU: 1 PID: 31718 Comm: syz-executor.4 Not tainted 6.1.0-rc1-syzkaller-00249-g4da34b7d175d #0
[ 1152.645943][T31718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 1152.656016][T31718] Call Trace:
[ 1152.659360][T31718]  <TASK>
[ 1152.662302][T31718]  dump_stack_lvl+0xcd/0x134
[ 1152.666968][T31718]  print_report+0x15e/0x45d
[ 1152.671512][T31718]  ? __phys_addr+0xc4/0x140
[ 1152.676043][T31718]  ? mtree_range_walk+0x7b2/0x920
[ 1152.681186][T31718]  kasan_report+0xbb/0x1f0
[ 1152.685643][T31718]  ? mtree_range_walk+0x7b2/0x920
[ 1152.690701][T31718]  mtree_range_walk+0x7b2/0x920
[ 1152.695588][T31718]  mt_find+0x463/0xee0
[ 1152.699950][T31718]  ? lock_release+0x810/0x810
[ 1152.704654][T31718]  ? mas_next_node+0xa00/0xa00
[ 1152.709196][T28571] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1152.709421][T31718]  ? lock_acquire+0x4fc/0x630
[ 1152.721634][T31718]  find_vma+0x108/0x1a0
[ 1152.725815][T31718]  ? can_vma_merge_before+0x390/0x390
[ 1152.731222][T31718]  do_user_addr_fault+0x2c1/0x1210
[ 1152.736364][T31718]  ? trace_hardirqs_on+0x2d/0x160
[ 1152.741409][T31718]  ? rcu_read_lock_sched_held+0xd/0x70
[ 1152.746901][T31718]  exc_page_fault+0x94/0x170
[ 1152.751527][T31718]  asm_exc_page_fault+0x22/0x30
[ 1152.756476][T31718] RIP: 0010:fault_in_readable+0x175/0x290
[ 1152.762230][T31718] Code: 6f c9 ff 49 39 dd 0f 84 06 01 00 00 45 31 f6 eb 11 e8 6f 6f c9 ff 48 81 c3 00 10 00 00 4c 39 eb 74 1d e8 5e 6f c9 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 1b 6c c9 ff 45 85 ff 74 d2 e8
[ 1152.781953][T31718] RSP: 0018:ffffc900056c7b18 EFLAGS: 00050246
[ 1152.788037][T31718] RAX: 0000000000040000 RBX: 0000000020c53000 RCX: ffffc9000e3dc000
[ 1152.796070][T31718] RDX: 0000000000040000 RSI: ffffffff81b31b92 RDI: 0000000000000005
[ 1152.804064][T31718] RBP: 0000000020c52040 R08: 0000000000000005 R09: 0000000000000000
[ 1152.812063][T31718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 1152.820062][T31718] R13: 0000000020c54000 R14: 0000000000000000 R15: 0000000000000000
[ 1152.828055][T31718]  ? fault_in_readable+0x172/0x290
[ 1152.833173][T31718]  ? fault_in_readable+0x172/0x290
[ 1152.838287][T31718]  ? fault_in_subpage_writeable+0x20/0x20
[ 1152.844012][T31718]  ? folio_flags.constprop.0+0x53/0x150
[ 1152.849593][T31718]  ? balance_dirty_pages_ratelimited_flags+0x8b/0x1630
[ 1152.856462][T31718]  fault_in_iov_iter_readable+0x24e/0x2c0
[ 1152.862231][T31718]  generic_perform_write+0x1aa/0x570
[ 1152.867507][T31718]  ? folio_add_wait_queue+0x1b0/0x1b0
[ 1152.872877][T31718]  ? new_inode+0x270/0x270
[ 1152.877306][T31718]  ? generic_write_checks+0x2bc/0x3f0
[ 1152.882687][T31718]  __generic_file_write_iter+0x2aa/0x4d0
[ 1152.888327][T31718]  generic_file_write_iter+0xdf/0x350
[ 1152.893723][T31718]  vfs_write+0x9e9/0xdd0
[ 1152.897976][T31718]  ? kernel_write+0x630/0x630
[ 1152.902652][T31718]  ? __fget_files+0x26a/0x440
[ 1152.907335][T31718]  ? __fget_light+0xe5/0x270
[ 1152.911937][T31718]  ksys_write+0x127/0x250
[ 1152.916285][T31718]  ? __ia32_sys_read+0xb0/0xb0
[ 1152.921058][T31718]  ? syscall_enter_from_user_mode+0x22/0xb0
[ 1152.926962][T31718]  ? trace_hardirqs_on+0x2d/0x160
[ 1152.931987][T31718]  do_syscall_64+0x35/0xb0
[ 1152.936400][T31718]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1152.942286][T31718] RIP: 0033:0x7efff128b5f9
[ 1152.946689][T31718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1152.966460][T31718] RSP: 002b:00007efff24c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1152.974878][T31718] RAX: ffffffffffffffda RBX: 00007efff13abf80 RCX: 00007efff128b5f9
[ 1152.982859][T31718] RDX: 00000000fffffeba RSI: 0000000020000040 RDI: 0000000000000003
[ 1152.990819][T31718] RBP: 00007efff12e67b0 R08: 0000000000000000 R09: 0000000000000000
[ 1152.998777][T31718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1153.006738][T31718] R13: 00007efff18dfb1f R14: 00007efff24c4300 R15: 0000000000022000
[ 1153.014710][T31718]  </TASK>
[ 1153.017722][T31718] 
[ 1153.020031][T31718] Allocated by task 31739:
[ 1153.024431][T31718]  kasan_save_stack+0x1e/0x40
[ 1153.029109][T31718]  kasan_set_track+0x21/0x30
[ 1153.033700][T31718]  __kasan_slab_alloc+0x7e/0x80
[ 1153.038543][T31718]  kmem_cache_alloc_bulk+0x3e9/0x830
[ 1153.043834][T31718]  mas_alloc_nodes+0x309/0x810
[ 1153.048595][T31718]  mas_preallocate+0x1b7/0x360
[ 1153.053353][T31718]  __vma_adjust+0x18e/0x1ae0
[ 1153.057988][T31718]  __split_vma+0x4b0/0x5c0
[ 1153.062403][T31718]  do_mas_align_munmap+0x54c/0xee0
[ 1153.067510][T31718]  do_mas_munmap+0x26a/0x2b0
[ 1153.072096][T31718]  do_munmap+0xc3/0x100
[ 1153.076278][T31718]  __do_sys_mremap+0x12ce/0x16b0
[ 1153.079289][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1153.081205][T31718]  do_syscall_64+0x35/0xb0
[ 1153.081241][T31718]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1153.092266][T28571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1153.096481][T31718] 
[ 1153.096488][T31718] Freed by task 31715:
[ 1153.096500][T31718]  kasan_save_stack+0x1e/0x40
[ 1153.096534][T31718]  kasan_set_track+0x21/0x30
[ 1153.107898][T28571] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1153.112271][T31718]  kasan_save_free_info+0x2a/0x40
[ 1153.112298][T31718]  ____kasan_slab_free+0x160/0x1c0
[ 1153.112326][T31718]  slab_free_freelist_hook+0x8b/0x1c0
[ 1153.112351][T31718]  kmem_cache_free_bulk.part.0+0x205/0x780
[ 1153.112380][T31718]  mas_destroy+0x394/0x5c0
[ 1153.112404][T31718]  mas_store_prealloc+0xec/0x150
[ 1153.112429][T31718]  expand_downwards+0x962/0xdb0
[ 1153.112460][T31718]  do_user_addr_fault+0x901/0x1210
[ 1153.112490][T31718]  exc_page_fault+0x94/0x170
[ 1153.112513][T31718]  asm_exc_page_fault+0x22/0x30
[ 1153.112541][T31718] 
[ 1153.112546][T31718] The buggy address belongs to the object at ffff88801fbb4a00
[ 1153.112546][T31718]  which belongs to the cache maple_node of size 256
[ 1153.112564][T31718] The buggy address is located 16 bytes inside of
[ 1153.112564][T31718]  256-byte region [ffff88801fbb4a00, ffff88801fbb4b00)
[ 1153.112586][T31718] 
[ 1153.112591][T31718] The buggy address belongs to the physical page:
[ 1153.112601][T31718] page:ffffea00007eed00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fbb4
[ 1153.112625][T31718] head:ffffea00007eed00 order:1 compound_mapcount:0 compound_pincount:0
[ 1153.112644][T31718] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1153.112676][T31718] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff88801184fdc0
[ 1153.112697][T31718] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 1153.117553][T28571] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1153.119339][T31718] page dumped because: kasan: bad access detected
[ 1153.119354][T31718] page_owner tracks the page as allocated
[ 1153.119361][T31718] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 31078, tgid 31078 (syz-executor.1), ts 1125816469332, free_ts 1109146474618
[ 1153.119403][T31718]  get_page_from_freelist+0x10b5/0x2d50
[ 1153.124843][T28571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.128807][T31718]  __alloc_pages+0x1c7/0x5a0
[ 1153.128832][T31718]  alloc_pages+0x1a6/0x270
[ 1153.148461][T28571] usb 6-1: config 0 descriptor??
[ 1153.151846][T31718]  allocate_slab+0x213/0x300
[ 1153.151875][T31718]  ___slab_alloc+0xa91/0x1400
[ 1153.151902][T31718]  kmem_cache_alloc_bulk+0x28b/0x830
[ 1153.151929][T31718]  mas_alloc_nodes+0x309/0x810
[ 1153.364287][T31718]  mas_preallocate+0x1b7/0x360
[ 1153.369055][T31718]  vma_expand+0x1cc/0xb60
[ 1153.373398][T31718]  mmap_region+0x131b/0x1c00
[ 1153.377995][T31718]  do_mmap+0x825/0xf50
[ 1153.382056][T31718]  vm_mmap_pgoff+0x1ab/0x270
[ 1153.386634][T31718]  ksys_mmap_pgoff+0x41b/0x5a0
[ 1153.391416][T31718]  do_syscall_64+0x35/0xb0
[ 1153.395847][T31718]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1153.401735][T31718] page last free stack trace:
[ 1153.406387][T31718]  free_pcp_prepare+0x65c/0xd90
[ 1153.411242][T31718]  free_unref_page+0x19/0x4d0
[ 1153.415924][T31718]  kasan_depopulate_vmalloc_pte+0x5c/0x70
[ 1153.421635][T31718]  __apply_to_page_range+0x68c/0x1030
[ 1153.426997][T31718]  kasan_release_vmalloc+0xa7/0xc0
[ 1153.432094][T31718]  __purge_vmap_area_lazy+0x885/0x1c50
[ 1153.437544][T31718]  drain_vmap_area_work+0x52/0xe0
[ 1153.442563][T31718]  process_one_work+0x9bf/0x1710
[ 1153.447514][T31718]  worker_thread+0x665/0x1080
[ 1153.452182][T31718]  kthread+0x2e4/0x3a0
[ 1153.456242][T31718]  ret_from_fork+0x1f/0x30
[ 1153.460650][T31718] 
[ 1153.462958][T31718] Memory state around the buggy address:
[ 1153.468566][T31718]  ffff88801fbb4900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1153.476621][T31718]  ffff88801fbb4980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1153.484671][T31718] >ffff88801fbb4a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1153.492715][T31718]                          ^
[ 1153.497285][T31718]  ffff88801fbb4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1153.505328][T31718]  ffff88801fbb4b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1153.513375][T31718] ==================================================================
07:43:15 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000019280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000000140)=""/102400, 0x19000)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000019140)={'custom0\x00'})
open(&(0x7f0000000240)='./file0\x00', 0x200002, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10)
sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x2000001, 0x10, r1, 0x5c71a000)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42)
r3 = dup2(r2, r2)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x9, 0x5})
ioctl$USBDEVFS_CLAIM_PORT(r3, 0x4004551e, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

07:43:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x4}]}], {0x14}}, 0x5c}}, 0x0)

[ 1153.542970][T31718] Kernel panic - not syncing: panic_on_warn set ...
[ 1153.549596][T31718] CPU: 1 PID: 31718 Comm: syz-executor.4 Not tainted 6.1.0-rc1-syzkaller-00249-g4da34b7d175d #0
[ 1153.560029][T31718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 1153.570100][T31718] Call Trace:
[ 1153.573390][T31718]  <TASK>
[ 1153.575249][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1153.585490][T31718]  dump_stack_lvl+0xcd/0x134
[ 1153.590090][T31718]  panic+0x2c8/0x622
[ 1153.594035][T31718]  ? panic_print_sys_info.part.0+0x110/0x110
[ 1153.600020][T31718]  ? preempt_schedule_common+0x59/0xc0
[ 1153.605501][T31718]  ? preempt_schedule_thunk+0x16/0x18
[ 1153.610870][T31718]  end_report.part.0+0x3f/0x7c
[ 1153.615625][T31718]  ? mtree_range_walk+0x7b2/0x920
[ 1153.620651][T31718]  kasan_report.cold+0xa/0xf
[ 1153.625263][T31718]  ? mtree_range_walk+0x7b2/0x920
[ 1153.630313][T31718]  mtree_range_walk+0x7b2/0x920
[ 1153.630791][T28571] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving
[ 1153.633880][T28571] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1153.655115][T31718]  mt_find+0x463/0xee0
[ 1153.659193][T31718]  ? lock_release+0x810/0x810
[ 1153.663872][T31718]  ? mas_next_node+0xa00/0xa00
[ 1153.668640][T31718]  ? lock_acquire+0x4fc/0x630
[ 1153.673322][T31718]  find_vma+0x108/0x1a0
[ 1153.677483][T31718]  ? can_vma_merge_before+0x390/0x390
[ 1153.682870][T31718]  do_user_addr_fault+0x2c1/0x1210
[ 1153.687989][T31718]  ? trace_hardirqs_on+0x2d/0x160
[ 1153.693014][T31718]  ? rcu_read_lock_sched_held+0xd/0x70
[ 1153.698487][T31718]  exc_page_fault+0x94/0x170
[ 1153.703078][T31718]  asm_exc_page_fault+0x22/0x30
[ 1153.707934][T31718] RIP: 0010:fault_in_readable+0x175/0x290
[ 1153.713716][T31718] Code: 6f c9 ff 49 39 dd 0f 84 06 01 00 00 45 31 f6 eb 11 e8 6f 6f c9 ff 48 81 c3 00 10 00 00 4c 39 eb 74 1d e8 5e 6f c9 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 1b 6c c9 ff 45 85 ff 74 d2 e8
[ 1153.733526][T31718] RSP: 0018:ffffc900056c7b18 EFLAGS: 00050246
[ 1153.739597][T31718] RAX: 0000000000040000 RBX: 0000000020c53000 RCX: ffffc9000e3dc000
[ 1153.747570][T31718] RDX: 0000000000040000 RSI: ffffffff81b31b92 RDI: 0000000000000005
[ 1153.755535][T31718] RBP: 0000000020c52040 R08: 0000000000000005 R09: 0000000000000000
[ 1153.763506][T31718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 1153.771475][T31718] R13: 0000000020c54000 R14: 0000000000000000 R15: 0000000000000000
[ 1153.779458][T31718]  ? fault_in_readable+0x172/0x290
[ 1153.784595][T31718]  ? fault_in_readable+0x172/0x290
[ 1153.789720][T31718]  ? fault_in_subpage_writeable+0x20/0x20
[ 1153.795458][T31718]  ? folio_flags.constprop.0+0x53/0x150
[ 1153.801022][T31718]  ? balance_dirty_pages_ratelimited_flags+0x8b/0x1630
[ 1153.807885][T31718]  fault_in_iov_iter_readable+0x24e/0x2c0
[ 1153.813614][T31718]  generic_perform_write+0x1aa/0x570
[ 1153.818902][T31718]  ? folio_add_wait_queue+0x1b0/0x1b0
[ 1153.824271][T31718]  ? new_inode+0x270/0x270
[ 1153.828691][T31718]  ? generic_write_checks+0x2bc/0x3f0
[ 1153.834076][T31718]  __generic_file_write_iter+0x2aa/0x4d0
[ 1153.839711][T31718]  generic_file_write_iter+0xdf/0x350
[ 1153.845171][T31718]  vfs_write+0x9e9/0xdd0
[ 1153.849422][T31718]  ? kernel_write+0x630/0x630
[ 1153.854154][T31718]  ? __fget_files+0x26a/0x440
[ 1153.858851][T31718]  ? __fget_light+0xe5/0x270
[ 1153.863450][T31718]  ksys_write+0x127/0x250
[ 1153.867796][T31718]  ? __ia32_sys_read+0xb0/0xb0
[ 1153.872586][T31718]  ? syscall_enter_from_user_mode+0x22/0xb0
[ 1153.878486][T31718]  ? trace_hardirqs_on+0x2d/0x160
[ 1153.883601][T31718]  do_syscall_64+0x35/0xb0
[ 1153.888039][T31718]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1153.893958][T31718] RIP: 0033:0x7efff128b5f9
[ 1153.898382][T31718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1153.918000][T31718] RSP: 002b:00007efff24c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1153.926414][T31718] RAX: ffffffffffffffda RBX: 00007efff13abf80 RCX: 00007efff128b5f9
[ 1153.934383][T31718] RDX: 00000000fffffeba RSI: 0000000020000040 RDI: 0000000000000003
[ 1153.942375][T31718] RBP: 00007efff12e67b0 R08: 0000000000000000 R09: 0000000000000000
[ 1153.950341][T31718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1153.958306][T31718] R13: 00007efff18dfb1f R14: 00007efff24c4300 R15: 0000000000022000
[ 1153.966283][T31718]  </TASK>
[ 1153.969438][T31718] Kernel Offset: disabled
[ 1153.973761][T31718] Rebooting in 86400 seconds..