ose(r0) socket$inet(0x2, 0x200008000a, 0x80000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0908000012eefdf4c394f2ee2c997e5ddc16e352b86cb6e567d5a5088c2a87b6b447aca222f6000000eb300bc42a00"/59], &(0x7f0000000180)=0x8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400100, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x4000) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x9aed, [], &(0x7f00000000c0)=0xc3}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 11:13:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f0000000100)=0xfe44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000240)="15423e01c46d20e94a2f03d29ee5477a120e5d6ee7d088a909c9f197d497d7f29b0a0215b7199092854ba9814f73ba595896b8a65261b23f032f18cd624f6dd9b2c09bd83e57c2484601000000ea872d9ee60457362696411eb1b0e1c3804368d62343d2861262c3aeb8d7ff4fb24559b11625df68b604e4f4fb3cd16424a1511fb51eba0600000100000000005b911af25470f5ce5a480f08caa859beff61cec75aa12a42174465", 0xa8}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 619.785599][ T6221] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 619.812060][ T6216] input: syz1 as /devices/virtual/input/input67 11:13:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0xf, 0x2}, 0x14) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)) fchown(r0, r5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) 11:13:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 619.974337][ T6234] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/203, 0xcb, 0x11) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x20, 0x1, 0x816, 0xa7, 0x3f, 0x2, 0x4, r4}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r5, 0x8, 0x4}, 0x8) close(r0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$getflags(r6, 0xb) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x9, 0x1, 0x1}, &(0x7f00000001c0)=0x10) 11:13:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.168345][ T6251] input: syz1 as /devices/virtual/input/input68 [ 620.178378][ T6319] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 620.188829][ T6315] input: syz1 as /devices/virtual/input/input69 11:13:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.219480][ T6319] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)) fchown(r0, r5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 620.310348][ T6357] vhci_hcd: default hub control req: 0600 v0020 i0001 l0 [ 620.321015][ T6319] vhci_hcd: default hub control req: 0600 v0020 i0001 l0 11:13:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r5}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', r5}) socket$inet(0x2, 0x2000080001, 0x84) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040), 0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r7, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r7, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) close(r7) io_submit(r3, 0x4, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1d, r4, &(0x7f0000000240)="bdc111945b13737640c2139d4580d20a757cd4095c126f3dfacf7477a7ee66b93f2ac4af8e38b624ffb9524d613e916ccea071b3dbc832e14cfab2750bf0457e6991af203c96fa17d9f49294a333a8408573038bd3c698864528b0ce57cf89e951759e2f95c75b22f5a395ba2c9fcac1d140a6db3581562bad27d3301ed9d34d67032021e268e60e8dc0f918d89dd253e61dec9cdebb3fc6b425e891899ea757a47cc9ff133a", 0xa6, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f00000004c0)="68653f43b2746f1f9383f4957bcdb0ca9dd3119e3ba078d166a1f369a205d65398526f2ca8f1fde93ba29da446dc4a47cefbe2680694c5a0be2f72e6f60ad1f398ef96e399f46deb3c48978bca443271fcbdd6dee48cbb8d625fd34e68a5f99b986fc2c2b72c8cf09b8f66d50036877638ebf54fcd348fb3fb596961b2ef27fd7f33633605b32f21d58a8789878fbddb182584e3cbc25611248aa0db08ddec4958f652f9e341545fba559ae3c301b934106e6c8057bea9c45ce3042387a19e0f0eb627b4b861924da401795cc7c21c546a4a8d5407f72395803c9eb37d0aa36e772cc0d6dd", 0xe5, 0x7, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5c76777dce53b3f4, 0x100, r6, &(0x7f00000005c0)="8178b014385b5eae7ce164c2ded6032dc2f90c5f76bb7d36f939d71df2b1b2a179ba6040b9d5769e27e004e652e943a9ea74648478dc0fe4e17017c28f62a41d8de3c19c600141264464e605904504ffa62f25f3b81e33e32e5aeb73dd7f98590df379ad4a87a81a2eb57614350060346973b900dabd22befbccbae6ffe513", 0x7f, 0x401, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x7, r7, &(0x7f0000001480)="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", 0x1000, 0x5}]) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r8, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.457136][ T6368] input: syz1 as /devices/virtual/input/input70 [ 620.525322][ T6373] input: syz1 as /devices/virtual/input/input71 [ 620.543039][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:13:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.591200][ T6376] vhci_hcd: invalid port number 49 [ 620.615979][ T6376] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.670671][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 620.730679][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:13:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xa, 0x659b, 0x9, 0xc, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x7, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @empty}, @in=@local, 0x4, 0x14, 0x10}, @sadb_sa={0x2, 0x1, 0x4d4, 0x200, 0x5, 0x4f, 0x4, 0x5335ac1d14007006}, @sadb_x_nat_t_port={0x1, 0x16, 0xc00}]}, 0x60}}, 0x8040) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="100600e751462b5fb9"], &(0x7f0000000180)=0x8) 11:13:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 620.839954][ T6394] vhci_hcd: invalid port number 49 [ 620.850046][ T6402] input: syz1 as /devices/virtual/input/input72 11:13:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 620.881052][ T6394] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 [ 620.896410][ T6406] vhci_hcd: invalid port number 16 [ 620.903556][ T6406] vhci_hcd: default hub control req: 0000 v0000 i0010 l59136 11:13:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="00092abd7000fddbdf250f00000050000300080001000200000008000500e0000002140002006272696467655f736c6176655f30000014000600fe8000000000000000000000000000aa1400020062707130000000000000000000000000200003001400060000000000000000000000ffffac1414aa0800050000000000000000080006000080000008000400030000002c00020008000e004e210000080002004e210000080002004e230000080003000300000008000d00020000000800050000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000080) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x11}}, r5}}, 0x30) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev}, 0x4}}, 0x26) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr="2a06d73886c513a095ace455ba7dc467"}}}, 0x32) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00e80800"], &(0x7f0000000180)=0x8) 11:13:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 621.039564][ T6415] vhci_hcd: invalid port number 97 [ 621.072347][ T6415] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 621.108397][ T6419] input: syz1 as /devices/virtual/input/input73 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xfffffffffffffd1b, "880053d1060063"}, &(0x7f0000000180)=0xf) 11:13:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/48) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0x2f9ddfa00dad4693, 0x4, {0x9}}, 0x18) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040), 0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r7, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r7, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) close(r7) io_submit(r3, 0x4, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1d, r4, &(0x7f0000000240)="bdc111945b13737640c2139d4580d20a757cd4095c126f3dfacf7477a7ee66b93f2ac4af8e38b624ffb9524d613e916ccea071b3dbc832e14cfab2750bf0457e6991af203c96fa17d9f49294a333a8408573038bd3c698864528b0ce57cf89e951759e2f95c75b22f5a395ba2c9fcac1d140a6db3581562bad27d3301ed9d34d67032021e268e60e8dc0f918d89dd253e61dec9cdebb3fc6b425e891899ea757a47cc9ff133a", 0xa6, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f00000004c0)="68653f43b2746f1f9383f4957bcdb0ca9dd3119e3ba078d166a1f369a205d65398526f2ca8f1fde93ba29da446dc4a47cefbe2680694c5a0be2f72e6f60ad1f398ef96e399f46deb3c48978bca443271fcbdd6dee48cbb8d625fd34e68a5f99b986fc2c2b72c8cf09b8f66d50036877638ebf54fcd348fb3fb596961b2ef27fd7f33633605b32f21d58a8789878fbddb182584e3cbc25611248aa0db08ddec4958f652f9e341545fba559ae3c301b934106e6c8057bea9c45ce3042387a19e0f0eb627b4b861924da401795cc7c21c546a4a8d5407f72395803c9eb37d0aa36e772cc0d6dd", 0xe5, 0x7, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5c76777dce53b3f4, 0x100, r6, &(0x7f00000005c0)="8178b014385b5eae7ce164c2ded6032dc2f90c5f76bb7d36f939d71df2b1b2a179ba6040b9d5769e27e004e652e943a9ea74648478dc0fe4e17017c28f62a41d8de3c19c600141264464e605904504ffa62f25f3b81e33e32e5aeb73dd7f98590df379ad4a87a81a2eb57614350060346973b900dabd22befbccbae6ffe513", 0x7f, 0x401, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x7, r7, &(0x7f0000001480)="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", 0x1000, 0x5}]) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r8, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000008c0)={"0a13218132eb477cc51050d30ea0962729da053b274e6f267b8248e2221623fd25c2c05312232631ba331a6c8d33454e79461e7bb9df9406b3abbc25a06153eaa50258f2fa6e21e7b916fdc17adc61aa01d556b31ec204585e1e0f159d08107bd5f60f2c75082121283e34e460bad16ecad25bf47e118d704ee2dda69ca927ddcbe9f9cf3c038a044f6f80e379c081eeb841ba615cfc91098c7096c75b1844ac5b5fe7c5903ff2102834018dca7ae26044c00773bff5cbe52d7aa06c4109dec03129dce443be26ac98f31f2409fc454bf2758c9e03f911e601daa8a39ae81e6cc7eefef36cd4556a95260d5917020e45cb852d9242af588ca0e9d5102d225fca1651d62b120ed56f75e277562c89c667dd975f00090e8a5984fc1aa9ff70653684acc7a5d95727d5aa70e520accdfcaf3b78e65d6a5137e4e5c0a2866cbea9fa0ab8f4efcaee66474c8ccff159043aae5158ddc8038b7c9371a36c74ba66b8df3f505f6073d87cc7c2907cd52a3658e412ad174136293d40a9128d2cd79fcfe56e36e86fb99d9ee038d8f07a89020ade306b1d9ea28365ffaf2f2dc6bc065f32bb5e1b765d7facb6cb58f1b2a8c86c1a800614191dc9519377a198cb61c3a618790c1b1a607fee34d34fa3afd49ecdfade2528e311e4fdb7e3c989297569564b8c6f9857d7dee5f863d8db970bec276f0e71237f656ac00a311aa5150cd2db8979c9e1fda24e6838d495e17d35953f9a6d721fdda85af0fb8ac3743029da4ff22bd39793d685eb26f62f78f0a119e7e58fb40558c94fae425261758e5d6762e7fd383fe0a650046c47bb6c5e38aa594a643325399c6eba0fd3fb312f678b5944c173da0fb44a0741a4c1767a15508de2b9458c87aee3fff84a0a739eeb4e337ea7d3012a655d5bf873c37f1b601dee492c8db1a14f4ea4518cf5fd91dcdcecafe1885e170dc36a1e16adf1a7a21db060081212393962d70bd5db6e8fbab9444110903389223fea7ad2ac85f985333170ebd400992cedef3c17b0f63f59fc7b99e3d7f465e79be94c2763ac02e9f7580e8c46d1f55468e87269faa037b04f9983cef537b3bf577be83e33a86f8fee321f4a803da1f36e3395b274012387145670c44a56629bcf0688efa9e77e2d6f254167b7729a8ce76bec019fd213d8c085afd38da7712c1eba436860bb8d906bac2e6c2aca8190fedda5551ccb998198746f9c3b5f384772dd30f14b515eb92ef236db2173e31e3ea48c3dbe6b76eb7a87118e81eb65dfd6b8aa68302a1f6be8fe6ef78e306b7c9d4240b8154aebda0a17f801217d7c90b695f0de5be65696178b3d07be5161a38957dcc28221ab0e5bfdf0b167728512b52a9a9b51b099c5129e56ef28d16ab35f7f948d60d95d985419a0a7d344b937cace2814072b7f4263daac04017697e84d9b987c542a6909492a14"}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 621.319095][ T6439] input: syz1 as /devices/virtual/input/input74 [ 621.332632][ T6440] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 621.388515][ T6440] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 621.416979][ T6440] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 621.428227][ T6447] vhci_hcd: invalid port number 49 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x40) fcntl$addseals(r1, 0x409, 0x1) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 621.437278][ T6447] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=""/145) 11:13:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000100)={&(0x7f0000000240)=""/146, 0x92}) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1cb}, &(0x7f0000000180)=0xffffffffffffff8a) [ 621.589137][ T6459] input: syz1 as /devices/virtual/input/input75 11:13:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="00092abd7000fddbdf250f00000050000300080001000200000008000500e0000002140002006272696467655f736c6176655f30000014000600fe8000000000000000000000000000aa1400020062707130000000000000000000000000200003001400060000000000000000000000ffffac1414aa0800050000000000000000080006000080000008000400030000002c00020008000e004e210000080002004e210000080002004e230000080003000300000008000d00020000000800050000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000080) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x11}}, r5}}, 0x30) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x465, 0x0, 0x3, 0x1000020000000, 0x7ff0bdbe}) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r7, 0x15, "fce3f653ecb71b400c65e9ebf9fab1b2f44904a7fa"}, &(0x7f0000000180)=0x1d) 11:13:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, 0x0) [ 621.839803][ T6479] vhci_hcd: invalid port number 97 [ 621.847959][ T6479] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)={0x7, [0xffffffffffffffe0, 0x8, 0xfff, 0x0, 0x17e6, 0x100000001, 0x7]}) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0x2, 0x2000080001, 0x84) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x9) msgget(0x0, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 621.945749][ T6488] input: syz1 as /devices/virtual/input/input76 11:13:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002700)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) socket$inet(0x2, 0x80000, 0x84) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002640)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000009206ae1fd6c54929b51c1a2c7ec92e442957c1acf43ff89ab6481b40c37f2348d01fafa24641097322e812ce86cf73a673467d82c48d2c86e6379a2beff69ff3d0513b92074e17fc8dd4cf47a7a1fffed549ff355be3173d6f6b32088e7e020f38d51188c8b37e51c3584339120145d84403e570ad143af5818c6eef369462bceed3f581f58e3193"], &(0x7f0000000180)=0x8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000002240)={"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"}) 11:13:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="00092abd7000fddbdf250f00000050000300080001000200000008000500e0000002140002006272696467655f736c6176655f30000014000600fe8000000000000000000000000000aa1400020062707130000000000000000000000000200003001400060000000000000000000000ffffac1414aa0800050000000000000000080006000080000008000400030000002c00020008000e004e210000080002004e210000080002004e230000080003000300000008000d00020000000800050000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000080) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x11}}, r5}}, 0x30) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 622.201560][ T6507] vhci_hcd: invalid port number 97 [ 622.234707][ T6507] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x5, 0x50151e5}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x30800, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff000000"], &(0x7f0000000180)=0x8) 11:13:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 622.393272][ T6522] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 622.413808][ T6524] vhci_hcd: invalid port number 97 [ 622.420499][ T6524] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 622.429674][ T6526] vhci_hcd: invalid port number 47 11:13:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 622.452350][ T6526] vhci_hcd: default hub control req: 2f64 v7665 i002f l28012 [ 622.487968][ T6529] vhci_hcd: invalid port number 97 11:13:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 622.504478][ T6529] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x401) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) accept4$alg(r1, 0x0, 0x0, 0x1000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) recvmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/234, 0xea}], 0x1}, 0x3a66922e}, {{&(0x7f0000000100)=@sco, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/176, 0xb0}], 0x9, &(0x7f0000000840)=""/25, 0x19}, 0x5}, {{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/129, 0x81}, {&(0x7f0000000d40)=""/235, 0xeb}], 0x8, &(0x7f0000006480)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000ec0)=@ax25={{0x3, @rose}, [@rose, @rose, @rose, @remote, @bcast, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/215, 0xd7}, {&(0x7f0000001040)=""/172, 0xac}], 0x2, &(0x7f0000001140)=""/87, 0x57}, 0x5}, {{&(0x7f00000011c0)=@nl, 0x80, &(0x7f0000001380)=[{&(0x7f0000001240)=""/160, 0xa0}, {&(0x7f0000001300)=""/24, 0x18}, {&(0x7f0000001340)=""/39, 0x27}], 0x3, &(0x7f0000007480)=""/201, 0xc9}, 0x6}, {{&(0x7f00000013c0)=@alg, 0x80, &(0x7f0000007700)=[{&(0x7f0000007580)=""/182, 0xb6}, {&(0x7f0000007640)=""/138, 0x8a}], 0x2, &(0x7f0000007740)=""/215, 0xd7}, 0x3}], 0x6, 0x2000, &(0x7f00000079c0)) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) sendmsg$alg(r2, &(0x7f0000007d00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000007a00)="dd5c6284f629764d27afdc51d245e9a04baf94ac5b2680acc512ada08e1696eeaff0394b41111d89b847dd0045097133f239b5ec455ad819fa40058c7a810898cd29f37157c45bb8483ff23bd4a6a268998a4859de9e9f1c2b517317a4dbf57671109bcc4133616142716d47b9494f1d5706e83e85b7b834a346d9613987c3ba18da08c80ee4e909089511b59d37a811c3e01008f70f0c89c5540c925c0739c4cdc76ca034704d087753298b361561dffb20ac5e30a5274adb508d2b031708c6262ca0ba13340fc089119c15d4fc33eb14aa8bb3259fee64412be35b407ca95ef2c747b2637c5d1ed85ff03a6265e1f0d5a39e7e843e1b9c5ae4ae37", 0xfc}, {&(0x7f0000007b00)="9c315ac461e699a4f984c32eef358e9e1656dd8ec402d48dc8fb9adc8176c9c4b38ccd30a1d5c06506799efde4a97d0f32a08472ce3cbcd4fc93f60afb0356ee12398afd004de6363ef8446d7cf9eb8a2ef7f8ce44d5cb67b3d8a78ae4f3325ad849a8fea9df85bd66146fd95961186756a590d9ee78fe93a7fbe0ddacf8237e74de7f3bba596026e2f0d64759aafbb0f65fcb6f9864366e2818df31d1346500bb4bb5cab5726ca4687de52be644355f069c4442dc7eb567ce8d981dcdf5c346", 0xc0}, {&(0x7f0000007bc0)="3b3442e214423658cb3eb1c68a21d628b2b2f801cd79a19f407b337eb18edc3bbe587f05e5ce292e8be329a95a2bde01b34af128bb271f2b5a5aba455cbfe734ea3ee724185c0a64512c0eafa86db812cd1cd948f9b44a859cd8ef158b24b757b6a690f0fb96b76e6438b8a6f546c23917de41b97233", 0x76}, {&(0x7f0000007c40)="87f6548ee6219bfee9e56e46074c5743c159e62d010889d98092d968310d3c6ff1cee3e7688a5a7cc56e4b188f63b4f85c2addd2a587de545ad060318378c10f686ff8071746dedb1bff95874befd9e123b66a5671ad936b801431792023f663c1dab3947d20533cc75cbfefb6680b1a0678d6ce", 0x74}], 0x4, &(0x7f0000007cc0)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x4000}, 0x4008004) 11:13:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x4, 0x2, 0xc0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffc}) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="36e693eb5bf985cc8821a690b1fe6df124cff9892fd1820177b6670b98283a56cac9682e384964494dcb20e77c4920b04c80f9cbe04fc01f25f470f6b80e279465eef0d3a95d6e4b9827893e4e1a382dd61acdfce6c1e618aef8070fb4af44e5b1fae9fecec1"], &(0x7f0000000180)=0x8) 11:13:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223", 0x9}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 622.700199][ T6546] vhci_hcd: invalid port number 97 [ 622.707561][ T6546] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:08 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) r1 = dup(r0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x7f83701a) write$FUSE_ATTR(r1, &(0x7f0000000040)={0xffffffffffffffd5, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffefff}}}, 0xfddf) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0x1000, ""/4096}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0x80000000000102, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) mknodat(r5, 0x0, 0x0, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000380)={0x7, 0x4d, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0xfec0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}, r4}}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x4000, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x4}, 0x800000000008, 0x1}) ioctl(r6, 0xffffffffffffffb2, &(0x7f0000000040)) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mknodat(r7, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000000000)=""/22) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000540)={'veth1_to_hsr\x00'}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@mcast1}, 0x14) 11:13:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r2, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r1, r6, 0x0, 0x87ff7) 11:13:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)=0x8) 11:13:08 executing program 5: close(0xffffffffffffffff) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000180)=0x8) [ 622.864611][ T6549] vhci_hcd: invalid port number 97 [ 622.895447][ T6549] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x200000, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) readahead(r1, 0x0, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xf788, 0x6af1a94c86be53f6) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x400, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000200)={0xc2, 0x19b, &(0x7f00000000c0)="6b41f697b4c630fab352816c7618ddaaec5c8ca18a28713c4262c7682f168549bb277754", &(0x7f0000000100)="0c4efe47f2dca122fc36d4993ccbdf1c69741e4e7dc561314f0a0ceb3c7ebdab73a530555b02dd50fa39ee3875e252ac20ae88af99add75883f344dc628152c6094d449e9500c92041782d55f07c94d72a0ac363bddaa0ceed0ecf9e980a2a2e094cfe21e1c5e74e77e1ce0ed60f57f3d60e1ec5b2184f2b30dc3c676fe4399686419e1a486603f443fe871d2c917bdc2af31d8dbb04d7a94bc8ba5cdca10a08dc09b9221b29260663a07235701b70c6a5663f11c026d39dc38875a178a86d363e5d5d05107b50", 0x24, 0xc7}) 11:13:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 623.168452][ T6578] vhci_hcd: invalid port number 47 [ 623.179610][ T6578] vhci_hcd: default hub control req: 2f64 v7665 i002f l25701 11:13:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', 0x0) fchown(r0, r5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) 11:13:09 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8580, 0x0) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000b691c621e0372816b0d595f63ab5b130b23b4f6d5bd7437d94479e441dfd3fc240c7e430477d25ded44b4ac816d63b9c753e4060f9ea92bcebf8d28ca8ec5c6dd351aeeaac7e9381d03497f47b7b26c8e4a659c0f3ef88382ff6d8ae1236f388770b1fad6c92de393911564c5057b0f3270c4e2a3de23599f6feea0d53882025433e3ca2bfee6fe4ccffa06e6695"], &(0x7f0000000180)=0x8) 11:13:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x2e3}, 0x4000000) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x5a9282) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:09 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, 0x0) 11:13:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="12f938000000000d31a16341c2375d2204007fe0eb1a40f6dc29847d9c1779aad68a7071e8c14054d2d9fe0ca70099bc9b745c99ac7c1721e226d9f3fbebd39f1be717eed62386e1da94e2b6a35b0a5a07431a7d0cef776ebf022a66f91fc9413327ce30bff9ef8a644979f4a0f6d8765542f614b2243a5e264e8c3136"], &(0x7f0000000180)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r4 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0x150, 0x0, 0x1, [{{0x1, 0x2, 0x9, 0x0, 0x400, 0x4, {0x4, 0x3ff, 0xfff, 0x3, 0x1f, 0x8000, 0x230, 0x1, 0x0, 0x7e1, 0x9, 0x0, r4, 0x9, 0x20}}, {0x1, 0x8001, 0x3, 0x7, 'em1'}}, {{0x6, 0x3, 0x4, 0x83db, 0x40d, 0x2f9b, {0x3, 0x1, 0x20, 0x9, 0x4, 0x0, 0xfffffffffffffffb, 0x7, 0x4, 0x8, 0x1, r5, r7, 0x5}}, {0x0, 0x5, 0x4, 0xfffffffffffffffa, 'user'}}]}, 0x150) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 11:13:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xffffffffffffffe6, 0x7, 0x3d97}) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 623.596309][ T6608] input: syz1 as /devices/virtual/input/input77 [ 623.623642][ T6611] vhci_hcd: invalid port number 49 [ 623.642759][ T6608] FAULT_INJECTION: forcing a failure. [ 623.642759][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 623.697396][ T6608] CPU: 0 PID: 6608 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 623.699298][ T6611] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 [ 623.705672][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.723682][ T6608] Call Trace: [ 623.727320][ T6608] dump_stack+0x172/0x1f0 [ 623.731851][ T6608] should_fail.cold+0xa/0x15 [ 623.736807][ T6608] ? fault_create_debugfs_attr+0x180/0x180 [ 623.742612][ T6608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.749942][ T6608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.756372][ T6608] ? debug_smp_processor_id+0x3c/0x214 [ 623.762006][ T6608] ? ___might_sleep+0x163/0x280 [ 623.767294][ T6608] __should_failslab+0x121/0x190 [ 623.772483][ T6608] should_failslab+0x9/0x14 [ 623.777171][ T6608] __kmalloc+0x2e0/0x770 [ 623.781409][ T6608] ? mark_held_locks+0xf0/0xf0 [ 623.786692][ T6608] ? _parse_integer+0x190/0x190 [ 623.791544][ T6608] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 623.797374][ T6608] tomoyo_realpath_from_path+0xcd/0x7b0 [ 623.803266][ T6608] ? tomoyo_path_number_perm+0x193/0x520 [ 623.809221][ T6608] tomoyo_path_number_perm+0x1dd/0x520 [ 623.814870][ T6608] ? tomoyo_path_number_perm+0x193/0x520 [ 623.821162][ T6608] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 623.827495][ T6608] ? perf_trace_lock_acquire+0xf5/0x530 [ 623.833044][ T6608] ? __kasan_check_read+0x11/0x20 [ 623.838246][ T6608] ? __fget+0x384/0x560 [ 623.842573][ T6608] ? ksys_dup3+0x3e0/0x3e0 [ 623.847657][ T6608] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 623.854450][ T6608] ? fput_many+0x12c/0x1a0 [ 623.859043][ T6608] tomoyo_file_ioctl+0x23/0x30 [ 623.864105][ T6608] security_file_ioctl+0x77/0xc0 [ 623.869134][ T6608] ksys_ioctl+0x57/0xd0 [ 623.873835][ T6608] __x64_sys_ioctl+0x73/0xb0 [ 623.878427][ T6608] do_syscall_64+0xfd/0x6a0 [ 623.883167][ T6608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.889612][ T6608] RIP: 0033:0x4598e9 [ 623.893966][ T6608] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.915335][ T6608] RSP: 002b:00007f6843c89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.924355][ T6608] RAX: ffffffffffffffda RBX: 00007f6843c89c90 RCX: 00000000004598e9 [ 623.932325][ T6608] RDX: 0000000000000000 RSI: 0000000040044581 RDI: 0000000000000004 11:13:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 623.940694][ T6608] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.949503][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6843c8a6d4 [ 623.957853][ T6608] R13: 00000000004c1a44 R14: 00000000004d4d88 R15: 0000000000000005 11:13:10 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x110, 0x6, 0x0, &(0x7f0000000200)=0xffffffffffffff1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)="b708acf789a4e1baf74eeec3bba2b9cf695cd4320267e1d832f31c0017f90ddfe2b31b8584cdccbcbe3a03358975bfa29bfa1d556432f89b815cf5ce17c521bf8b7b364c9b5321fb0796a20638241226e6bdb46afa01b9c2761195bd9b136ce7760ba311f708a731def1e8"}, 0x10) 11:13:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x5, 0x1f}, {0x1, 0x1}]}, 0x14, 0x3) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 624.048685][ T6608] ERROR: Out of memory at tomoyo_realpath_from_path. 11:13:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000280)=""/202) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 11:13:10 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, 0x0) 11:13:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:10 executing program 5: r0 = socket$inet6(0xa, 0x8000b, 0xfffffffefffffffc) close(r0) socket$inet(0x2, 0x2000080001, 0x84) eventfd2(0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x8}, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000280)=""/202) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 624.269728][ T6737] input: syz1 as /devices/virtual/input/input78 [ 624.351197][ T6737] FAULT_INJECTION: forcing a failure. [ 624.351197][ T6737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.365238][ T6737] CPU: 1 PID: 6737 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 624.373227][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.384542][ T6737] Call Trace: [ 624.388994][ T6737] dump_stack+0x172/0x1f0 [ 624.395083][ T6737] should_fail.cold+0xa/0x15 [ 624.400091][ T6737] ? fault_create_debugfs_attr+0x180/0x180 [ 624.406508][ T6737] ? lock_downgrade+0x920/0x920 [ 624.411752][ T6737] should_fail_alloc_page+0x50/0x60 [ 624.417083][ T6737] __alloc_pages_nodemask+0x1a1/0x900 [ 624.425339][ T6737] ? __alloc_pages_slowpath+0x2520/0x2520 [ 624.432460][ T6737] ? kernel_text_address+0x73/0xf0 [ 624.440312][ T6737] ? debug_smp_processor_id+0x3c/0x214 [ 624.446349][ T6737] ? fault_create_debugfs_attr+0x180/0x180 [ 624.453325][ T6737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.461643][ T6737] cache_grow_begin+0x90/0xd20 [ 624.466768][ T6737] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 624.473025][ T6737] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 624.479521][ T6737] __kmalloc+0x6b2/0x770 [ 624.484751][ T6737] ? mark_held_locks+0xf0/0xf0 [ 624.490731][ T6737] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 624.498478][ T6737] tomoyo_realpath_from_path+0xcd/0x7b0 [ 624.505554][ T6737] ? tomoyo_path_number_perm+0x193/0x520 [ 624.511864][ T6737] tomoyo_path_number_perm+0x1dd/0x520 [ 624.517949][ T6737] ? tomoyo_path_number_perm+0x193/0x520 [ 624.524611][ T6737] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 624.531382][ T6737] ? perf_trace_lock_acquire+0xf5/0x530 [ 624.540378][ T6737] ? __kasan_check_read+0x11/0x20 [ 624.546855][ T6737] ? __fget+0x384/0x560 [ 624.553654][ T6737] ? ksys_dup3+0x3e0/0x3e0 [ 624.561950][ T6737] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 624.570281][ T6737] ? fput_many+0x12c/0x1a0 [ 624.575162][ T6737] tomoyo_file_ioctl+0x23/0x30 [ 624.580210][ T6737] security_file_ioctl+0x77/0xc0 [ 624.585710][ T6737] ksys_ioctl+0x57/0xd0 [ 624.590656][ T6737] __x64_sys_ioctl+0x73/0xb0 [ 624.595424][ T6737] do_syscall_64+0xfd/0x6a0 [ 624.600779][ T6737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.608116][ T6737] RIP: 0033:0x4598e9 [ 624.612771][ T6737] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.637458][ T6737] RSP: 002b:00007f6843c89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:13:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x4c65, 0x28800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x73ffc79572abb66b}, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x200040, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100000001, 0xc440) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0xfffffffffffffff7, 0x7ff, 0x3, 0x9, 0xffff, 0x4a, 0x8, 0x7, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x7, 0xc, 0x6, 0x1ff, 0x7f, 0x20, 0x7, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r7, 0x0, "b5e9b8babcffa6275e896469490c5a1b303c68c82a11ed635926c3faeb6720e91e433c7df18ce1a22cfe21282b8472c28eb686a6f0b299faaf7fecd072d3ea6dac1e710244f06e65d7dbaeaaa339d020ea4f073cccf70b433650d675a09a76161ae3afe65474f011f73c4b0277604a3b71f850ff8884d93ad8e39557ea093e202887b94e1e8d61cb76c154c0a36c6c3fd12ca0bc2dd11fd5e756e410bd321721b0307d0e53c16b9ed150466e992695d6e259709c6dd2d6246406af787086d7ee2b8cc418d7603c"}, &(0x7f0000000180)=0xffffff9b) [ 624.647056][ T6737] RAX: ffffffffffffffda RBX: 00007f6843c89c90 RCX: 00000000004598e9 [ 624.655926][ T6737] RDX: 0000000000000000 RSI: 0000000040044581 RDI: 0000000000000004 [ 624.665112][ T6737] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 624.673442][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6843c8a6d4 [ 624.681698][ T6737] R13: 00000000004c1a44 R14: 00000000004d4d88 R15: 0000000000000005 11:13:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2, 0x100000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000280)=""/202) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 11:13:10 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, 0x0) [ 625.058818][ T6773] input: syz1 as /devices/virtual/input/input79 11:13:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:11 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @dev={0xfe, 0x80, [], 0xb}, 0x5}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000180)=0x8) 11:13:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000280)=""/202) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 11:13:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044581, 0x0) [ 625.278141][ T6782] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:11 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x6) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x146, "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"}, &(0x7f0000000180)=0x14e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80001, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0) 11:13:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x8}, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:11 executing program 3 (fault-call:7 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 625.469003][ T6788] input: syz1 as /devices/virtual/input/input80 11:13:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) close(r3) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ca32ec948545e396e12ddad9f914faa24fec2e4c563585d8232e09b8478241fea5b67708c4ea552e1c02b754f2119ff91771f28e64195e8076dca3e292f7562163b6091da1853aad6297261fa8aef0ff316c78f558a294b5db4bbd976a379bf95c5bc3057778549fb3107179247237617264ad77bbf6d30a126c0f3b874a01aa36d50689aa35ba7fb4fdd88f72779718d09c8de9bfec2b85ea425bb99645f2e8cabaa4b2b1c01e640c83f709ff2ec92541799920c1fbd53b663bd32dab9630753aed640df8c7"], &(0x7f0000000180)=0x8) [ 625.619855][ T6800] FAULT_INJECTION: forcing a failure. [ 625.619855][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 625.685356][ T6800] CPU: 1 PID: 6800 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 625.692987][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.703472][ T6800] Call Trace: [ 625.707055][ T6800] dump_stack+0x172/0x1f0 [ 625.711723][ T6800] should_fail.cold+0xa/0x15 [ 625.716453][ T6800] ? fault_create_debugfs_attr+0x180/0x180 [ 625.722511][ T6800] ? page_to_nid.part.0+0x20/0x20 [ 625.727756][ T6800] ? ___might_sleep+0x163/0x280 [ 625.732614][ T6800] __should_failslab+0x121/0x190 [ 625.737754][ T6800] should_failslab+0x9/0x14 [ 625.742266][ T6800] __kmalloc+0x2e0/0x770 [ 625.746514][ T6800] ? sock_kmalloc+0xc6/0x120 [ 625.751187][ T6800] sock_kmalloc+0xc6/0x120 [ 625.755605][ T6800] af_alg_alloc_tsgl+0x2db/0x3d0 [ 625.760681][ T6800] af_alg_sendmsg+0x76f/0x1420 [ 625.765540][ T6800] aead_sendmsg+0x104/0x150 [ 625.770042][ T6800] ? crypto_aead_copy_sgl+0x120/0x120 [ 625.775467][ T6800] sock_sendmsg+0xd7/0x130 [ 625.779969][ T6800] ___sys_sendmsg+0x803/0x920 [ 625.784646][ T6800] ? copy_msghdr_from_user+0x440/0x440 [ 625.790283][ T6800] ? __fget+0xa3/0x560 [ 625.794347][ T6800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.800724][ T6800] ? __fget+0x384/0x560 [ 625.804982][ T6800] ? ksys_dup3+0x3e0/0x3e0 [ 625.809401][ T6800] ? __fget_light+0x1a9/0x230 [ 625.814073][ T6800] ? __fdget+0x1b/0x20 [ 625.818135][ T6800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.824425][ T6800] __sys_sendmsg+0x105/0x1d0 [ 625.829271][ T6800] ? __sys_sendmsg_sock+0xd0/0xd0 [ 625.834339][ T6800] ? switch_fpu_return+0x1fa/0x4f0 [ 625.839449][ T6800] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 625.845514][ T6800] __x64_sys_sendmsg+0x78/0xb0 [ 625.850279][ T6800] do_syscall_64+0xfd/0x6a0 [ 625.854894][ T6800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.860822][ T6800] RIP: 0033:0x4598e9 [ 625.864716][ T6800] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:13:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x2, 0x0) [ 625.884402][ T6800] RSP: 002b:00007fee2e4bcc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.892810][ T6800] RAX: ffffffffffffffda RBX: 00007fee2e4bcc90 RCX: 00000000004598e9 [ 625.901519][ T6800] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 625.909485][ T6800] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 625.917451][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee2e4bd6d4 [ 625.925414][ T6800] R13: 00000000004c782e R14: 00000000004dd0e0 R15: 0000000000000005 11:13:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x800) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="018000000000000002004e207f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e22ac14142500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414aa0000000000000000000000000000000000000000000000cc47c3487d3f96e400"/524], 0x210) close(r0) modify_ldt$read(0x0, &(0x7f0000000040)=""/122, 0x7a) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 625.973628][ T6807] input: syz1 as /devices/virtual/input/input81 11:13:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xc, @loopback, 0x4e20, 0x2, 'fo\x00', 0x8, 0x6, 0x62}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dc980d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000990c1f4000000000000ec18ae5adc8d709b8026a00000000300000000000000582f45cff9743fabae36fdfa1810611e70fd65821b09654f2fe4fa59a835ee66e0000002f53953ffee03d79dc442c6bb44959fb7355a39783527e53cac7c5a3e718c431bb2df8753e87e4e118af494737671dec75337192667c186d0a9f13e5946ca8cebf1a96c37a624119904b455d1b0813ee7f7"], 0x48}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100000001, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000000c0)=0x100, 0x4) [ 626.097633][ T6809] input: syz1 as /devices/virtual/input/input82 [ 626.111621][ T6814] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 11:13:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5, 0x0) 11:13:12 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x7) close(r0) socket$inet(0x2, 0x2000080001, 0x84) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x101, 0x600) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000001c0)) [ 626.192313][ T6814] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 11:13:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x2, 0x0) 11:13:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x28a0dffa, 0x20001) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x54) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="4eab09066bf39c2d03b810f42bcf8c82c3f58d3865ff52d16fa167dd6d88eeebcb57a08963e26487cc62c87a4d698182aec1612162264952a9df9d53b5f209a1f7995d26357b6a7b8dd8ba2b6c988a94972831ff18d5f17175ac6add06b0f1fca35d42b45325da073900000000000000d9ed088d625280ca996e7f2566a25e1ea225c740643a45ee14f2571d0a7ed082dde1f63616e534e3f3f0a4d5bbac0edfd10fd91d0584a630271bf8924d926c939e8768e76b450b98e022590d90db273236b4a8e4885b5dd2153ac9b100000000000000000000471680cf3352b322229152e540865d6682c484dd577eb870ea7b3c4035e16d340f31fa16505c90206b6464be9ec20000000000000058f8b6ce0a3942c61697a5e73349ebe5fa8adc5329482f2b1b68e04d62fc0737bdeff1034058f91b3bbfd6bb981d53c64a2e930effed2f4ed14c7d1a6d57d181f6e8164c8f9f87df3645f19c4b537aa1df03c7e86c1f898599a876bc8c147b8fd7439d88c304007c3bda11f5508a61f8020ba72aec0d0c207a8613866e725ac6605956d3b1d3c62f40", @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdf2504"], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x4040001) pselect6(0x40, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x1}, &(0x7f0000000500)={0x400, 0x68b, 0x400, 0x3, 0x4, 0x3, 0x7fffffff}, &(0x7f0000000540)={0x7, 0x3ff, 0x2, 0xffffffff, 0x6, 0x4, 0x6, 0x3}, &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={0x6}, 0x8}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81010080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x263}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffff000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) [ 626.269218][ T6825] input: syz1 as /devices/virtual/input/input83 [ 626.298546][ T6827] vhci_hcd: invalid port number 47 [ 626.310655][ T6827] vhci_hcd: default hub control req: 2f64 v7665 i002f l9063 [ 626.365133][ T6829] input: syz1 as /devices/virtual/input/input84 [ 626.406064][ T6834] input: syz1 as /devices/virtual/input/input85 [ 626.462095][ T6831] vhci_hcd: invalid port number 47 [ 626.468723][ T6831] vhci_hcd: default hub control req: 2f64 v7665 i002f l9063 11:13:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x10, 0x0) 11:13:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x2, 0x0) [ 626.668116][ T6848] input: syz1 as /devices/virtual/input/input86 [ 626.691710][ T6897] input: syz1 as /devices/virtual/input/input87 11:13:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:12 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x9, "e490ed2c0743373cc26d4f716fc6b93b562babacb5d6e90d6a0b3d46c31aba15", 0x4, 0x1}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/de\x00\x00\xf7\xff\xff\xff\xff\xff\xff\a\x00\x15\x00', 0x40000fffffd, 0x10000) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r1) socket$inet(0x2, 0x2000080001, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000d06000)=0xfffffffffffffffd, 0x40) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRESOCT=r5, @ANYPTR], @ANYBLOB="ffff0780"], &(0x7f0000000180)=0x2) 11:13:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x0) open_tree(r1, &(0x7f0000000f80)='.\x00', 0x901b7ace2a88ada9) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f00000004c0)=""/38, 0x26}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/151, 0x97}], 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000980)=""/215, 0xd7}], 0x2, &(0x7f0000000ac0)=""/75, 0x4b}}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/22, 0x16}], 0x1, &(0x7f0000000c40)=""/5, 0x5}, 0x3ff}, {{&(0x7f0000000c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/199, 0xc7}, {&(0x7f0000000ec0)=""/190, 0xbe}, {&(0x7f0000000f80)}], 0x4, &(0x7f0000001000)=""/237, 0xed}, 0x3}, {{&(0x7f0000001100)=@rc, 0x80, &(0x7f0000001300)=[{&(0x7f0000001180)=""/181, 0xb5}, {&(0x7f0000001240)=""/114, 0x72}, {&(0x7f00000012c0)=""/4, 0x4}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x1d27}, {{&(0x7f0000002480)=@pptp, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/61, 0x3d}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/88, 0x58}, {&(0x7f0000002640)=""/124, 0x7c}], 0x4}, 0x8000}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/227, 0xe3}, {&(0x7f0000002800)=""/175, 0xaf}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/226, 0xe2}, {&(0x7f00000039c0)=""/44, 0x2c}], 0x5, &(0x7f0000003a80)=""/144, 0x90}, 0x200}, {{&(0x7f0000003b40)=@isdn, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003bc0)=""/40, 0x28}, {&(0x7f0000003c00)=""/218, 0xda}, {&(0x7f0000003d00)=""/249, 0xf9}], 0x3, &(0x7f0000003e40)=""/70, 0x46}, 0x2}], 0x8, 0x21, &(0x7f00000040c0)={0x0, 0x1c9c380}) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) io_submit(r3, 0x1, &(0x7f0000004180)=[&(0x7f0000004140)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, r4, &(0x7f0000004100)="8561862ad0d0840b2630319da4faa9ca0d82162f3788e4b0922d9c06d8886414ac7896c67c", 0x25, 0xffffffff, 0x0, 0x3, r5}]) r6 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r6, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) connect$tipc(r6, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x422, 0x0) 11:13:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x28a0dffa, 0x20001) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x54) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdf2504"], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x4040001) pselect6(0x40, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x1}, &(0x7f0000000500)={0x400, 0x68b, 0x400, 0x3, 0x4, 0x3, 0x7fffffff}, &(0x7f0000000540)={0x7, 0x3ff, 0x2, 0xffffffff, 0x6, 0x4, 0x6, 0x3}, &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={0x6}, 0x8}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81010080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x263}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffff000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) [ 626.894803][ T6958] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 626.933271][ T6961] vhci_hcd: invalid port number 97 [ 626.948699][ T6967] input: syz1 as /devices/virtual/input/input89 [ 626.971178][ T6961] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000100)=0x78) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000000c0)={0x8e, &(0x7f00000001c0)=""/142}) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000f4ff"], &(0x7f0000000180)=0x8) [ 627.048394][ T6961] vhci_hcd: invalid port number 97 11:13:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e21, @rand_addr=0x4}}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 627.073748][ T6961] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4b67, 0x0) [ 627.162052][ T6961] vhci_hcd: invalid port number 97 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) close(r1) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 627.190287][ T6961] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 627.219736][ T6979] vhci_hcd: invalid port number 97 [ 627.232987][ T6982] input: syz1 as /devices/virtual/input/input91 11:13:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x28a0dffa, 0x20001) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x54) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdf2504"], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x4040001) pselect6(0x40, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x1}, &(0x7f0000000500)={0x400, 0x68b, 0x400, 0x3, 0x4, 0x3, 0x7fffffff}, &(0x7f0000000540)={0x7, 0x3ff, 0x2, 0xffffffff, 0x6, 0x4, 0x6, 0x3}, &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={0x6}, 0x8}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81010080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x263}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffff000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) 11:13:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x9, 0x10001, 0x2c, 0x2}, 0x14) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 627.260771][ T6979] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xff, @mcast2, 0x7}, 0x1c) 11:13:13 executing program 1: r0 = socket$tipc(0x1e, 0x6, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='batadv0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 627.344137][ T6991] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 627.370572][ T6993] input: syz1 as /devices/virtual/input/input92 [ 627.423053][ T6991] vhci_hcd: default hub control req: 0a00 v204e i0000 l65280 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000180)=0xff99) 11:13:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4b6b, 0x0) 11:13:13 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$unix(r3, &(0x7f0000000080)=@abs, &(0x7f00000001c0)=0x6e, 0x1800) socket$inet6(0xa, 0x0, 0xcc) close(r1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400ea4c"], &(0x7f0000000180)=0x8) [ 627.604654][ T7010] input: syz1 as /devices/virtual/input/input93 11:13:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setattr(r0, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = getpgrp(r0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000100)={&(0x7f00000000c0)="316237cb1c030a64504cc040ceaed9d6a9f2c319846086909b8eaa653450cb9363938373740721836e73", 0x2a}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x10}}, 0x0) r2 = syz_open_dev$vcsn(0xfffffffffffffffe, 0x44, 0x8004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r3, r4, r0, r0, r1, r5, 0xffffffffffffffff, r1, r1, r1], 0xa) [ 627.780325][ T7013] input: syz1 as /devices/virtual/input/input94 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000009a4fe2110ca1caaba170acf436da780bb4f08000000000000005f4c09d709e7f51d1adf3639472b32a8f497b7ec8ace744931a987d08b2d1c426e8e"], &(0x7f0000000180)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) accept4(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80, 0x80000) 11:13:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4c01, 0x0) 11:13:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 627.947410][ T7042] input: syz1 as /devices/virtual/input/input95 11:13:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80400) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff000, 0x2, 0x9, 0x0, 0x96, 0x100000001}) 11:13:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setattr(r2, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x200, 0x2, 0x7, 0x2, 0x0, 0x8, 0x4, 0x0, 0x5, 0x87, 0x1, 0x7, 0x3, 0x0, 0x4, 0x100000000, 0x9, 0x616, 0x3, 0x1f, 0x1000, 0x5, 0x7ff, 0xff, 0xffffffffffffff7f, 0x7f, 0x7, 0x100, 0x1, 0x3, 0x9, 0x6, 0x6, 0xdd, 0x7, 0x7fffffff, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0xffff}, 0x8c05, 0x1, 0x9, 0x5, 0x8001, 0x6, 0x80000001}, r2, 0x3, r3, 0x2) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) [ 628.039607][ T7049] input: syz1 as /devices/virtual/input/input96 11:13:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2846c1, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={r1, r2+30000000}, &(0x7f0000000140)) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x101) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r5, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 628.111319][ T7055] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4c81, 0x0) 11:13:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 628.244298][ T7062] input: syz1 as /devices/virtual/input/input97 11:13:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) pipe(&(0x7f0000000040)) close(r1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x180000000000, 0x4, 0x0, 0x6, 0x40}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c4000000b475f50a562ce3f4cde565b0610e2879e08315d4b9bdb518e0970574ae50b97a3e3adca27a1f564efc922d079b1abbd18f695307410000000000000000000000000000c95f2b9e623b87c9d2a8e3828095a22c6e87cdfe021832b8d97738c394ea66647d844154761d5a0b4de17c720970b3d5dcf45629b0e274778ead90d9d5cf0100aaa86851ef8a8cdbae6ba112e8c16fad124ac0495bc69a4784fba2ff2e419f7ff350ec6699dc87a64c40f096d5b6c54a57bd5d9b4b38c16e30253631ace6ab6c53"], &(0x7f0000000180)=0xcc) [ 628.289167][ T7067] vhci_hcd: invalid port number 97 [ 628.318352][ T7067] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 628.348672][ T7066] input: syz1 as /devices/virtual/input/input98 11:13:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xd4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000180)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) 11:13:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5402, 0x0) 11:13:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0x0, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @multicast1}, &(0x7f0000000100)=0xc) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000)) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@mcast1, 0x6c, r3}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000004"], &(0x7f0000000180)=0x8) 11:13:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x0, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 628.558646][ T7179] input: syz1 as /devices/virtual/input/input99 [ 628.656603][ T7187] input: syz1 as /devices/virtual/input/input100 11:13:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r3, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x3000) 11:13:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x540f, 0x0) [ 628.820506][ T7196] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 628.880876][ T7200] input: syz1 as /devices/virtual/input/input101 [ 629.007685][ T7212] vhci_hcd: invalid port number 97 [ 629.012835][ T7212] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 629.065239][ T7200] input: syz1 as /devices/virtual/input/input102 [ 629.083576][ T7071] vhci_hcd: invalid port number 97 [ 629.088882][ T7071] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7ba200009a00", 0x8}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x17}, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) 11:13:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x0, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x309200, 0x3) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x1, 0x4}) close(r0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000000"], &(0x7f0000000180)=0x8) 11:13:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5421, 0x0) 11:13:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f00000002c0)={0x2, 0x3020000, 0x0, 0x90, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x8000, 0x0, 0x7, 0x8, 0x4, 0x1, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x1, 0x5, 0x7, r3}, &(0x7f0000000280)=0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0xe, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="7200cf4a8d3c2318cc7344a620e945e3930fdde9d8a1103b66aa9a578fd49b74096ece4510cc719e373f80c19360236ad35ef3dd5b59309cf3684c59714c1dd617313305a0b9868cbf57d33a46da5a2a34be33932fcd1dfde5c9247c0081825d8a2d03cb"], &(0x7f0000000180)=0x8) r5 = open(&(0x7f0000000000)='./file0\x00', 0x220800, 0x80) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x8, 0x10, 0x2}) 11:13:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', r4}) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 629.252562][ T7223] input: syz1 as /devices/virtual/input/input103 [ 629.368721][ T7232] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@iv={0x38, 0x117, 0x2, 0x1e, "943a0af5acf4ad2e111775dcd6fadb28e8aea24c944e099bc1d1300a1ee6"}], 0x38}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5427, 0x0) [ 629.415707][ T7229] vhci_hcd: invalid port number 97 [ 629.420881][ T7229] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 629.439061][ T7232] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x0, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 629.464481][ T7236] vhci_hcd: invalid port number 108 [ 629.476740][ T7241] input: syz1 as /devices/virtual/input/input105 [ 629.503739][ T7236] vhci_hcd: default hub control req: 2e2f v6966 i006c l48 [ 629.534473][ T7243] vhci_hcd: invalid port number 97 11:13:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000001c0)=0x40, &(0x7f0000000240)=0x4) sendmsg$nl_route(r3, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1a, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) flistxattr(r0, &(0x7f0000000280)=""/95, 0x5f) [ 629.559522][ T7243] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 629.590118][ T7249] input: syz1 as /devices/virtual/input/input106 11:13:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000040)={@remote, @broadcast, @remote}, 0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 11:13:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5450, 0x0) [ 629.664938][ T7254] vhci_hcd: invalid port number 97 [ 629.678318][ T7255] netlink: 'syz-executor.1': attribute type 26 has an invalid length. [ 629.695386][ T7254] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x0, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 629.760721][ T7260] netlink: 'syz-executor.1': attribute type 26 has an invalid length. [ 629.845261][ T7265] input: syz1 as /devices/virtual/input/input107 11:13:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2, 0xfffffffffffffdf9, "0402fe00000000"}, &(0x7f0000000180)=0x2e3) 11:13:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="f0a4f7542e9489f6f5714ed11861c68b00489e09bc30c1214d038e14ec21e33345a2366cb778d605e0723f9057f4f1fcdfddec99ccf3dbf93f70b08435c0c372ec66694bb027c50b971e8971895c", 0x4e) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 629.979759][ T7273] input: syz1 as /devices/virtual/input/input108 11:13:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) fsetxattr$security_evm(r1, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000340)=@v2={0x0, 0x1, 0x0, 0x4, 0x1000, "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"}, 0x100a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) pread64(r1, &(0x7f0000000180)=""/255, 0xff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040)=0x5, 0x4) 11:13:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x882}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r5, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r6, 0x2}, 0x8) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r8, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r8, &(0x7f0000000400)="607e87f3c9786c250516df19d51f4c9b87aef441960d96c01c88672fb27d5da231f0a5522bf2873ae207a183a6c48ef980fa1fb5a80f5b5ee2dca2a346f57dd314b596dc2af1eb45e0a9396a65702ed06578b6bf78c27ba0c734e580f1cfdef6d3d435bbc869e61c653247941316b2a9ab09c35a680b86ef3361d93be76fba67c913a666792bd7430c7f0ba8fb0e552a45d28955f59fb558c598afa09b9b7ba3d4bdaa3ed7a42c05680b43f2185ca9fdf745024c2c5679551a3e66e5754bbb082d42768f032bea9f1828f4d69e531be3ffce7e", &(0x7f0000000500)=""/254}, 0x18) 11:13:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x0, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5451, 0x0) [ 630.189350][ T7288] vhci_hcd: invalid port number 97 [ 630.203375][ T7288] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 630.234537][ T7289] input: syz1 as /devices/virtual/input/input109 11:13:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000100)={0x3, 0x8, 0xffffffffffffff81, 0x6, 0x6}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) connect$netlink(r3, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4008000b}, 0xc) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0xffffffffffffefff}}], 0x18}, 0x0) [ 630.334342][ T7291] vhci_hcd: invalid port number 97 11:13:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x0, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 630.364657][ T7291] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 630.373347][ T7296] vhci_hcd: invalid port number 97 [ 630.386076][ T7296] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 630.411219][ T7288] vhci_hcd: default hub control req: 0000 v0000 i0003 l0 [ 630.435465][ T7294] input: syz1 as /devices/virtual/input/input110 [ 630.447091][ T7288] vhci_hcd: invalid port number 97 [ 630.470341][ T7288] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 630.530751][ T7303] vhci_hcd: invalid port number 97 11:13:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5452, 0x0) 11:13:16 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x40, "c1c281574550b55a297b96546fc0fa902d46277debb203bb1ae3f90f9d097186", 0x200, 0x4a, 0x1, 0x2b, 0x4}) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40000) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f00000005c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x10) [ 630.568365][ T7303] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 630.600762][ T7309] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) [ 630.630570][ T7313] input: syz1 as /devices/virtual/input/input111 11:13:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) arch_prctl$ARCH_SET_GS(0x1001, 0x101) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r4, 0x8}, {r5, 0x20}, {0xffffffffffffffff, 0x208c}, {r6, 0x4000}], 0x4, 0xd9c) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) accept$alg(r3, 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 630.718841][ T7317] input: syz1 as /devices/virtual/input/input112 11:13:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x204000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x7, 0x7f, 0x7}) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000140)) r4 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0xffffffffffffe55, &(0x7f0000000480)=[@mark={{0xffffffee}}], 0x18}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r1, r1, 0x8, 0x1}, 0x10) 11:13:16 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='selinuxfs\x00*\x97jhx\x86H\xcd\xce\xbeR\x9aY\xbbQ\xd60u', 0xd1b706f3d94d7a8c, 0x0) r0 = open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7bc75b0a747e294f, 0x4) fchdir(r0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendfile(r1, r2, &(0x7f0000000040), 0x7ff) renameat2(r1, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x2) 11:13:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x5460, 0x0) 11:13:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 630.971785][ T7332] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 630.985525][ T7334] input: syz1 as /devices/virtual/input/input113 11:13:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x1000, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x80000000000000, 0x0, 0x7, 0x0, 0x1e}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 631.040195][ T7332] vhci_hcd: invalid port number 97 [ 631.078570][ T7332] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x18) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x98f904, 0x2, @name="df5833da855ed2f9ca929d5188c562d94eba468d72082f603e7fe3c4f25169ea"}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x4) socket(0x9, 0x4, 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) [ 631.161206][ T7343] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 631.200210][ T7341] vhci_hcd: invalid port number 97 [ 631.210269][ T7347] input: syz1 as /devices/virtual/input/input114 [ 631.247021][ T7341] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x6364, 0x0) 11:13:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') process_vm_readv(0x0, &(0x7f0000001900)=[{&(0x7f0000001500)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r7, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r7, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) close(r7) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2, 0xa510}, {r0, 0x4000}, {r3, 0x120}, {r4, 0x4000}, {r5, 0x4}, {0xffffffffffffffff, 0x8000}, {r6, 0x442}, {r7, 0x100}, {r1, 0x1000}], 0x9, &(0x7f0000000180)={r8, r9+10000000}, &(0x7f00000001c0)={0xffffffffffff0001}, 0x8) preadv(r1, &(0x7f00000017c0), 0x2e7, 0x0) 11:13:17 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9410}, r0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x20000018, &(0x7f0000001440)=[&(0x7f0000000100)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:17 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002700)=0x14) bind$packet(r1, &(0x7f0000002740)={0x11, 0x1, r2, 0x1, 0x6}, 0x14) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x81, 0x68731768, 0x1, 0x1, 0x7, 0x7, 0x3f8, 0x1, 0x1f, 0x200, 0x100, 0x1, 0x10001, 0x6, 0x4, 0x5}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x0, 0x2080, 0x6ae0}) [ 631.430480][ T7455] input: syz1 as /devices/virtual/input/input115 [ 631.575192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.581020][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 631.586877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.592672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 631.598570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.604353][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 631.610217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.615998][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 631.650686][ T7455] input: syz1 as /devices/virtual/input/input116 11:13:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8912, 0x0) 11:13:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 631.830976][ T7580] input: syz1 as /devices/virtual/input/input117 11:13:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2920a000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x128, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x586}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1bb9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4a2e2fe125a60fa8}, 0x22010) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r5, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4a0000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x80000000, 0x1, 0x401, 0x5, 0x10001}, 0xc) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 631.972241][ T7587] input: syz1 as /devices/virtual/input/input118 11:13:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) [ 632.047387][ T7594] vcan0: MTU too low for tipc bearer [ 632.057046][ T7594] Enabling of bearer rejected, failed to enable media 11:13:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8913, 0x0) 11:13:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) 11:13:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) [ 632.202347][ T7602] input: syz1 as /devices/virtual/input/input119 [ 632.227367][ T7604] vcan0: MTU too low for tipc bearer [ 632.258084][ T7604] Enabling of bearer rejected, failed to enable media [ 632.286038][ T7609] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:18 executing program 5: prctl$PR_SET_SECCOMP(0x23, 0x5, &(0x7f0000000040)={0x0, 0x0}) 11:13:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8933, 0x0) 11:13:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00') setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)="5b802f1cd7da9df477ef611dcfdfae5e11486309c183a138b772b040b515ea73a487d5df42c386746598379e9f01f83de0bb1be08a5fc8954d2c59ea5a329f482e1f236713b52266818c440cc34fe487608ab34aeb75b453af2911ef11300f80d7c147de53b7db24ec836b0b642151cc35d3021aeb6b5941182126e74194b11bbf9ee8441cde774b5ae1eda54ff70de7c8fb733cec130c77d5e2a01deae39ca132f966f3d10e3328095ada1b58ec7694388f32bb7a46dbdc77363ab87c95fd4a46fd3a3b43a8dd717097ac14f03dd4ee76a2a36e737cd176be8e6d60783b", 0xde) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 632.460704][ T7614] input: syz1 as /devices/virtual/input/input121 11:13:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) [ 632.608278][ T7631] input: syz1 as /devices/virtual/input/input122 11:13:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x1000) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = accept4$alg(r2, 0x0, 0x0, 0x181800) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x89e0, 0x0) 11:13:18 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x71) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3, 0x8, 0x5, 0x1, 0x5b5, 0x2, 0x8]}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:18 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000340), 0x0) 11:13:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 632.781461][ T7733] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 632.822411][ T7735] input: syz1 as /devices/virtual/input/input123 [ 632.824624][ T7733] vhci_hcd: invalid port number 97 11:13:18 executing program 5: mlockall(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x0, 0x11, r1, 0x0) [ 632.869723][ T7733] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 632.929631][ T7742] input: syz1 as /devices/virtual/input/input124 [ 632.963975][ T7733] vhci_hcd: invalid port number 97 [ 632.987933][ T7733] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:19 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 633.042534][ T7733] vhci_hcd: invalid port number 97 11:13:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xae01, 0x0) 11:13:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x4000000000003, 0x100000000006) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 11:13:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 633.110783][ T7733] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 633.150089][ T7858] input: syz1 as /devices/virtual/input/input125 11:13:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x86400) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 633.260634][ T7870] input: syz1 as /devices/virtual/input/input126 11:13:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xae41, 0x0) 11:13:19 executing program 5: r0 = socket$inet(0x10, 0x4000000000003, 0x100000000006) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 11:13:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 633.522019][ T7884] input: syz1 as /devices/virtual/input/input127 [ 633.616206][ T7891] vhci_hcd: invalid port number 97 [ 633.653830][ T7891] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r0, 0x0) 11:13:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0xdc9}, @op={0x18}, @iv={0xe8, 0x117, 0x2, 0xd2, "0aa21bed4815ab3c55a43906d7e4ee70a9751ac2c0cb29f61c245d5044d2f438e0ed360938f66311c68261aea6f66afa63641c3ff94b334b95936ec84d7898054c51d1896afe6880c34b9e00fdec4213a8a65916fc792b4dd0dcbc070f2a69726a98e89aaa416ce5c1454deb7b7efab3d4aa63d5b7d701d15fb5f51fb9aff7e31c4e4167cf290f8aa3a94bc43a5d12015d41ce374416da12ef944b5fc43e390789ca43d7f1709bc7109b99e33bc338abb991c9029f324fba09fbaecfc081699f270feabdcaa75536249edea83008d1a1c1c9"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x130}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r4 = socket$inet_sctp(0x2, 0xb, 0x84) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r6, 0x4) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0xf, 0x0, r2, &(0x7f0000000340), 0x0, 0xfffffffffffffff9}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xae80, 0x0) 11:13:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, 0x0, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xffffffffffffffeb) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffff) [ 633.878550][ T7904] vhci_hcd: invalid port number 97 [ 633.883704][ T7904] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 633.938990][ T7904] vhci_hcd: invalid port number 97 [ 633.975404][ T7898] input: syz1 as /devices/virtual/input/input129 [ 633.983395][ T7904] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0)) 11:13:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xae9a, 0x0) 11:13:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, 0x0, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="71e67a15cdf0311cfcf33a52a7d86bd1a62d1e98a17025fde2e99e4bc1438b0e9b3295c4a0b9d4362f2f75b9d2c26786d55de73028e073a758e074b6e6831a3e041d2514bd8c602a52d5df2a0a45e6249285f3a9ac09cc2835657e35d0d470a609fb68f9a4ddbc831ee528497413602c0ecc0b90681c06ac8a8e15dc8167e97991c02b2ecb8b98b1c604296609e703263497c6ed947e3d", 0x97) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 634.227786][ T8028] input: syz1 as /devices/virtual/input/input131 [ 634.264883][ T8034] vhci_hcd: invalid port number 97 [ 634.297922][ T8034] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 634.326528][ T8034] vhci_hcd: invalid port number 97 [ 634.342833][ T8034] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40021, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000240)) sched_setattr(r2, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = getpgrp(r2) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x10000}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) fdatasync(r0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0xfdef}]) close(r5) sendmsg$sock(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x100000000000037c, &(0x7f0000000480), 0xffffff36}, 0x0) [ 634.369849][ T8035] vhci_hcd: invalid port number 97 [ 634.385383][ T8037] input: syz1 as /devices/virtual/input/input132 11:13:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, 0x0, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 634.419094][ T8035] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044590, 0x0) [ 634.601307][ T8047] input: syz1 as /devices/virtual/input/input133 11:13:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0), 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2b8, 0x10800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x93, "7277f3", "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"}}, 0x110) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') getdents64(r0, &(0x7f00000012c0)=""/43, 0x2b) getdents64(r0, &(0x7f0000000000)=""/199, 0xc7) 11:13:20 executing program 5: ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4660}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002900}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16, @ANYBLOB="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"/322], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000380)={&(0x7f00000002c0)=""/125, 0x7d}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 635.012958][ T8085] input: syz1 as /devices/virtual/input/input135 11:13:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) socket$inet6(0xa, 0xa, 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040), 0x8}) io_submit(r2, 0x1fffff60, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ftruncate(r3, 0x8c) 11:13:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0), 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x400445a0, 0x0) 11:13:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fad81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) ftruncate(r0, 0x0) [ 635.283479][ T8188] input: syz1 as /devices/virtual/input/input137 11:13:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x1000000000000001, &(0x7f0000000480)}, 0x10088) 11:13:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = accept4$alg(r1, 0x0, 0x0, 0x37e22b898704513d) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:21 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffff) 11:13:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40045108, 0x0) 11:13:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0), 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 635.603933][ T8204] input: syz1 as /devices/virtual/input/input139 [ 635.611273][ T8205] vhci_hcd: invalid port number 97 [ 635.625304][ T8205] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x10000, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0xfffffffffffffff9, r1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214000000390009002d00", 0x22}], 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3096c3, 0x0) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502", 0x11) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924923aa, 0x0) [ 635.730557][ T8215] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 635.740065][ T8215] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. 11:13:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x1) 11:13:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40045431, 0x0) 11:13:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6", 0x2e) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 635.855715][ T8220] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 635.914144][ T8223] input: syz1 as /devices/virtual/input/input141 11:13:22 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_create(0xfff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 636.040594][ T8227] input: syz1 as /devices/virtual/input/input142 11:13:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6", 0x2e) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x400454ca, 0x0) [ 636.258582][ T8235] input: syz1 as /devices/virtual/input/input143 11:13:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x42000, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000140)='aead\x00', &(0x7f00000001c0)='aead\x00', &(0x7f0000000240)='aead\x00'], &(0x7f0000000540)=[&(0x7f00000002c0)='aegis128-generic\x00', &(0x7f0000000300)='guserloposix_acl_accesscgroupselinuxppp0\xefwlan1\x00', &(0x7f0000000340)='aegis128-generic\x00', &(0x7f00000004c0)='mime_type\x00', &(0x7f0000000500)='aead\x00'], 0x400) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) fsetxattr$security_evm(r2, &(0x7f0000000580)='security.evm\x00', &(0x7f00000005c0)=@ng={0x4, 0x6, "95c4f329aae136"}, 0x9, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6", 0x2e) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40049409, 0x0) 11:13:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffff) 11:13:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x84000, 0x0) write$P9_RLINK(r3, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) 11:13:22 executing program 2: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000100)) [ 636.580817][ T8249] input: syz1 as /devices/virtual/input/input145 11:13:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36", 0x45) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 636.734634][ T8259] input: syz1 as /devices/virtual/input/input146 11:13:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x7a1f0eb0b27f2329) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) 11:13:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) dup3(r0, r1, 0x0) 11:13:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40084503, 0x0) 11:13:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36", 0x45) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) [ 636.933870][ T8274] input: syz1 as /devices/virtual/input/input147 [ 636.970202][ T8278] Enabling of bearer rejected, failed to enable media [ 636.993317][ T8279] vhci_hcd: invalid port number 97 [ 637.020902][ T8282] Enabling of bearer rejected, failed to enable media [ 637.029341][ T8279] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 637.068070][ T8274] input: syz1 as /devices/virtual/input/input148 [ 637.099958][ T8273] vhci_hcd: invalid port number 97 11:13:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000080)=[{r1, 0x2}, {}, {}], 0x3, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f800000016001d030000000000000000000000000000e7ffffffffffffff000000000000000000000000ffffe000000200000000000000000000000000000000838c5d51ef7a9c35bb7af5b4f2a083d5573e3baaa0ece4b1bdc729e90d0f57cc778e044d57999b9fa7aa3dfb21cb64c7fb46a1163a06d7dbdb52c9e7ff2c555a1d46ad95990ddc96fefad192892ebd2cdc6d1a3590518a27f77487c5eaeefef2288b174c2a44c49cf0c5fc9a08bd7c53", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff4098fc05375862afb7a0d010ac7e7cae49d1bf32ce7304a006e2a3235e3829cb1a04a978a9c4c57e"], 0xf8}}, 0x0) 11:13:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40084504, 0x0) [ 637.116593][ T8273] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 637.181948][ T8293] input: syz1 as /devices/virtual/input/input149 [ 637.268279][ T8296] input: syz1 as /devices/virtual/input/input150 11:13:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040100002c00010700"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x104}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 11:13:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36", 0x45) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x2, [{r3, 0x0, 0x0, 0x2000}, {r3, 0x0, 0x10000, 0x1000}]}) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) name_to_handle_at(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001480)={0x1008, 0x3, "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"}, &(0x7f0000000100), 0x1000) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000240)=0x3) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5d7, 0x80) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40086408, 0x0) [ 637.443625][ T8312] vhci_hcd: invalid port number 97 [ 637.462402][ T8311] input: syz1 as /devices/virtual/input/input151 [ 637.473780][ T8312] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0xfefc, 0x0, 0x0, 0x1d4) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/119, 0x77}], 0x2}}], 0x1, 0x0, 0x0) [ 637.492708][ T8312] vhci_hcd: invalid port number 97 [ 637.503244][ T8312] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r0, &(0x7f0000000340), 0xa2}]) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb", 0x51) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0xfefc, 0x0, 0x0, 0x1d4) [ 637.582854][ T8319] input: syz1 as /devices/virtual/input/input152 11:13:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0xfefc, 0x0, 0x0, 0x1d4) [ 637.853386][ T8312] vhci_hcd: invalid port number 97 [ 637.858679][ T8312] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 637.866003][ T8304] vhci_hcd: invalid port number 97 [ 637.871421][ T8304] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)='-{vmnet1[cpuset\'wlaF\x81\x13\tsysteU$\x00', 0x1f, 0x0) 11:13:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4008ae89, 0x0) 11:13:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) pipe2(0x0, 0x0) 11:13:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6d6, 0x1001) accept4$alg(r3, 0x0, 0x0, 0x40000) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000240)) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) finit_module(r1, &(0x7f00000000c0)='aegis128-generic\x00', 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb", 0x51) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 637.979290][ T8343] input: syz1 as /devices/virtual/input/input153 11:13:24 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000202010000010000002c11b90361624810000200040001000900000000000000"], 0x24}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3a) 11:13:24 executing program 5: r0 = memfd_create(&(0x7f0000000140)='#e\x19C\xc1\xcc\xcf\xde\xd8u\xbf\xdck\x169\xfa\xc0\t', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="cb000000", @ANYRES32, @ANYBLOB="10000000000000002000000000000000"], 0xfe0c, 0x0) 11:13:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4008ae90, 0x0) 11:13:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0xd4, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbc, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}]}}]}, 0xd4}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 11:13:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0x1002, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000d06000)=0xffffffffffffffff, 0x292) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r6 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r6, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r7, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r8 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0x1, 0x4080) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @initdev}, 0x152) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r9, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r9, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r9, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) close(r9) r10 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r10, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) io_submit(r2, 0x48d, &(0x7f0000000980)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000001480)="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", 0x0, 0x2, 0x0, 0x1, r6}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000002480)="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", 0x0, 0x81, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0xdb0f, r3, &(0x7f0000000500)="e717d717c06c7a773b6921b012c7c428784af638ae6a883d5c3710d5ad02624f882595059f962f63c523618d085607a60a4064e0d1b36f259994df136b4cc4bc02b2451af3bfb235e37305d62250942529c49beab791d4ac9e44b7f8ca7d12fe4913dd6899a1", 0x0, 0x6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x100, r4, &(0x7f00000005c0)="4c8c81a8747e4269f614d732c59d11cbe5ee4470c2463272b6f621a7a9207fb55b2151b9b95e8c8e1c6a03fb30cc6f324eda284edfebe5a52fb9fd5903de6e3bf75a6ab5dcf518bc10a92f8aefb4180684b35f5e4409caf1097afc06c14f4d363947293e64022cbd06f83f61159a77fd5b7a71e5dcede110f01ad01f30c5398df602779465e76b75d282cb85717e195a6c0629293ff91d2c62d4269b19ae7e1a26eeabc2be670d6788667dd22cfa5a44136a593559c2744e2525cc33fc9c0a8a46c0217a31df0366", 0x0, 0x1, 0x0, 0x1, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x7ffe, r4, &(0x7f0000000740)="260274bb3f504e3789d71d9472a35465ebeba772a440f2d749c4b5a6827fb45d46eedf49834c5f92737325942f96e4e06a33074b14978dc99e66ed3718bcb4514b127d49dcd26aab9d45f56d0d902174e00cb66d4a8b5ba5d96ffe83fcf2c24b5993afd981a856aaf0ee35896bb7e30039794f7a65ec6948623f939f56631d35b6b5fee5121e70ec229b6f31484fe899db093d1c15a6c853ddb9c4d0061029b1366228790f636f3ec82aef8cb67f6f59cb90ce05179fbb584452873fd00fa9f6229484c4ac9aff139fc303c67d4945", 0x0, 0x10001, 0x0, 0x2, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000008c0)="b271113d75e7e111f1a473a07ca8569f34b01f19ce21dc92af1daa0eea18f5b239866f21202496e42b891e8dca4cea0dc266c77aa36e631d1d3f4b3be95c2886563b1c89082522d6", 0x0, 0x4, 0x0, 0x2, r10}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 638.179116][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.209265][ T8365] input: syz1 as /devices/virtual/input/input155 11:13:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb", 0x51) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 638.234873][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:13:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 11:13:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x9}}]}}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 638.374078][ T8371] input: syz1 as /devices/virtual/input/input156 [ 638.412128][ T8385] vhci_hcd: invalid port number 49 [ 638.451774][ T8385] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) 11:13:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40104593, 0x0) [ 638.493342][ T8385] vhci_hcd: invalid port number 49 [ 638.501054][ T8385] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x2, 0xfe) fcntl$getflags(r2, 0x40a) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x6, 0x40, 0x0, 0xffffffffffffffff}, 0x375) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8", 0x57) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 638.561821][ T8395] input: syz1 as /devices/virtual/input/input157 11:13:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) 11:13:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/193, 0xc1) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x3}, &(0x7f00000001c0)=0x8) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:24 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="d3e1bb0300000014ae0f3428"], 0xc}}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x5}}}, 0x28) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000000001c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 638.727357][ T8398] input: syz1 as /devices/virtual/input/input158 11:13:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) sendmsg$sock(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="f91306fdc220c74b5282e540975c592a", 0x10}, {&(0x7f0000000240)="2df2d4116b8b3ab2c8c9bf902f0f316e210d3aaac2a53690a2b40dd9bf0af1837728dbf6e72060f3f7abdc5b8cd4881a5d95b5de5aa402ef9839d4ec66d375d7fbb12bd0164bf70a16a007bf80614defdff2ef587e66e735ab6abbc8f43ee1f3537726e554689a0a1dfc365fac74e7d35549dcfed23340fdcf52214a83a9f0ad79a7103de70d331edea18fe9bc72625cc83da90744", 0x95}, {&(0x7f0000000300)="6cfb81c25bce5dc0c5906154174441fa13e5cc0512284edd0825127448db6b4753e7a660abdb14480634ea95ea2bf4674502b2934ddd14383eed43bd89482895a9efcc8b5b94a82f2f077820c9b085d0445d19e551a6fcb8021ee356aab087608c4c6cce5153a833", 0x68}, {&(0x7f0000000480)="4a3b3add591a5fc3cb05c6a8fbed88600c73826c1575e84e9e1fb5d805672063052b307cb8723b82f81c7903d96c5de4156816279a6d30d514fa2b6306f5ab053b450ea6bf0b141228ac308284444ab1b65393b0caeb50512360d57942", 0x5d}, {&(0x7f0000000500)="1e1457ce79d9", 0xfffffffffffffe75}, {&(0x7f0000000540)="9b1424", 0x3}, {&(0x7f0000000580)="d56c405c4c164bf277e1ab392cf7387c7e2a9cd4bccbe1e3386062a13a23896ed9eb421d6a82333254893d8437bf47a7566e96da7c435465087218aa17183fe58cd100e94f1565607bcae077700d63648c5bdcbf9acee6d6ea6df0", 0x5b}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000600)="42253ac46d745bb3a0f15f40649cd8d9771086eea962ba8e03d8b5d594a98d27247f84ebeb3a8682b86812d3af365e6fd7aca0797c3d97e56cdbf2beebcf7a03ea068084221b5439", 0x48}], 0x9}, 0x4000081) 11:13:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8", 0x57) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4010640d, 0x0) [ 638.887613][ T8419] ptrace attach of "/root/syz-executor.5"[8418] was attempted by "/root/syz-executor.5"[8419] 11:13:24 executing program 5: keyctl$join(0x1, &(0x7f0000000580)={'syz', 0x2}) [ 638.965170][ T8427] input: syz1 as /devices/virtual/input/input159 11:13:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x100000000, 0x101000) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/80#\x00', 0x40000fffffa, 0x81) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VT_ACTIVATE(r3, 0x5606, 0x101) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) iopl(0x1) io_submit(r5, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) getegid() [ 639.069830][ T8436] input: syz1 as /devices/virtual/input/input160 [ 639.123955][ T8438] vhci_hcd: invalid port number 97 [ 639.137672][ T8438] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @multicast2}}) 11:13:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x80000000000003}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0xa, 0x200000004e21, 0x0, @ipv4={[], [], @initdev}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240), 0x300, 0x0) 11:13:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x201ff, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8", 0x57) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4020940d, 0x0) 11:13:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0)={0x6, 0x0, 0x43, 0x0, 0xd4}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) recvfrom(r1, &(0x7f00000000c0)=""/143, 0x8f, 0xd56d6f7a4cc3697c, &(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 639.708528][ T8454] input: syz1 as /devices/virtual/input/input161 11:13:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback={0x2}}, r1}}, 0x30) 11:13:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad", 0x5a) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:25 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 11:13:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4020ae46, 0x0) 11:13:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) shutdown(r0, 0x0) 11:13:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0xba}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x98f904, 0x0, @name="8ff977cc0e5e747432e0ee92700d6dba164bf3833650eb1613b4e006d2814e1a"}) 11:13:26 executing program 2: open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) lstat(&(0x7f0000000180)='./file0\x00', 0x0) [ 640.093646][ T8490] input: syz1 as /devices/virtual/input/input163 11:13:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 11:13:26 executing program 2: socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x30) 11:13:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad", 0x5a) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x4004040) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 640.228088][ T8497] input: syz1 as /devices/virtual/input/input164 11:13:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x980001, 0x0, @name="8ff977cc0e5e747432e0ee92700d6dba164bf3833650eb1613b4e006d2814e1a"}) 11:13:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4020aea5, 0x0) 11:13:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x98f904, 0x5, @name="8ff977cc0e5e747432e0ee92700d6dba164bf3833650eb1613b4e006d2814e1a"}) [ 640.337408][ T8515] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 640.415828][ T8519] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 640.455201][ T8522] input: syz1 as /devices/virtual/input/input165 11:13:26 executing program 5: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000280)=0xa9, 0x4) 11:13:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 11:13:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xbd018c3f835b2e8f, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40246608, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @multicast1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000580)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x12c, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x110, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x92, 0x0, 0x5}, {0x7, 0x9, 0xfffffffeffffffff, 0x40}, {0x8000, 0x3, 0x100, 0xffffffff}, {0xe3ab, 0x100000000, 0x9, 0xba02}]}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r11}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r16, 0x107, 0x12, 0x0, 0x0) accept$packet(r16, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r22, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r22}}, 0x24}}, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r27, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r27}}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000940)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000980)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000f00)={@loopback, @dev, 0x0}, &(0x7f0000000f40)=0xc) r30 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r30, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet6_IPV6_XFRM_POLICY(r30, 0x29, 0x23, &(0x7f0000001740)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000002200)={&(0x7f0000001d80)={0x480, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x21c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x9, 0x7a, 0x7, 0x4}, {0x3, 0x200, 0x0, 0x49ee}, {0x4, 0x7, 0x2, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}]}}, {{0x8, 0x1, r22}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8, 0x1, r28}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xb722}}, {0x8, 0x6, r29}}}]}}, {{0x8, 0x1, r31}, {0xec, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0xef4, 0x4, 0xffff}]}}}]}}, {{0x8, 0x1, r32}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r33 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r33, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r34, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r33, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r33, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x40) 11:13:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad", 0x5a) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 640.549143][ T8528] input: syz1 as /devices/virtual/input/input166 11:13:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8220, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x40, @time={0x77359400}, 0x0, {0xffff, 0x3}, 0x3, 0x1, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setattr(r2, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) ptrace(0x11, r2) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) write$capi20_data(0xffffffffffffffff, &(0x7f0000000280)={{0x10, 0x1, 0xff, 0xa12a564a2a07d873, 0x2, 0x7}, 0x3c, "9d85598bf0fd7fa1e37b7b76900cfa5ed4be37ee48be8f44680b5cacb0be0ddc02eceffc6200c360bbb7f703b99941f5789f18cd4994b92e67060f9e"}, 0x4e) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback={0xffffffff00000000}}, r1}}, 0x30) [ 640.633691][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:13:26 executing program 2: 11:13:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40246608, 0x0) 11:13:26 executing program 2: 11:13:26 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6, 0x80, 0x0}, 0x200008c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000140)) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) 11:13:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x8000000, 0x0, @name="8ff977cc0e5e747432e0ee92700d6dba164bf3833650eb1613b4e006d2814e1a"}) [ 640.876983][ T8554] input: syz1 as /devices/virtual/input/input167 [ 640.877646][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:13:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94", 0x5b) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:26 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x22) [ 640.981569][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:13:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40284504, 0x0) [ 641.213227][ T8573] input: syz1 as /devices/virtual/input/input169 [ 641.397697][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.462042][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.521767][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.531287][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:13:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000009e}, 0x0) 11:13:27 executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:13:27 executing program 5: 11:13:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94", 0x5b) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4040ae79, 0x0) 11:13:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000200)=0xa7) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x70ad) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:27 executing program 5: 11:13:27 executing program 2: [ 641.770423][ T8590] input: syz1 as /devices/virtual/input/input171 11:13:27 executing program 5: 11:13:27 executing program 2: 11:13:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94", 0x5b) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:27 executing program 5: 11:13:28 executing program 5: 11:13:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4090ae82, 0x0) 11:13:28 executing program 2: 11:13:28 executing program 1: perf_event_open(&(0x7f000001d000)={0xaf5a39b7c37e3742, 0x70, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xff, 0x0, 0x800000000, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x10001, 0x1f, 0xffffffff, 'queue1\x00', 0xe80f}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) fdatasync(r3) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f0000000500)={0x0, 0xfe70, &(0x7f0000000740), 0x1}, 0x0) 11:13:28 executing program 5: 11:13:28 executing program 2: [ 642.296071][ T8620] input: syz1 as /devices/virtual/input/input173 11:13:28 executing program 5: 11:13:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x8000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/&eb\x00', 0x3, 0x511002) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) 11:13:28 executing program 2: [ 642.410852][ T8627] input: syz1 as /devices/virtual/input/input174 11:13:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @multicast2}, {0x30b, @remote}, 0x0, {0x2, 0x4e21, @local}, 'ipddp0\x00'}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x24000040) 11:13:28 executing program 5: 11:13:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x4138ae84, 0x0) 11:13:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:28 executing program 2: 11:13:28 executing program 5: [ 642.603625][ T8644] input: syz1 as /devices/virtual/input/input175 11:13:28 executing program 5: 11:13:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000000c0)) 11:13:28 executing program 2: [ 642.728332][ T8652] input: syz1 as /devices/virtual/input/input176 11:13:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 642.938803][ T8658] vhci_hcd: invalid port number 97 [ 642.945788][ T8658] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 643.004722][ T8666] vhci_hcd: invalid port number 97 [ 643.009975][ T8666] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:29 executing program 5: 11:13:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044501, 0x0) 11:13:29 executing program 2: 11:13:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x0) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:29 executing program 5: 11:13:29 executing program 2: 11:13:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100), 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0xf, 0x117, 0x3, 0x2bfa8a41c4905336}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$TCSETXW(r3, 0x5435, &(0x7f00000000c0)={0x100, 0x1, [0x2fc800000000000, 0x3, 0x5, 0x0, 0x80]}) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 643.122553][ T8671] input: syz1 as /devices/virtual/input/input177 [ 643.221941][ T8681] vhci_hcd: invalid port number 97 11:13:29 executing program 5: 11:13:29 executing program 2: [ 643.249615][ T8681] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 643.267802][ T8677] input: syz1 as /devices/virtual/input/input178 11:13:29 executing program 2: 11:13:29 executing program 5: [ 643.330479][ T8684] vhci_hcd: invalid port number 97 [ 643.367547][ T8684] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) 11:13:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x0) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:29 executing program 2: 11:13:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000240)='/tdsp#\x00', 0x80000000, 0x202000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x20}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x3ff}, 0x8) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}, 0x40080) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = accept(r4, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000540)={0x0, 0x2}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r6, 0xfff, 0x0, 0x70, 0x89, 0x1}, &(0x7f0000000600)=0x14) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0xffffff1f}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="aab78a9dbf9b3f40e97a96c3b3b6a32d"}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x20004000) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000400)={0x1, 0x0, [0x2, 0x7f, 0x1, 0x7, 0x0, 0x1, 0x8db, 0x3]}) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:29 executing program 5: 11:13:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x0, &(0x7f0000001440)) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 643.535563][ T8692] input: syz1 as /devices/virtual/input/input179 11:13:29 executing program 2: 11:13:29 executing program 5: 11:13:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100020c1000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xc4, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x786b52e62728d9ee}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x2010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001006, &(0x7f00000000c0)=0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4, r5}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) 11:13:29 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000240)=0x3ff, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x14a, 0x200000) ioctl$RTC_UIE_ON(r4, 0x7003) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:29 executing program 2: 11:13:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x0) sendfile(r2, r7, 0x0, 0x87ff7) [ 643.708289][ T8699] input: syz1 as /devices/virtual/input/input180 11:13:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044941, 0x0) 11:13:29 executing program 5: 11:13:29 executing program 2: 11:13:29 executing program 5: 11:13:29 executing program 2: 11:13:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 643.933244][ T8727] input: syz1 as /devices/virtual/input/input181 [ 643.965863][ T8758] vhci_hcd: invalid port number 97 11:13:29 executing program 2: [ 643.976950][ T8758] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:29 executing program 5: 11:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x80, 0x4000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(0xffffffffffffffff, r7, 0x0, 0x87ff7) 11:13:30 executing program 5: 11:13:30 executing program 2: [ 644.099550][ T8770] input: syz1 as /devices/virtual/input/input182 11:13:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80045430, 0x0) 11:13:30 executing program 5: 11:13:30 executing program 2: 11:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x65, &(0x7f00000000c0)=0x5, 0x4) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) [ 644.286051][ T8851] input: syz1 as /devices/virtual/input/input183 11:13:30 executing program 5: [ 644.393112][ T8904] input: syz1 as /devices/virtual/input/input184 [ 644.458540][ T8758] vhci_hcd: invalid port number 97 [ 644.489052][ T8758] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x800454d2, 0x0) 11:13:30 executing program 2: 11:13:30 executing program 5: 11:13:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(0xffffffffffffffff, r7, 0x0, 0x87ff7) 11:13:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="0100720096593227cb954d99e454de3bf02a91ed5f73204dce9ca9f00128c32242a8258fc19586dcf6ffd9f915f57063fdfa3f45c399c2b2b8d01ede0d43936f379aeab145c2501a78fefa0e711da6c7d64d6f91949258798dd8f6162eda550f05b2aa68dd0a33ca33cc4955a5d6965b9fcd10691de82f7abeef79e10aa37e237d414b15d14f42d3c7ee144a9846123cbd39fa53bf036cab0bb906d81df7cf6ea81ef772d53bd9d6af4a8b6b62fdd6a858fd759b6c106a653fc1f43ae3792d112bd23d2484d30d27bf5bdb9f2ebc60c3c1262e95f8d63f136c81c1c10cece79a257ee300", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000040)=0x8) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x3f}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r4, 0x1, 0x2, 0x40, 0x401, 0xfffffffffffffffc, 0x3, 0x101, {r6, @in={{0x2, 0x4e20, @broadcast}}, 0x101, 0x2, 0x3, 0x8, 0x20}}, &(0x7f0000000140)=0xb0) 11:13:30 executing program 5: 11:13:30 executing program 2: [ 644.623007][ T8972] input: syz1 as /devices/virtual/input/input185 11:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1c, 0x8010, r1, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:30 executing program 2: 11:13:30 executing program 5: 11:13:30 executing program 2: 11:13:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8004552d, 0x0) [ 644.825947][ T8988] vhci_hcd: default hub control req: 0000 v0000 i0003 l0 11:13:30 executing program 5: 11:13:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(0xffffffffffffffff, r7, 0x0, 0x87ff7) 11:13:30 executing program 2: 11:13:30 executing program 5: [ 644.958281][ T8999] input: syz1 as /devices/virtual/input/input187 [ 645.057943][ T9005] input: syz1 as /devices/virtual/input/input188 11:13:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="71e67a15cdf0311cfcf33a52a7d86bd1b6a9dc720bf4a06729613471dbe4e717bf6d34d0855a04d06f6afd54efa6dcf4de3e58b4a0864f7937b2dc51f7d00689229733ef26433df3cbb973381c5601fe29a03dd081c41e6bff04d8efe4cfa8db8e2fd77656145351f1e8ba745e6d557a4b", 0x71) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:31 executing program 2: 11:13:31 executing program 5: 11:13:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x87ff7) 11:13:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80045700, 0x0) 11:13:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x804f, 0x381000) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000003c0)=""/98) stat(0x0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r8, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000180)) r9 = getpid() ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r6, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(r6, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940), 0x0, &(0x7f0000001a80)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r10, r4}}}, @cred={{0x1c, 0x1, 0x2, {r11, r4}}}], 0x80, 0x1}, 0x10) getresgid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f00000004c0)=0xe8) stat(0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0x0, 0x0) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r18 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r18, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r16, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r16, 0x8903, &(0x7f0000000180)) r19 = getpid() ioctl$TIOCGPGRP(r17, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r16, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(r16, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)=[{&(0x7f0000000280)={0x10, 0x24, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {0x0}, {&(0x7f0000001880)={0x10, 0x14, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r18, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000800001c000000000400000100000002000000", @ANYRES32=r21, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x1}, 0x10) r22 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r22, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r22, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r22, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r22, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r22, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r22, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, 0x0, 0x0) close(r22) r23 = fcntl$getown(r22, 0x9) r24 = getpid() sched_setscheduler(r24, 0x5, &(0x7f0000000380)) sched_setattr(r24, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{0x1, r4, r12, r13, r15, 0x40, 0x1}, 0x2, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x8, r23, r24}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r25, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:31 executing program 5: [ 645.326614][ T9016] input: syz1 as /devices/virtual/input/input189 11:13:31 executing program 2: 11:13:31 executing program 5: 11:13:31 executing program 2: 11:13:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80400) ioctl$sock_ifreq(r3, 0xcd8e, &(0x7f0000000100)={'lo\x00', @ifru_flags=0x1000}) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x9, 0x977b, "c2d62695ccb2f30930e93917301e4063ec0401f1daa8df160a54c4e90eae519fe2214485af98090508b363d54f295ba273ad4df3c9b1cb88e27d3b4121c7b1", 0x19}, {&(0x7f0000000240)=""/90, 0x5a}, &(0x7f00000001c0), 0x20}, 0xa0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80084502, 0x0) 11:13:31 executing program 5: 11:13:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x87ff7) 11:13:31 executing program 2: [ 645.649143][ T9135] input: syz1 as /devices/virtual/input/input191 11:13:31 executing program 2: 11:13:31 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) [ 645.781892][ T9143] input: syz1 as /devices/virtual/input/input192 11:13:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) pause() r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:31 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 11:13:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x87ff7) 11:13:31 executing program 2: prctl$PR_SET_SECCOMP(0x23, 0xb, &(0x7f0000000040)={0x0, 0x0}) 11:13:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80084503, 0x0) [ 646.062338][ T9158] input: syz1 as /devices/virtual/input/input193 11:13:32 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x12, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="086310400000"], 0x0, 0x0, 0x0}) 11:13:32 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 646.159889][ T9172] debugfs: File '9169' in directory 'proc' already present! 11:13:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xffffffffffffffff, 0x121401) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r6, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) close(r6) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r7, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r8, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r8, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r8, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) close(r8) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0xae93bea2be1bfd88, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r10, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r10, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r10, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) close(r10) r11 = dup3(0xffffffffffffffff, r10, 0x40000) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r12, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r12, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r12, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, 0x0, 0x0) close(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r13, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r13, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r13, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r13, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, 0x0, 0x0) close(r13) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r14, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r14, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r14, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r14, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, 0x0, 0x0) close(r14) r15 = syz_open_dev$sndpcmc(&(0x7f00000009c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x800) io_submit(0x0, 0x7, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x1, r13, &(0x7f00000000c0)="b234ca619cfaf3a65edf653cc7f4cf88783c7db3c15d5a376f8c705cd3927a7c3a9c4aa434226e5a6cf10f4fa1d9bc0a857da088a782363f4e61d7ee30437e3e6631bbbf4d221a51e4be4355b866c0077bb2d15cf18bee09ff5291a48ec7393fef5df50308e07a94116ca9d4ceca62ec9f374d893a484a", 0x1f, 0x9, 0x0, 0x2, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, r15, &(0x7f0000000240)="cc57229b2bacbc15c39baa58f8901f", 0xf, 0x5619918d}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0xfff, r14, &(0x7f0000000480)="57417a082e38eaf3c9202be146464e0ba1a9ae2b95a1f38180160be99323f62aa78389fc670721fec75a8ad122e07dee7b59234a73907a7ed932e07eba22", 0x3e, 0x80000000}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1ff8000000000, r6, &(0x7f0000000500)="1e31303be4d20f8fa113e53ba96b2de45fd81f1bbab3b9301ae5576ec3ecb42e833002411dce7126787c89c2c5fdf10390873d653973d3d0e2804ac129a0f425b618fa1eae146ffd2aa8030efab159bdf0e0658ba75a5e0ce21d52f78c8d8d71aaa943f59f01c21cb4cfaeab2ea8f65403352dbde60c2bd0bd6141cf5429a4887deabee42872bce6774ddd", 0xfffffffffffffdff, 0x42, 0x0, 0x2, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x2, r8, &(0x7f0000000600)="8d6986a750a751f3164dee0bdc40f1b0a8340aac8dbd1e49bd0164af071534e4a737ac5398e9af2f24ede9e92e3f2dea8b4d4a7c0c14ca352afe52fbe137f9d0ff8b7a3d066853ba8f50690861b81a60f4a0ad95abfaebdb0c2802100f", 0x5d, 0xc54, 0x0, 0x0, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x5, r9, &(0x7f0000000700)="5164669157c818c0e2a5fe435594922ea8acaf0d2b40ecfb52994432ba1d526ee1a7e9c7b7dfca83f275ffd0eb87cc0d681817a11366557f00feaf8c67a010707fbe1a3492350e69a0af41c3257a7c10afef49f696e87c5a3192ae3f9602d942cea247ce739ff2611c37ed6c8e6a92174bb5ccbc9ac21ea0e6500018e7588e840317468d9cd76f1e1890cdb9667c8b3f2fc835a05a3e93bf945469eb5ca2efc80fc42ffe6a6340f7694f07a53ca1ea0895823a2c0770803b2fb0b7c59d8938f41ec9f4eaa25e2240ebe1ad5bb9ee34e543794a2b4eb6d802fe62f2b3", 0xdc, 0x200, 0x0, 0x0, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0xfff, r12, &(0x7f00000008c0)="696e52767f36c6c38e6a22330246dadc1bc0c476f6214bac60860ccfbffd934296d00feccac36bcfc1dec71d4c1b50de1d1fb567b986230cd4ecee8d9df110f747cb07c7303ba0aa3843e929d6d14d9c22d3d05c08a86fb28ccf6bdd422b6e9af9b21a593328f43dd86d48ecec090b912055b60c77185d7bad13f1d778656338149165a7", 0x84, 0x7fff, 0x0, 0x3, r11}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 646.225169][ T9214] input: syz1 as /devices/virtual/input/input194 [ 646.238078][ T9172] debugfs: File '9169' in directory 'proc' already present! [ 646.261361][ T9249] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 11:13:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80084504, 0x0) 11:13:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x0) 11:13:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x804f, 0x381000) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000003c0)=""/98) stat(0x0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r8, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000180)) r9 = getpid() ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r6, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(r6, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940), 0x0, &(0x7f0000001a80)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r10, r4}}}, @cred={{0x1c, 0x1, 0x2, {r11, r4}}}], 0x80, 0x1}, 0x10) getresgid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f00000004c0)=0xe8) stat(0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0x0, 0x0) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r18 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r18, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r16, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r16, 0x8903, &(0x7f0000000180)) r19 = getpid() ioctl$TIOCGPGRP(r17, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r16, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(r16, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)=[{&(0x7f0000000280)={0x10, 0x24, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {0x0}, {&(0x7f0000001880)={0x10, 0x14, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r18, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000800001c000000000400000100000002000000", @ANYRES32=r21, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x1}, 0x10) r22 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r22, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r22, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r22, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r22, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r22, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r22, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, 0x0, 0x0) close(r22) r23 = fcntl$getown(r22, 0x9) r24 = getpid() sched_setscheduler(r24, 0x5, &(0x7f0000000380)) sched_setattr(r24, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{0x1, r4, r12, r13, r15, 0x40, 0x1}, 0x2, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x8, r23, r24}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r25, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 646.360976][ T9286] ptrace attach of ""[9285] was attempted by "/root/syz-executor.5"[9286] [ 646.446823][ T9296] input: syz1 as /devices/virtual/input/input195 [ 646.568961][ T9302] input: syz1 as /devices/virtual/input/input196 11:13:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(0xffffffffffffffff, r7, 0x0, 0x87ff7) 11:13:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x0) 11:13:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80086301, 0x0) 11:13:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100020c1000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xc4, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x786b52e62728d9ee}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x2010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001006, &(0x7f00000000c0)=0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4, r5}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) 11:13:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setattr(r1, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x100000001, 0xf3, 0x3f, 0x5, 0x0, 0xdcf, 0x4, 0x0, 0x9, 0x2, 0x401, 0x9, 0x3, 0x10000, 0x76d5, 0x2, 0x9, 0x7, 0x3, 0x1, 0xfff, 0x1, 0xfffffffffffffcb4, 0x100000001, 0x65, 0x0, 0x2, 0x7ff, 0x295, 0x20, 0x12d, 0x8, 0x98, 0x3, 0x100000000, 0x7f, 0x0, 0xe6eb, 0x1, @perf_bp={&(0x7f0000000200), 0x1c}, 0x20, 0x0, 0x2, 0x3, 0x40, 0x4, 0xfffffffffffffffa}, r1, 0xffffffffffffffff, r2, 0xf) r3 = socket(0x9, 0xd, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040), 0x8}) r6 = dup(0xffffffffffffffff) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x800, 0x0) io_submit(r5, 0x2, &(0x7f0000000500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000140)="aee4ebf49cc46d85223757f1", 0xc, 0x100000000, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0xfff7fffffffffe01, r4, &(0x7f0000000300), 0x0, 0x7, 0x0, 0x2, r7}]) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r8, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000000240)={{0x9, 0xc9}, 'port0\x00', 0x8, 0x0, 0x8, 0x10000, 0x2, 0xfffffffffffffff8, 0x898, 0x0, 0x0, 0x2}) [ 647.111798][ T9314] input: syz1 as /devices/virtual/input/input197 [ 647.164100][ T9318] vhci_hcd: invalid port number 97 11:13:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 647.191270][ T9318] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 647.240068][ T9319] input: syz1 as /devices/virtual/input/input198 11:13:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) 11:13:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80104592, 0x0) [ 647.353488][ T9318] vhci_hcd: invalid port number 97 [ 647.367754][ T9318] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x0) [ 647.396284][ T9329] input: syz1 as /devices/virtual/input/input199 [ 647.420722][ T9318] vhci_hcd: invalid port number 97 [ 647.435919][ T9318] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 647.473202][ T9332] input: syz1 as /devices/virtual/input/input200 [ 647.483650][ T9318] vhci_hcd: invalid port number 97 [ 647.500097][ T9318] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x0) 11:13:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x400, 0x28402) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)=0x9, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000240)="01f2c5df16e29cd2c5914e4767d1730fa6a0df19137306b7b12d1254a6348dae667479977a4889c8ab9c3832f8ca97dc8e24ee8ea0d2eea594ac648946ce9d9cd2466fe42d5a14a10d7687cd132603809f95f07e5e63f9b537db52f69a73ba1c85b70117f5fec603946f209418040ea896539ce736caf37a7ef2e11ace0b0eabc0c8a0c8277716a0e9c1b728a5ec3ac9d07b1ddae0cd2a2ee0c63dd16a865fd9056e27c836a8c1d6d23dd0b275f1b3bf3f0d0eb5d644aaa080184c83b0097aa3425708", 0xc3) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x0, &(0x7f0000001440)) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80284504, 0x0) 11:13:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) [ 647.777645][ T9346] vhci_hcd: invalid port number 97 [ 647.786658][ T9349] input: syz1 as /devices/virtual/input/input202 [ 647.811004][ T9353] input: syz1 as /devices/virtual/input/input203 11:13:33 executing program 2 (fault-call:30 fault-nth:0): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 647.823390][ T9346] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 647.916602][ T9356] vhci_hcd: invalid port number 97 [ 647.927945][ T9363] FAULT_INJECTION: forcing a failure. [ 647.927945][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 647.940813][ T9363] CPU: 1 PID: 9363 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 647.948278][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.950197][ T9356] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 647.958338][ T9363] Call Trace: [ 647.968645][ T9363] dump_stack+0x172/0x1f0 [ 647.973079][ T9363] should_fail.cold+0xa/0x15 [ 647.977682][ T9363] ? fault_create_debugfs_attr+0x180/0x180 [ 647.983585][ T9363] ? page_to_nid.part.0+0x20/0x20 [ 647.988621][ T9363] ? ___might_sleep+0x163/0x280 [ 647.993489][ T9363] __should_failslab+0x121/0x190 [ 647.998440][ T9363] should_failslab+0x9/0x14 [ 648.002951][ T9363] kmem_cache_alloc_trace+0x2d3/0x790 [ 648.008337][ T9363] ? debug_smp_processor_id+0x3c/0x214 [ 648.013814][ T9363] alloc_pipe_info+0xb9/0x420 [ 648.018504][ T9363] splice_direct_to_actor+0x76b/0x970 [ 648.023889][ T9363] ? common_file_perm+0x238/0x720 [ 648.028928][ T9363] ? generic_pipe_buf_nosteal+0x10/0x10 [ 648.034493][ T9363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.038080][ T9365] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 648.040749][ T9363] ? do_splice_to+0x180/0x180 [ 648.040771][ T9363] ? rw_verify_area+0x126/0x360 [ 648.053907][ T9365] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 648.058336][ T9363] do_splice_direct+0x1da/0x2a0 [ 648.058352][ T9363] ? splice_direct_to_actor+0x970/0x970 [ 648.058371][ T9363] ? rw_verify_area+0x126/0x360 [ 648.058390][ T9363] do_sendfile+0x597/0xd00 [ 648.086097][ T9363] ? do_compat_pwritev64+0x1c0/0x1c0 [ 648.091394][ T9363] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 648.097646][ T9363] ? fput+0x1b/0x20 [ 648.101466][ T9363] __x64_sys_sendfile64+0x1dd/0x220 [ 648.106671][ T9363] ? switch_fpu_return+0x1fa/0x4f0 [ 648.111792][ T9363] ? __ia32_sys_sendfile+0x230/0x230 11:13:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000600e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) r1 = pkey_alloc(0x0, 0x2) clock_gettime(0xe, &(0x7f0000000000)) pkey_free(r1) 11:13:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0xffffffff, 0x2, 0xfffffffffffffff9, 0x0, 0x3, 0xff, 0x60000000, 0x6, 0x8, 0x0, 0xc01c, 0x2, 0x0, 0x9, 0x1, 0xaa9, 0x40, 0x5, 0xfffffffffffff25a}) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x80) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8c0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0xfff, 0x5, 0x5}) close(r0) [ 648.117106][ T9363] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 648.123180][ T9363] ? trace_hardirqs_off_caller+0x65/0x230 [ 648.128902][ T9363] ? trace_hardirqs_on+0x67/0x240 [ 648.133939][ T9363] do_syscall_64+0xfd/0x6a0 [ 648.138451][ T9363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.144337][ T9363] RIP: 0033:0x4598e9 [ 648.148235][ T9363] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:13:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000100)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1361ad071f5d8214, r0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r7, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x2, {0x9, 0x0, "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", 0xd3, 0x6, 0x10001, 0x1, 0x1705, 0x100000001, 0x4}, r6}}, 0x128) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f00000000c0)=0x3) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 648.167834][ T9363] RSP: 002b:00007fd317d9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 648.167847][ T9363] RAX: ffffffffffffffda RBX: 00007fd317d9bc90 RCX: 00000000004598e9 [ 648.167854][ T9363] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 648.167861][ T9363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 648.167867][ T9363] R10: 0000000000087ff7 R11: 0000000000000246 R12: 00007fd317d9c6d4 [ 648.167874][ T9363] R13: 00000000004c709e R14: 00000000004dc750 R15: 000000000000000a 11:13:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8038550a, 0x0) 11:13:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) signalfd(r3, &(0x7f0000000100)={0x3}, 0x8) [ 648.229015][ T9470] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:34 executing program 2 (fault-call:30 fault-nth:1): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 648.286828][ T9472] input: syz1 as /devices/virtual/input/input205 [ 648.315321][ T9475] vhci_hcd: invalid port number 97 [ 648.334211][ T9475] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 648.373918][ T9475] vhci_hcd: invalid port number 97 [ 648.379360][ T9475] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 648.396319][ T9482] input: syz1 as /devices/virtual/input/input206 [ 648.414970][ T9475] vhci_hcd: invalid port number 97 [ 648.434403][ T9484] input: syz1 as /devices/virtual/input/input207 [ 648.443074][ T9475] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="bed9dc95691329071549de520d72001df394e298", 0x14) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x8, r4, &(0x7f0000000340)}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0xccd}}], 0x18}, 0x0) [ 648.545097][ T9479] FAULT_INJECTION: forcing a failure. [ 648.545097][ T9479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 648.558615][ T9479] CPU: 0 PID: 9479 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 648.558631][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.576144][ T9479] Call Trace: [ 648.579463][ T9479] dump_stack+0x172/0x1f0 [ 648.583912][ T9479] should_fail.cold+0xa/0x15 [ 648.588531][ T9479] ? fault_create_debugfs_attr+0x180/0x180 [ 648.594374][ T9479] should_fail_alloc_page+0x50/0x60 [ 648.599585][ T9479] __alloc_pages_nodemask+0x1a1/0x900 [ 648.604974][ T9479] ? lock_downgrade+0x920/0x920 [ 648.605004][ T9479] ? __alloc_pages_slowpath+0x2520/0x2520 [ 648.615566][ T9479] ? memcg_kmem_get_cache+0x275/0x7b0 [ 648.620978][ T9479] ? rcu_read_unlock+0x33/0x60 [ 648.625760][ T9479] ? memcg_kmem_get_cache+0x344/0x7b0 [ 648.631160][ T9479] cache_grow_begin+0x90/0xd20 [ 648.635955][ T9479] ? alloc_pipe_info+0xb9/0x420 [ 648.635974][ T9479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 648.635996][ T9479] kmem_cache_alloc_trace+0x6b3/0x790 [ 648.636025][ T9479] alloc_pipe_info+0xb9/0x420 [ 648.647750][ T9479] splice_direct_to_actor+0x76b/0x970 [ 648.647765][ T9479] ? common_file_perm+0x238/0x720 [ 648.647784][ T9479] ? generic_pipe_buf_nosteal+0x10/0x10 [ 648.647809][ T9479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.647824][ T9479] ? do_splice_to+0x180/0x180 [ 648.647846][ T9479] ? rw_verify_area+0x126/0x360 [ 648.647876][ T9479] do_splice_direct+0x1da/0x2a0 [ 648.663286][ T9479] ? splice_direct_to_actor+0x970/0x970 [ 648.663318][ T9479] ? rw_verify_area+0x126/0x360 [ 648.680098][ T9479] do_sendfile+0x597/0xd00 [ 648.680136][ T9479] ? do_compat_pwritev64+0x1c0/0x1c0 [ 648.710944][ T9494] vhci_hcd: invalid port number 97 [ 648.711472][ T9479] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 648.728081][ T9479] ? fput+0x1b/0x20 [ 648.731922][ T9479] __x64_sys_sendfile64+0x1dd/0x220 [ 648.737136][ T9479] ? __ia32_sys_sendfile+0x230/0x230 11:13:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80404508, 0x0) [ 648.737153][ T9479] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 648.737169][ T9479] ? trace_hardirqs_off_caller+0x65/0x230 [ 648.737185][ T9479] ? trace_hardirqs_on+0x67/0x240 [ 648.737209][ T9479] do_syscall_64+0xfd/0x6a0 [ 648.737230][ T9479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.750525][ T9494] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 648.754287][ T9479] RIP: 0033:0x4598e9 [ 648.772080][ T9492] input: syz1 as /devices/virtual/input/input208 [ 648.776696][ T9479] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 648.776707][ T9479] RSP: 002b:00007fd317d9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 648.776723][ T9479] RAX: ffffffffffffffda RBX: 00007fd317d9bc90 RCX: 00000000004598e9 [ 648.776731][ T9479] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 648.776740][ T9479] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:13:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8e, 0x400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016386dd20"], 0xfdef) syz_open_dev$usbmon(0x0, 0x2b, 0x400) syz_open_dev$video(0x0, 0x3, 0x0) [ 648.776749][ T9479] R10: 0000000000087ff7 R11: 0000000000000246 R12: 00007fd317d9c6d4 [ 648.776757][ T9479] R13: 00000000004c709e R14: 00000000004dc750 R15: 000000000000000a [ 648.881329][ T9598] vhci_hcd: invalid port number 97 [ 648.888638][ T9598] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:34 executing program 2 (fault-call:30 fault-nth:2): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 648.923106][ T9480] vhci_hcd: invalid port number 97 [ 648.929874][ T9480] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 648.948502][ T9470] vhci_hcd: invalid port number 97 [ 648.953805][ T9470] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) 11:13:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8138ae83, 0x0) 11:13:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) prctl$PR_GET_FP_MODE(0x2e) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = getuid() stat(0x0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r7, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) r8 = getpid() ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000019c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0x57, &(0x7f0000001940)=[{&(0x7f0000000280)={0x10, 0x24, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {0x0}, {&(0x7f0000001880)={0x10, 0x14, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYBLOB="000800001c000900000600"/20, @ANYRESOCT=0x0, @ANYBLOB="1a02ed4abf2d72b1331b8739ffc1236f110489d3f2d60950857e298db09b8598de787df62539bc1662cea551a4cfdb64e617a98d19ac44f20e7e7e7a60a4d5abd77837da03eaa60504f80ab78eef47d19f338185cb64bf965d7a4f918555931f01483131a1c5f3d2104a3084113779de8f8532a1d12e488fb4428c116a9ddf44eabd6cc471c47a54e089b855288bc3deae71c52a", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x133, 0x1}, 0x10) stat(0x0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_procfs(0x0, 0x0) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r14, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000180)) r15 = getpid() ioctl$TIOCGPGRP(r13, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r12, 0x10, &(0x7f0000001a00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0x8a) r18 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r18, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r18, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r18, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r18, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r18, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r18, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r18, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r18, 0x1, 0x19, 0x0, 0x0) close(r18) r19 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2, 0x204002) r20 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r20, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r20, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r20, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r20, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r20, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r20, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r20, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r20, 0x1, 0x19, 0x0, 0x0) close(r20) r21 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r21, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r21, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r21, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r21, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r21, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r21, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r21, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r21, 0x1, 0x19, 0x0, 0x0) close(r21) r22 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r22, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r22, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r22, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r22, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r22, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r22, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, 0x0, 0x0) close(r22) sendmsg$netlink(r12, &(0x7f0000001b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000280)={0x10, 0x24, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {0x0}, {&(0x7f0000001880)=ANY=[@ANYBLOB="050000001400000328bd7000fedbdf25"], 0x1}], 0x3, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r11}}}, @cred={{0x1c, 0x1, 0x2, {r16, r10}}}, @rights={{0x30, 0x1, 0x1, [r18, r19, r14, r6, r14, r20, r21, r22]}}], 0x80, 0x1}, 0x10) getgroups(0x4, &(0x7f00000000c0)=[0xee00, r5, r11, 0xffffffffffffffff]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x2, {0x8b, 0x1, 0x8}, 0x1, r3, r23, 0x101, 0xffffffff80000001, 0x1, 0x5, 0x7, 0x0, 0xfffffffffffffffb, 0x5c, 0x9, 0x3, 0x5, 0x3f, 0xdd, 0x0, 0x44a}}, 0xa0) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 649.101284][ T9711] input: syz1 as /devices/virtual/input/input210 [ 649.126531][ T9713] input: syz1 as /devices/virtual/input/input211 11:13:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x13e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="850000002e12daa99ea7427719d9a5e3eaeb84379c000023950000040000000087e2b9a78b4472a6e1937b0c1e84d08bd8e544e83a5edd4a84639ab4b9941eb09e4198741b2037862f6324a5cec1973c41168276e9cc756424bdf7374181832dbd7b5e283745111822b8497f7eacdcd0bae4a36077758fe645"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x48) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) 11:13:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) [ 649.242849][ T9719] input: syz1 as /devices/virtual/input/input212 11:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 11:13:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x8208ae63, 0x0) 11:13:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}], 0x210, 0x34000, 0x0) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)=""/52, 0x34}], 0x2, &(0x7f0000000180)=""/252, 0xfc}, 0x2}, {{&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)=""/247, 0xf7}], 0x2, &(0x7f0000000500)=""/22, 0x16}, 0x80000000}, {{&(0x7f0000000540)=@l2, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/83, 0x53}], 0x1, &(0x7f0000000680)=""/120, 0x78}, 0x100000001}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/217, 0xd9}], 0x3, &(0x7f0000001a40)=""/14, 0xe}, 0x2}, {{&(0x7f0000001a80)=@isdn, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b00)=""/133, 0x85}, {&(0x7f0000001bc0)=""/145, 0x91}, {&(0x7f0000001c80)=""/111, 0x6f}, {&(0x7f0000001d00)=""/91, 0x5b}, {&(0x7f0000001d80)=""/230, 0xe6}, {&(0x7f0000001e80)=""/108, 0x6c}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x7, &(0x7f0000002f80)=""/4096, 0x1000}, 0x40000000000}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f80)=""/89, 0x59}], 0x1, &(0x7f0000004040)=""/117, 0x75}, 0x1}], 0x1a, 0x1, &(0x7f0000004240)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004280)=@ipx={0x4, 0x1, 0x1, "c9e911383923", 0x6}, 0x80, &(0x7f0000004300)}, 0x10000040) 11:13:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@iv={0x108, 0x117, 0x2, 0xfffffffffffffef6, "ccec42e963aba3e527e6eb03b2cec0c965cb68aeaf2464c5a6d3799eea985ca89e08aea2fbd5c77868b08c03abf93061b280c4a2f59638c84bfd0ccb6069569012ce4b2ba3d13e878bc817f08b52e88e735e76fb5afb216d1c9fce6b40052d43ac37d857bad82ee75c2d1ec3bf640ff157c823fcd2b99297683935b26edcd2503e1e31e3252e10ae6362a8ee84edf7d270873eb8a046c2ad643857e0f6d7daeff4760955bda93b6468690bf6fc26af91b86592f95679dc87024ceea04407fbaa3598ab96d87d3970bea93c2b625b390f5c92f6fad7a1a0124f20a7907935156489bb958332269012b1cb8dc55d4b28"}], 0xf0}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) write(r3, &(0x7f0000000240)="55f1aaa232378cbd5167b3f05452914d33d99dc5e88415ad12fca6cf9d4412ec6c9810a707df536dc19acb1b869ae8372a8c6f9dc0ec3397cca5dbb5e66f0c457f9ed7810064e646f9c1a819709c39f3e4d4f1f40edbf06345b35fdece40dcc5dfdcdc9cba3408d42b472518aef089d438105db3e46513d6a07c942c324ffc4274bcc179cfa8fcb744c88704b3ac306edb20b64c257124abdeda812d7056bffaae5cc537ffcfa5324e38bd7722d446", 0xaf) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 649.430242][ T9839] input: syz1 as /devices/virtual/input/input213 [ 649.512874][ T9880] input: syz1 as /devices/virtual/input/input214 11:13:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) 11:13:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00\x00\x00\x00\x00P\xe0\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80) timerfd_gettime(r1, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) [ 649.652368][ T9928] input: syz1 as /devices/virtual/input/input215 [ 649.684289][ T9990] input: syz1 as /devices/virtual/input/input216 11:13:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0045878, 0x0) [ 649.765650][ T9996] ebtables: ebtables: counters copy to user failed while replacing table [ 649.886452][T10024] input: syz1 as /devices/virtual/input/input217 11:13:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80800, 0x0) bind(r3, &(0x7f0000000100)=@isdn={0x22, 0x800, 0x80000000, 0x7, 0x4}, 0x80) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0xfc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="e9567005e29cbf42d77cfcc427efb35802bdd4f3511411884f3390e6", 0x1c) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x121100) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x218, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x2008c000) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x7fffffffffffffff) 11:13:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00\x00\x00\x00\x00P\xe0\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80) timerfd_gettime(r1, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) [ 649.958424][T10106] input: syz1 as /devices/virtual/input/input218 11:13:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0045878, 0x0) [ 650.039929][T10115] ebtables: ebtables: counters copy to user failed while replacing table [ 650.059814][T10111] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 650.127516][T10154] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 650.173314][T10215] input: syz1 as /devices/virtual/input/input221 11:13:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 650.307970][T10287] input: syz1 as /devices/virtual/input/input223 11:13:36 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc008ae05, 0x0) 11:13:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:36 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(r1, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 650.632587][T10363] input: syz1 as /devices/virtual/input/input225 11:13:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) getpeername$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) accept4$packet(r9, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x400) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r12, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r12, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r12, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, 0x0, 0x0) close(r12) getsockopt$inet_mreqn(r12, 0x0, 0x0, &(0x7f0000000700)={@loopback, @multicast1, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x364, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r19}}, 0x24}}, 0x0) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r24}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r24, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r24}}, 0x24}}, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r26, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r29, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r25, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r29}}, 0x24}}, 0x0) r30 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r30, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r30, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r30, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r30, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r30, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r30, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r30, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r30, 0x1, 0x19, 0x0, 0x0) close(r30) getsockopt$inet_IP_IPSEC_POLICY(r30, 0x0, 0x10, &(0x7f0000000900)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000a00)=0xe8) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r34, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r36}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r36}}, 0x24}}, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket$netlink(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r41}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r38, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r41, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r41}}, 0x24}}, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$netlink(0x10, 0x3, 0x0) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r44, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r46}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r43, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r46, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r46}}, 0x24}}, 0x0) r47 = socket$nl_route(0x10, 0x3, 0x0) r48 = socket$nl_route(0x10, 0x3, 0x0) r49 = socket$netlink(0x10, 0x3, 0x0) r50 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r50, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r50, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r49, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r51}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r48, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r51, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r47, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r51}}, 0x24}}, 0x0) r52 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r52, 0x107, 0x12, 0x0, 0x0) getsockname$packet(r52, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000000ac0)={0x610, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xcb7}}}]}}, {{0x8}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x25c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r31}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r41}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x26}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x80000000, 0x200, 0x3}, {0x2, 0x10000, 0x2, 0x7fff}, {0xa66, 0x7fff, 0x1ff, 0x10001}, {0x3a, 0x10001, 0x8, 0x2}, {0xf6, 0x1, 0x4, 0x20}, {0x1, 0xfff, 0x4, 0x163a0}, {0x0, 0x94f7, 0x8, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r46}}}]}}, {{0x8}, {0xd0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf6}}, {0x8, 0x6, r51}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x27}}, {0x8, 0x6, r53}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="04", 0x1}], 0x1}, 0x0) [ 650.718147][T10436] input: syz1 as /devices/virtual/input/input227 11:13:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:36 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0106426, 0x0) 11:13:36 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_tree(0xffffffffffffff9c, 0x0, 0x1902) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r6, r7) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) [ 650.951739][T10497] input: syz1 as /devices/virtual/input/input229 [ 651.049333][T10597] vhci_hcd: invalid port number 97 11:13:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)={0x148, 0x0, 0x3, [{{0x6, 0x2, 0x1, 0x0, 0x9cc, 0x1, {0x2, 0x1, 0x44, 0xfcd, 0xacf, 0x7, 0x1000, 0x3, 0x1, 0x5e879aa1, 0x43, 0xffffffffffffffff, r4, 0x7, 0x7}}, {0x5, 0x8, 0x6, 0xbe, 'veth1\x00'}}, {{0x2, 0x0, 0x7, 0x80, 0x789b, 0x4, {0x5, 0x80, 0x9, 0x3f, 0x5, 0x5, 0x4, 0x610400000000, 0x9, 0xfffffffffffffff8, 0x2, r5, r6, 0xd618, 0x11}}, {0x2, 0x7f, 0x0, 0x3ff}}]}, 0x148) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r7 = accept(r1, 0x0, &(0x7f0000000200)) getsockopt$inet_dccp_int(r7, 0x21, 0x11, &(0x7f0000000240), &(0x7f0000000380)=0x4) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/225) ioctl$LOOP_SET_STATUS64(r0, 0x127d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c0cf6270b24e415e96042aae51d870054c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7", [0x0, 0x100000000000000]}) 11:13:37 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040), 0x8}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f00000000c0), 0x0, 0x7fff}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 651.072414][T10597] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 651.095770][T10561] input: syz1 as /devices/virtual/input/input230 11:13:37 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/selinux/mls\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:13:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0189436, 0x0) 11:13:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x8c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x20000, @ipv4={[], [], @loopback}}, 0x312) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)) stat(0x0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r5, &(0x7f00000001c0)=""/148, 0x20000254) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)) r6 = getpid() ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000019c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000001b80)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1400400}, 0xc, &(0x7f0000001940)=[{&(0x7f0000000280)={0x10, 0x24, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {0x0}, {&(0x7f0000001880)={0x10, 0x14, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) 11:13:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}]}) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:37 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) [ 651.335000][T10735] input: syz1 as /devices/virtual/input/input231 11:13:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x1000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 651.428668][T10804] input: syz1 as /devices/virtual/input/input232 [ 651.640690][T10597] vhci_hcd: invalid port number 97 [ 651.647317][T10597] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xf, 0x2) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x0, 0x6bef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x80000001, 0x0, 0x1aad}, 0x731f8032909ca2d3}, 0x20, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xff37, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b80c38d48766efbafc0c66b80060000066efbaf80c66b8ce6dd18866efbafc0cec0ff9f63e0f79980080baf80c66b804c3fd8966efbafc0c66b8bb08db6266ef0f20d86635200000000f22d8640f01cfde8d07000f01d10f7937", 0xfffffffffffffd19}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000100)={0x8, "5c20952335e5d7959d9f7745703f341f559ac8ccc6f40d05d05302c883f48ad9", 0x1, 0x2}) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000240)={0x8, 0x57d70dcc, [0x5, 0xbd, 0xfff, 0x3, 0x5], 0xde}) write$P9_RWRITE(r3, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x4}, 0xb) 11:13:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc020660b, 0x0) 11:13:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000001c0)=""/47, &(0x7f0000000240)=0x2f) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xffffffffffff9d36, 0x1000, 0x0, 0x60, 0x0, 0x800, 0x40, 0x4, 0x2, 0x0, 0x1ff, 0x8, 0xffffffffffffffff, 0x4, 0x5, 0x800, 0x401, 0x1000, 0x1, 0x7f, 0x4, 0xe, 0x4, 0x5, 0xffffffffffff0000, 0x4, 0x0, 0x6, 0x6, 0x2, 0xdb, 0x7f, 0x3, 0x6, 0x9, 0x3ff, 0x0, 0x2, 0x3, @perf_config_ext={0xff, 0x3}, 0x200, 0x6, 0x20, 0x4, 0x2, 0x2, 0x1f}, r1, 0x3, 0xffffffffffffffff, 0x8) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e1c, 0xc173, @loopback}, 0xffffffffffffff7e) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r6, r7) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r8, 0x2007fff) sendfile(r4, r8, 0x0, 0x87ff7) [ 651.817408][T10874] input: syz1 as /devices/virtual/input/input233 [ 651.830212][T10878] vhci_hcd: invalid port number 97 [ 651.856675][T10878] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 651.868958][T10875] vhci_hcd: default hub control req: 0f20 v0dc0 i0000 l32768 [ 651.880127][T10881] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 651.921827][T10881] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 651.942419][T10918] vhci_hcd: invalid port number 97 11:13:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x200) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000580)=""/76) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000000c0)=""/95) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x6, 0x200, 0x7, 0x9, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x1, @rand_addr="73450ea4fa273ca7164fe250e6b78e18", 0x6}}, 0xffff, 0x3, 0xffffffffffff8000, 0x6, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001480)={r5, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) [ 651.974654][T10918] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0404309, 0x0) 11:13:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}]}) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f00000000c0)=""/37, &(0x7f0000000100)=0x25) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x25a, &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffc4c}, 0x0) 11:13:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfddd) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r8, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r8, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r8, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r9, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r9, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r9, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) close(r9) ftruncate(r9, 0x3) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r10, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r10, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r10, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) close(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r11, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r11, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r11, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0) close(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r12, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r12, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r12, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, 0x0, 0x0) close(r12) sendfile(r12, r11, 0x0, 0x10000) [ 652.132791][T11004] vhci_hcd: invalid port number 97 [ 652.197558][T11004] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 652.210079][T11006] input: syz1 as /devices/virtual/input/input235 11:13:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) r3 = shmget(0x0, 0x1000, 0x121, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/245) [ 652.364192][T11016] vhci_hcd: invalid port number 97 [ 652.383944][T11018] input: syz1 as /devices/virtual/input/input236 [ 652.399791][T11016] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:38 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}]}) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a", 0x11}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x0) 11:13:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000440)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000003c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(r0, 0xa, 0x100000000000002f) r1 = dup2(r0, r0) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000000c0), &(0x7f0000000300)=0x4) setsockopt$inet_opts(r0, 0x0, 0xa, &(0x7f00000004c0)="6b0107ac30a255437fabb5af8f4e35e63a2d180cc05757f10dc8b8bd7795c83505d20600000000000000c95b335858c77e6ebfa8f80c3e25a96b9041593f13b4143d25ca5f1e919a283fd1a7651d46f03038ae04e7e168bf0ae4a9546121d452fcbc159191bf32730ea8ce2e68bc7f000000000000000000007692a337d443454fb0dcfb23245cbb21d103934018f34f3acebbe707c178a8f2a2d9023a1478d5af394d986c94650434f5613a04c71f872c600e39bccd0b8e2216816016471aad0a03c29dec2d1d699448857aaf353d42bca82d78ae9152756320eea56fcc97886758afd2105132dd4395b075284f85cea27953c19de20b03e6530d3b1a3384d753f406b0c0182bdb0fbf9e", 0x10b) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x660}, {0x0, 0xfffffc51}], 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0xfffffffffffffe3a) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="b6", 0x1, 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) sync() epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bind(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) readv(r3, &(0x7f00000002c0), 0x100000000000016b) 11:13:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc04c5349, 0x0) 11:13:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6, 0x6, [0x9, 0x2, 0x81f, 0x4, 0x68, 0x7]}, &(0x7f00000000c0)=0x14) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x752, 0x12001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2, 0xfffffffffffffffd, 0x3, [0x101, 0xfff, 0x7]}, &(0x7f0000000140)=0xe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.638864][T11147] input: syz1 as /devices/virtual/input/input237 11:13:38 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) [ 652.749442][T11158] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 652.759429][T11165] input: syz1 as /devices/virtual/input/input238 11:13:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x503a80) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 652.793296][T11171] vhci_hcd: default hub control req: 0000 v0000 i0006 l6 11:13:38 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:38 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0502100, 0x0) [ 653.015204][T11247] input: syz1 as /devices/virtual/input/input239 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)="be4218117f4ecb5d226bb84db372b7894f7387c5bcc7b513aea6e52d4dda91698dc4d41e166d0c4fb19011f1735d66a84db9765d9b7cb873835aabb64738dbc807e9bd224c941c8035c7011283d43622e6a397573a5e4a25d334a93b5109211e80ed8678f8b960bdaabec5cc10630bc4a893aa711edfa55a868e07f94907d3b89371e757968a24f117490811c62c6575e4cb313f74f06e1a4eb7df9d70dc31927425cf31433e306514f078b78621bfacd1e834a36a71d9f57897dec16112512947a514f8053329177505fac302a110e8bb796dcdf768ac5fb4fb03b127b1e96b370f0527b97a159a46b5082552a1ea8dfc387e376ab55f424c", 0xf9, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001480)="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", 0x1000, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000540)={'mangle\x00', 0x51, "2e623529f02bc73e2d32fded459224d6eb1edd1cb32c105bef24261f1ad56dc404b3423686b68b879da0491ffda237e75a0e6efcaa56fb7ea1af5c1b6fa59b14efca2de966a22f08f0842be8b1d2def262"}, &(0x7f0000000600)=0x75) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000480)=""/71, 0x47, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) [ 653.118173][T11275] input: syz1 as /devices/virtual/input/input240 11:13:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8000004001ff) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffff5) 11:13:39 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x377b8b96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r6, 0x2007fff) sendfile(r2, r6, 0x0, 0x87ff7) 11:13:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc058560f, 0x0) 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x49ccd111cf473fb4) [ 653.370068][T11298] input: syz1 as /devices/virtual/input/input241 11:13:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) sendto(r2, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in6=@mcast2, 0x4e20, 0x3ff, 0x4e24, 0x100, 0x2, 0x0, 0x30, 0x89, r4, r5}, {0x5, 0x3, 0x6, 0x3, 0x4, 0x4, 0x3, 0x4}, {0xc19, 0x9, 0x7, 0xff}, 0xff, 0x6e6bbe, 0x0, 0x2, 0x5, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x19}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x3500, 0x4, 0x0, 0x9, 0xff, 0x1, 0x31bc}}, 0xe8) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket$nl_xfrm(0xa, 0x3, 0x87) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0xa, 0x1f) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0xffffffffffffff7e) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendto(r2, &(0x7f0000000180)="947747d3aab37b54737ad84294c9fd5e8eef0113ead434d38bec68bfcd6b0e4750360f5ed1cdf8f41357cc3b94dce74a8f3c29db31f44466af32d196da584b08e6d0898edaa6429497c1c8b0ae17c9c4aa95c8c47d6895c1b2a855f4b1f5efd7d818b7960f6eac27cba95af8a5a24346b65b1dc1ba68ea5203e725dca935a6fd9d22ef3fb3515eb35f8162d65bab2a2b9e5997a61bf22598710fda23128dbcf8a23ec224f51c5a40f427be90cbf7d17f486e1a7a9d6f5a6d31", 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x43, 0x101}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090750800"], 0x0) [ 653.468649][T11368] input: syz1 as /devices/virtual/input/input242 11:13:39 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) 11:13:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc058565d, 0x0) 11:13:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x40040000, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffffffffffffcb, @loopback, 0x8}, 0x2eb) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:39 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x121280, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c00c643f0c4e6c09e466deeacff38e5079cad830e41053ddb1020486e63dd92020e5f2c7bf1f276a9b78ce96fa6799beb6bb1e614e70e804e04a9abb1c09828214fdd7671902a9c142b04957997e3249335542023ea6956788972da30e08173ae948a50b52064059da81c1f0eccbffa93dc29a94a352aed3a84906417e9423911cc4f19aece600764120024bcf091cf6743805e23cf5d01682224d68c96006648e44562fd880dae74b35f64d7f64b4478136403ef392cfef80da461248ad6328ef5ec337cf733ac00000000000090b9a494dbf425c2d7dcd7b1b484dae9bee158f9137dfb24da17"], 0xd6) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) io_setup(0xd6, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 653.637977][T11459] input: syz1 as /devices/virtual/input/input243 11:13:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f00000001c0)="ab55a5055e0bcfe47bf070e3c1e1bcac57c54202c32a4b0c9c527d8f875765373afd1c6763dc62303eb9712c0a6fdd88bc3c9abdc3f6867a612dd4a5459682d316161bb495a2ffff0000347d5327ac163a36a4c4dbe0365f978444b9f867751e47580a7c8fbc2e0a18492707e2aa53938bc474ac90a45ce8336677da3ac7e1896d9a9aa58750b1dfe22dfb4e417d549519786345e5f83c33d0a37f78c89036399289450791c38f4a182bb56a5b5a6afc82e668dc2400bd5fd67f0f354b2f994f59943a9d08aff69112ed41a4c9e89b776eecdd91d6976e9919dd2e10fdc5d7bcad665957a7fe44a9b21dbc0e7c4403974721c70dca674458da20d8f7d4fbfc27bb0ba7452cab39dc007894ea8f44b7c6c37795c7e2ed36c95fc71266463cf9b59370faf700b41a10b8ff2d487db89398208635c8038dea713ce80d58895bdd7befc5d5e06690e591185fdb6a6ae8b2e2ccde8ba103d66365657659a4f560f332afcabe13523f280c6d9b6074f210c91613ef4cd5193be73aa0e1786c63ed0ed83f3ec189289a65607de3df57332c1a9dbc2307bf7c10ec5d1708fb1ff4c428e54a0cd7d92a04e4d5bab97b744f8e7bfc658cc33dde0338f911d53b3e967b1fc6692fc94352089a7953ec79eb201900d6ce3bd7643c02ef59d0c287371561f64678003f8887d875") ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 11:13:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket$nl_xfrm(0xa, 0x3, 0x87) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0xa, 0x1f) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0xffffffffffffff7e) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendto(r2, &(0x7f0000000180)="947747d3aab37b54737ad84294c9fd5e8eef0113ead434d38bec68bfcd6b0e4750360f5ed1cdf8f41357cc3b94dce74a8f3c29db31f44466af32d196da584b08e6d0898edaa6429497c1c8b0ae17c9c4aa95c8c47d6895c1b2a855f4b1f5efd7d818b7960f6eac27cba95af8a5a24346b65b1dc1ba68ea5203e725dca935a6fd9d22ef3fb3515eb35f8162d65bab2a2b9e5997a61bf22598710fda23128dbcf8a23ec224f51c5a40f427be90cbf7d17f486e1a7a9d6f5a6d31", 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x43, 0x101}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090750800"], 0x0) 11:13:39 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80a00, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x9) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, &(0x7f0000000180)) 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 653.759877][T11544] binder: 11543:11544 ioctl c0046209 0 returned -22 11:13:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @rand_addr=0x2}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0x1ce6a5f841043059) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x715}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000540)=0xc) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) sched_setattr(r8, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f0000000600)='net/netfilter\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r7, 0x0, 0x8, 0x8}, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000000c0)=0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r8, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x6, 0x6, 0x7, 0x100000000, 0xc7f]}, 0xe) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:39 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = gettid() ptrace$poke(0x1, r4, &(0x7f0000000000), 0x8) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc0d05604, 0x0) [ 653.919037][T11558] vhci_hcd: invalid port number 97 11:13:39 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = gettid() ptrace$poke(0x1, r4, &(0x7f0000000000), 0x8) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket$nl_xfrm(0xa, 0x3, 0x87) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0xa, 0x1f) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0xffffffffffffff7e) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendto(r2, &(0x7f0000000180)="947747d3aab37b54737ad84294c9fd5e8eef0113ead434d38bec68bfcd6b0e4750360f5ed1cdf8f41357cc3b94dce74a8f3c29db31f44466af32d196da584b08e6d0898edaa6429497c1c8b0ae17c9c4aa95c8c47d6895c1b2a855f4b1f5efd7d818b7960f6eac27cba95af8a5a24346b65b1dc1ba68ea5203e725dca935a6fd9d22ef3fb3515eb35f8162d65bab2a2b9e5997a61bf22598710fda23128dbcf8a23ec224f51c5a40f427be90cbf7d17f486e1a7a9d6f5a6d31", 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x43, 0x101}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00148500fe8000000000000000000000000000aafee60600f4f7ae97fa8000000001000000000000000006aa00000000c0b7dba76a2e53e35cd42f0805acc4ccbea2f40b434e2e8fbf047074b0d818e04b097d24d73b0d0e6121a9327e4a619ea75d53b586eb46e982a3840bbbe54933dd3613f6f82939d5ae04ea9893a6e9acd684e2be94943054eacb54ad0df6ffbcea55958152b4494717cb01cb0b02b6938f1f48be7fd61f72b52d4cf9d10d7833d8dee320f45c5fa1c2380b73978e12e0a44adcdc7bd5b787a18b6579a1d584c1c76faed4e0c72a876219a19106814f0a567f66182e4efdf7b8e3bd40aed0295d29a78051505b9141d3d7aafe463f0e47", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090750800"], 0x0) 11:13:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 653.947762][T11558] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 653.964373][T11558] vhci_hcd: invalid port number 97 11:13:40 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = gettid() ptrace$poke(0x1, r4, &(0x7f0000000000), 0x8) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket$nl_xfrm(0xa, 0x3, 0x87) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0xa, 0x1f) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0xffffffffffffff7e) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendto(r2, &(0x7f0000000180)="947747d3aab37b54737ad84294c9fd5e8eef0113ead434d38bec68bfcd6b0e4750360f5ed1cdf8f41357cc3b94dce74a8f3c29db31f44466af32d196da584b08e6d0898edaa6429497c1c8b0ae17c9c4aa95c8c47d6895c1b2a855f4b1f5efd7d818b7960f6eac27cba95af8a5a24346b65b1dc1ba68ea5203e725dca935a6fd9d22ef3fb3515eb35f8162d65bab2a2b9e5997a61bf22598710fda23128dbcf8a23ec224f51c5a40f427be90cbf7d17f486e1a7a9d6f5a6d31", 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r5, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x43, 0x101}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090750800"], 0x0) [ 654.022613][T11565] input: syz1 as /devices/virtual/input/input247 [ 654.039830][T11558] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 11:13:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x803, 0x7f) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 654.111721][T11558] vhci_hcd: default hub control req: 0000 v0000 i0003 l0 [ 654.139423][T11574] input: syz1 as /devices/virtual/input/input249 11:13:40 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = gettid() ptrace$poke(0x1, r4, &(0x7f0000000000), 0x8) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x80000001, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r0, 0x800454df, 0x70e000) [ 654.300676][T11592] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 654.422838][T11572] vhci_hcd: invalid port number 97 [ 654.428290][T11572] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 654.437992][T11558] vhci_hcd: invalid port number 97 [ 654.443133][T11558] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 654.451487][T11558] vhci_hcd: default hub control req: 0000 v0000 i0003 l0 11:13:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = dup2(r0, r1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="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", 0xfd) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r5, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x24}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002dc0)={&(0x7f0000000140), 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x80) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f51108000100030100020800038005000000", 0x24) sendmmsg$alg(r0, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="78cfccc206661e1bc11ed6ae11a2d395b573c508d89b17f924f4c6802dacb75a06f61c201a1187a307e89d3a2e054e2d670fcf8dee6274ff95ece37f0876a7acca83b37074259e28a9b05891c25b296bbb34f3de2accb1a416c0c5ff621e18d47878f658e3cdd60e82e7cc4ffe9d9294d1b7ec2db32d27264ce2371fd4e545a7ba93f3bad220825912394e4ce0df6787106653e6a85fdfdfc7cb107e00e54dc5a32ba44cd5b55a0677687e4d1c03b7efa03a94ad239cb3b8248b3898d6c6d3207383daade1b03dd27234b74d7e97221a0ac2787836247ac3df", 0xd9}], 0x1, &(0x7f00000002c0)=[@iv={0x80, 0x117, 0x2, 0x6c, "ddb0a1ad19a787bff8a1adcd80d9cc178c9451e762d4712941153bb48635d7ff80175ed98db49dc072f49f44064a53fdf2288eb614f5220336c472aa5b67e8f7059481eee4f7b83630b609096fbd85cfa5b7bb6eec53f3e47693d889ddc5738cf42157bb2e474af92e270780"}, @assoc={0x18, 0x117, 0x4, 0x100}, @iv={0xb0, 0x117, 0x2, 0x9c, "037385f9a8b6bcc14e69aa67d35c72c3e62f26812c3a1d028b545b7353988ca58d9438cbfe7dbfc6382f358ddfb5fa767b358df3e4f11b540890bd404f989fb1c4dc43f72163a1845c9cc84ffe38a95c6b8a791386ad64e25182bd528468c169ec2071bd38735885d299b742ff539d4d8ca04e4279b793af1d5afcb9f26158ae0d27586f34212326b9c7578662e5c09c8ea3bb26d11927069b96cb2c"}], 0x148, 0x80000}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000040)="190c546039f6d07070288763648f20786b00d58a6cfdcda17d747992d5e1317b375b356d31bbfcbacee14f3469b0e1c81c01991a71c6283eecce59eebfaf524594ca15bd334ebfeafcc95a0b04d842", 0x4f}, {&(0x7f0000000540)="256a2faa3264f0e0970ce7923be1110f2f86724af8a6d6bbe5e73bd35e2d763f8792106d7a", 0x25}, {&(0x7f0000000580)="dff0e3a74e2abeb0569a78a0", 0xc}], 0x4, &(0x7f0000000600)=[@iv={0x20, 0x117, 0x2, 0xb, "965e24b66aed99609d16c0"}, @iv={0xc0, 0x117, 0x2, 0xa5, "82a2c474ab47ff20510988edff8cb4ef5618a2d3fa2f8e08f8ef561b25695b1038d4e62ea90d757566582f2b59b5a149a53491cd74f5889ad8569a4ecfd482d92479c6a1d6484dab254cf34a2529a2810002a6d22295ee9409b20563284c5ef855755d5bf560045d9f5790d7f683a5f9abf581f1339b316b8f12b2be5f91da5c49f8209c0378fd3d998dcd6b506bef0a14c7d54f98c52b55b53127241c5569db08a8a49dd1"}, @iv={0xf0, 0x117, 0x2, 0x7, "c9f1a1d4abe9db7b71141590c8794c2f60e1e957e9321659b681ae2f283e5642f0e8a423040a2bca91ed06caf3cf435fcd67a87f3729b838b26111b772c8a576a68b43d6232360a3ecdc2f81d1c7d39e3203ad48f44dabe7516e804f2c7dc44888f2aa9f312feb9377d9291f50e377057a3c27a1101eb129368a32c9ffe5ba2ef0d7b2c39f0f45162f6c78b585716c0b5985765b078fc37c29f94fd879ddbf428133a82bc38173af0ac09a30db830d6211bc9151b6ca868dfdcc7c7e361c26ea4a64f3fa233511ade5da68ae0e1b5db225f754d3b4"}, @iv={0xc8, 0x117, 0x2, 0xb3, "094c2f5a77421f2d918a49fb9bab201a57ec51aa24766e14a304fcfc98573564bd02f84fe8243e201ac9c1d4d04fce9a41413a621dd2077d17a1af7b1c390a57e9dd9a4cdfe186a18f9ad7b9c75a5b9ebc1b10cfa8933f2ccd5ce571c5827ea45d66ce38462b2a78ccfe22a53a050a086d1b11f37f8eca3e9118516c150ff1b991ab8b81c76591e95c66526c33f01606f35547c388d3a3eab3b89cdd04220f83a05f6c650062f2a78cec862047e6d99711725e"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x2b0, 0x40}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="1db6be4344c0f007a4262fbf880af97e3684cf67ca6cee682676c732b53866c9bca10bd75cdb5f2c0bbfbce9350fdf6ae24e23087150a861e23ccfb9a8ee86d33239449c8a49f9a8c2b49f204b4a4adb6eefddae8dc1a67ec0fc8aff94fd9b43d6f3e80bf0dc5b00c7eb920441e57e278d090adbd1c1e40d7eaa1205c540b58450336c23d9", 0x85}, {&(0x7f0000001980)="953899be484c499ffc6f28861506e2fd046c5345", 0x14}, {&(0x7f00000019c0)="bd81c1464a0fb9d2e80adce99b4ebb07c797e5770cf604a52c26ba7ffc3250e52954d2c980501085615d935ce46157fd3266349f78ffa827f704e712c5ce013570e3b3fa764fb41586ad58b4cb272ca6a7ef610c93973acf5b77490123d6d3a15c5d1c91a9f32a75b7977d16f3c55e7b5cf85be3e4bfb2610add5ffebf00d415a6ffe52640695765bc", 0x89}, {&(0x7f0000001a80)="be97b24645ed5ceb0f06e5bc8e029f92c3e5115ef1f9c6369cb6ed6b5a6a90c4ce", 0x21}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="57476549c336cca25933d09dc39365ec8c8654ec2fa99f8797e0c0603b081439679fbaf5af89c4468c3b22b87bda9afad78430c363309fbdf0f71220e1f5ff440f6aa3a3775add0b8667b61a98aaa2ccec4dc0437526b794f568d762ad302358fc953999184f32848df6388e28b934370fc50d60af030cb76a8a9b07c76b952dd01397dc63fe217941f7fe9f3745be4aeb64ea2a20db1e66f3cdbf527c9b87e7802274f9039bb6e687120e4b87db1be99c2fb93e75c65337741cfdf8e93c181101053131adedef1347a5a629a5e93b3792a9df8b0ac16ecf2157e47913a6e50e833bd5d28fa3d82c75043ba6140d8aab", 0xf0}], 0x7, 0x0, 0x0, 0x1004c020}], 0x3, 0x0) 11:13:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0xc1105517, 0x0) 11:13:40 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) gettid() sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:40 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 654.589278][T11707] input: syz1 as /devices/virtual/input/input252 11:13:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x7, 0x0, [{0x80000019, 0x5c6, 0x3, 0x1, 0x8, 0xfff, 0xeb}, {0xb, 0xd77df93, 0x2, 0x1000, 0x0, 0x4, 0xffffffffffffff01}, {0x8000001e, 0xf, 0x4, 0x7, 0x0, 0x100000001, 0x4}, {0x2, 0x401, 0x4, 0x7, 0xfffffffffffffffa, 0xc3fa, 0x2}, {0x6, 0x0, 0x2, 0x0, 0x0, 0x6, 0x100}, {0x7, 0xfffffffffffffffe, 0x7afde7de5659f0eb, 0x7, 0x3ff, 0x1, 0xffff}, {0xb, 0x7f, 0x1, 0x101, 0x40, 0x4, 0x4}]}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ee4bc6236b03b4c76af3b5c5516350f2a32b4a7098f62ffeab53441cddb08a2da17ba5082c9996329087c494ae8cf6a60e5940d3e0db9cca4217c6c43824060c09c4f3a57c1861563bd160ea013a32f6ebcaac2943b48fc3164acbf97f67619a4fc67d49a1e20c", 0x67}], 0x1}, 0x90) 11:13:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0) 11:13:40 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x2000) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 654.796385][T11707] input: syz1 as /devices/virtual/input/input254 [ 654.804813][T11825] vhci_hcd: invalid port number 47 [ 654.831766][T11825] vhci_hcd: default hub control req: 2f64 v7665 i002f l29029 11:13:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) prctl$PR_SET_ENDIAN(0x14, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87z\x92S\x89E^Wv\x1brJx\xe9\xa8\x06t\x13%\"N]~\x00IA\x18\xa4\x86\xb6\xad2\x81J8O\xb4)\x89\x14\xd4\x8d\xf7\x85\xeb\x00\x00\x00\x00\x00\x00\x00\x02\xf3\ap|!\x97\x18R\xfc\r\x00\x00\x19\x00\x00\x00\xf9\xb0?s\x8cg\xdf\xc2X8\xfc\x7f\xff\xa5\x86\xf7\xe4d\xe3J\x88s\xf9F\xac\x02V\xaf\xe8\xcfG.\xa8\x03sRU\xa2\xbf\xb7\xe4\x8d\xc24\xdc\xf1\xd7x\xef\xd4\xda\xbc>a\xc3\xb7\x19\xc5\xa3y\xf53\xf2,\x83\xd7 \xd1a\xcd\xbd/\xaf\x03\xd6\nP\xc5\x8f+\x04\f`?^-*\xf5j\r\xed\t\x00\xd5]5`\xf2S\xa7\xcc\xf5Z\xbc\xf3e\x83\xa2\xe0jUq%\x99\xa0\xac&[\xa8\xde8\xfb9\xe0\x02\xc9$\xbd?\xac\x984\xe6xY\x7f\x1cT\x87$\f\x91|\xd8\xa6\xf6\xb7\x16\xb2\xf4\xeec') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0x272) [ 654.996402][T11911] input: syz1 as /devices/virtual/input/input256 11:13:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_setattr(r3, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x7fffffff, 0x20, 0xa0ca, 0x4, 0x0, 0xffffffff7fffffff, 0x8, 0x0, 0x40, 0x2, 0x7d9, 0x4, 0x81, 0x0, 0x2, 0x9, 0x9, 0x40, 0x5, 0x2, 0xffff, 0x5, 0x5, 0x8, 0x7, 0x9, 0x6, 0xfffffffffffffff7, 0x6, 0x7f, 0x2, 0xc7, 0x0, 0x2, 0x4d82, 0x2, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x800, 0x9, 0x800, 0x2, 0x30, 0x1, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r4, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r7, r8) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r6, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r5, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r9, 0x2007fff) sendfile(r2, r9, 0x0, 0x87ff7) 11:13:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x1, 0x1, &(0x7f0000000140)=0x2}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xbf19113e390e0891, 0x100210, r0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r4, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000240)={0xad09, "0c363603e053bb7ad0192637c9eb30834cb09eb79a1f815db64e077c561e9284", 0x5, 0x1, 0xd26e, 0x101, 0x2, 0x3, 0x7, 0x1ff}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) close(r4) flistxattr(r4, &(0x7f0000001480)=""/4096, 0x1000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="07fe43c2cb27f1020154e07fe9039546f98ba39f73242184e7b8f9ae0278a6d7805b4fa8e5419354deb713a4e49a6da9714836a32dc130a5ffc20a65", 0x3c) 11:13:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x1) 11:13:41 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x2, 0x613, 0x3}}, 0x28) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x13) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r5, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r5, 0x40}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x1, 0x3000000, 0x9}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000001200)={@val, @void, @ipv6={0x0, 0x6, "c015de", 0x1088, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4, 0x0, 0x3]}, @loopback={0xfffffffe}, {[], @tcp={{0x0, 0x0, r7, 0x41424344, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xf, 0xf989, "c07afebdbea5678e34a260"}, @sack={0x2, 0x6, [0x7fff]}, @sack={0x2, 0x2a, [0x6, 0x3, 0x6927, 0x2, 0x9, 0x5, 0x9, 0xf32, 0x1b, 0x5523eb9a]}, @generic={0x0, 0x2}, @generic={0xfe, 0x3, "9e"}, @sack={0x5, 0x26, [0xf480, 0x0, 0x0, 0x0, 0x800, 0x800, 0x0, 0x0, 0xb895]}, @timestamp={0x8, 0xa, 0xbc71, 0x1ff}]}}, {"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"}}}}}, 0x10b4) ioperm(0x10000, 0x9, 0x3f) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100020c1000418e00000004fcff", 0x58}], 0x1) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="ce447dae7ae031faa073f91d6fcd2d6a"}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0xc150e04ce0ec4b75) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) 11:13:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 655.320757][T12066] input: syz1 as /devices/virtual/input/input259 11:13:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) listen(r1, 0x10000) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sysfs$2(0x2, 0x40, &(0x7f0000000240)=""/200) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 655.393564][T12066] QAT: Invalid ioctl 11:13:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) 11:13:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x32a) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000d000000", 0x24) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 655.555334][T12198] QAT: Invalid ioctl 11:13:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x40044591, 0x0) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x32a) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000d000000", 0x24) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) 11:13:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x32a) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000d000000", 0x24) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) 11:13:41 executing program 1: r0 = eventfd(0x82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) tee(r0, r1, 0x2, 0x2) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @mcast1}, 0xfffffffffffffd19) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:41 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x1) 11:13:41 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="04002cbd7000fddbdf2504"], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x4040001) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1f8017f9de809a80}, 0x40070) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x40044581, 0x0) 11:13:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10502) tee(r0, r1, 0x8, 0x11) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb270e9cad0194ba2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r6, r7) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r4, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r8, 0x2007fff) sendfile(r0, r8, 0x0, 0x87ff7) [ 656.014719][T12328] input: syz1 as /devices/virtual/input/input264 [ 656.047450][T12331] input: syz1 as /devices/virtual/input/input266 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x4) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) r4 = gettid() r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r4, 0x0, r3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r7, r8) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r6, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r5, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r9, 0x2007fff) sendfile(r2, r9, 0x0, 0x87ff7) [ 656.170726][T12340] input: syz1 as /devices/virtual/input/input267 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) write(r1, &(0x7f00000001c0)="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", 0xfd) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x64040) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000000)={{0xffe4fee46c270d2, 0x2, 0x2, 0x1, 0x6}, 0xfffffffffffffffc, 0x100000001}) 11:13:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x1) [ 656.293102][T12456] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 656.372517][T12463] input: syz1 as /devices/virtual/input/input269 [ 656.401563][T12464] input: syz1 as /devices/virtual/input/input270 11:13:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 656.464207][T12463] vhci_hcd: invalid port number 49 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 656.493947][T12463] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) poll(&(0x7f0000000140)=[{r1, 0x4020}, {r0, 0x8}], 0x2, 0x3f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r2, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}, {0x0}], 0x5}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x317}, 0x24}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000200)=[@mss={0x2, 0x5}, @mss={0x2, 0x2}, @window={0x3, 0x80000001}], 0x3) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0) syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0x40002, @loopback, 0x7}, 0xfffffed7) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) dup(r5) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 656.628497][T12471] input: syz1 as /devices/virtual/input/input273 [ 656.769717][T12596] vhci_hcd: invalid port number 49 [ 656.775005][T12596] vhci_hcd: default hub control req: 7665 v6874 i0031 l0 11:13:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xb0e6, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000280)='/dev/input/mouse#\x00') io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x40000) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r5, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000100)=""/107, &(0x7f00000001c0)=0x6b) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) sendmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000180)=@ipx={0x4, 0xffffffffffff79d7, 0x6, "e1a58140ddd2", 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="f23597318f9a29e5119522da2367c7c1ae649be05d96231b33b1d8f776a06a965e1a23fda224da472c2f261a94728dfbc1bebc7a47a66c4b60db90", 0x3b}, {&(0x7f0000000340)="12728cc0ee2593a77044b409c78650c863e302f7564b80e0931230496e319eecc38d9baa8ef2e7fa5569f7d7c6aa20da27b4453c6c2c95d1c9a81ef63e55d13103dfb2923d70a861eedbe92b2792ec7bd309dbf52ce8f65c41f88dc22eded92dd19e992479e1d209626ddfa24cb19dcbb2b4926edcba2d410a210c6ef9258b73906c15e16fbe31c8a02682a45e7e5d4e001054af7125f7873ac08f47ef7eb9e371c80dfbe2fe411928cfb5f6802c6f6472c74221e094eb531b775097a39c26571264847a32107ccbb2e8eed1952ed0e99d7f88e9bad74b9c28088a9442ba757159483ac1d9fc8b066b929853ff96", 0xee}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000200)="f673c65b16b74bfb1f7f727ce0e5bb72165ced4d1beb214c2b6e67de946aca27e156d4f4d846f0d69a198a777fd9cec6911327ccd37dce8e3cf8769a7168d4e5d3e8cbed623ec7839533eda0aca757610a0d28f5", 0x54}, {&(0x7f0000000440)="3d2ed7547657f4aa4df0d6d0a6f8b9972ed3c7fe1dbdabe18d05e8e8ffc84ed05d1bf54c17647639700acfa7ae653ae56a20117dc97e4f906ac7ddb2d325c220d8e20bb323383ee9f341de439e430283c14da22fece00fe1155ea74ffde5c085baa44ca76ed87f611771a0ef88ed9d08afd4786942fd681bc3f3862e84a907a85d3782d8438f208b7caea1218a4f2448977042d597702c0f7b0f78726daafc54fb5c67c3def58cf21aab80b04801a1e88e5fe32c8a50c3a60cd77d7ec66669ac3b615ab76e6e18a8dd1967e064be83a445b13877", 0xd4}], 0x5}}, {{&(0x7f00000005c0)=@sco={0x1f, {0x25, 0x705f, 0x1, 0x870, 0xab9c, 0x7}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000640)="d2110c8667b5149d8cfc640db58959d4a3cc42316968d8baad9d35b06ef04426e9a7badd04c7ad60991075d4bf509f3aaa6f50ab8e534eb6c25b7ef28be52779d2a387ecbf8c2e881785d7f49fc62545779ba4f433e4394165455f5c87fdc7335e089396b9e1116ba6cb9dabe2f69395bb231a98018f9f037634cd6bd1856be076821fda915fa50161188a7311bfa7277661c979b310b74303788f8a9e122687fa4c8c8e25969e06f13ae2fc4d4e55fb02a019d1c5ca622776961c60a143a0", 0xbf}, {&(0x7f0000000700)="a4d2025bc1b5f08e3f9632f61d360afd49ef6ce858d0a08f48a6893bebe946b117700b6b4a90877f02bb7778d42036818b0a6864dfb7739a24bb3c5577ee389349d921349d2998663c61f4e6b6a8", 0x4e}, {&(0x7f0000000780)="f242dacb708bda174f2e02b4c73b8261acfc914a2f8fa1767ca0458b5db0602694acca59c18765e3f3a34e8c98b044e0b97f73263781b0bdbdba0e7a5a67724f2f4321963bb10d3d77c9dcf4fc99eef2989e80d50f110c3d19f4b5d18e317bc53e7747e6fa54a593eb7c401188e1d28790d271996faa259907503ba67d5d3f016f6afc2683b4343e4d93e9a1b2da9a9a0863a7519586a1bb910d5f60c9b6e62d9c6f3bf44556ef1fa38207f3a1a371789833dd3b0316ff83b96951171936634c0ceec54f48e37538473e8f2e9f0f4d8d6a7ae896f9f22bdf6cee21ac2ebede214480877bc202f429ff0f72d43ce3157618fc", 0xf2}], 0x3}}, {{&(0x7f0000000880)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="ef989af473b3ed3f6249c24232e48a63377ccce5a2f13e908eb1833cefdbc03c047e02e9d247b5197ddcc0603644325c2b59a954e3cd4d6c74f9b7e458be2337161af30022b098c8dc1f5c00763a82ad46", 0x51}, {&(0x7f0000000280)="39dcba36ec59c90625", 0x9}, {&(0x7f0000000980)="ca79533b1b7abcf8317e", 0xa}], 0x3, &(0x7f0000001fc0)=[{0x88, 0x1, 0x2, "20e42cc1fb98853e098b29de13b82f194e7e8ecdec9ce8b7dbe6fe428fd492bed1497ce77d81a79a11f39a0299159cafc5bd097a27d3e0b237e36a553ed5318d9b553ddd6c93c6b0616ee84906e5b7a500d9c7407b312b9a7281b57d7f14a8a77b4b6c47db1e8e6dfde5f0764d656ed7dcfce63ce25fa986"}, {0xd0, 0x1, 0x1, "95e56841e3fda9e7f4ff9c2a66520faa8f29f2f3f094c2999522d6e05dfa9f57d3552e8cc36b0966f3f444bac228c01c9819e71ba64e5b61bfbb5761c07f486356fdf5fd5fdd99988d4d8f0b8cff9c5e673c91b0c849fd4f6548f5b5e9ec1a29881cee4ba5ca2423c25cf294968c1a5c8105945fe72ee6edbd1ca1c8b42b00d8ebfe890b58a90c87e6d23467d21deb70146fe292d4374b4603f2ba07b4c90741172c4dc2acfac319fff3f86063c33a9788f42e647cfc40a5de1742ab9e7e"}], 0x158}}], 0x3, 0x80) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x40044591, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 11:13:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x1) 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:42 executing program 0: setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x8, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x7, 0x0, 0x2, 0x1c1, 'syz0\x00', 0x8001}, 0x5, 0x200, 0x1000, r2, 0x6, 0x5, 'syz1\x00', &(0x7f00000000c0)=['syz1\x00', '/dev/input/event#\x00', '/dev/input/event#\x00', '/dev/uinput\x00', '/dev/input/event#\x00', '/dev/uinput\x00'], 0x53, [], [0xbb9, 0x6, 0x6, 0x101]}) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x9, 0x0, [{0x5000, 0xf3, &(0x7f0000000280)=""/243}, {0x2, 0x7, &(0x7f0000000380)=""/7}, {0x6000, 0xdc, &(0x7f00000003c0)=""/220}, {0xd000, 0xd7, &(0x7f00000004c0)=""/215}, {0x4000, 0x26, &(0x7f00000005c0)=""/38}, {0x5000, 0x1000, &(0x7f0000000fc0)=""/4096}, {0x3000, 0x3f, &(0x7f0000000600)=""/63}, {0x800, 0xa0, &(0x7f0000000640)=""/160}, {0x3000, 0x4c, &(0x7f0000000700)=""/76}]}) ioctl$EVIOCGEFFECTS(r3, 0x40044581, 0x0) 11:13:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$NBD_DISCONNECT(r2, 0xab08) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) [ 656.946846][T12604] input: syz1 as /devices/virtual/input/input274 [ 656.959287][T12606] input: syz1 as /devices/virtual/input/input275 [ 656.968581][T12611] vhci_hcd: invalid port number 97 11:13:42 executing program 1: eventfd(0x82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 656.991045][T12611] vhci_hcd: default hub control req: 2600 v6561 i0061 l0 [ 657.033957][T12604] QAT: Invalid ioctl 11:13:43 executing program 1: eventfd(0x82) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 1: eventfd(0x82) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) 11:13:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) [ 657.182957][T12606] input: syz1 as /devices/virtual/input/input278 [ 657.296292][T12634] input: syz1 as /devices/virtual/input/input279 [ 657.321878][T12636] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r3, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x1, 0x3, 0x3, 0x2}}, 0x26) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x40044591, 0x0) 11:13:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) 11:13:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x40044581, 0x0) 11:13:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) [ 657.477408][T12652] input: syz1 as /devices/virtual/input/input283 [ 657.511922][T12648] input: syz1 as /devices/virtual/input/input282 [ 657.519093][T12660] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:13:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x18bc1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/153, 0x99) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}, 0x0) 11:13:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) 11:13:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:13:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(r1, 0x0, &(0x7f0000000100)=0xffffffffffffff11) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000300)={0x900000000000000, 0x1, 0x2, 0xffff}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x8d3b, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r3, &(0x7f00000003c0)="41e39a57c631b5563947c72c8acd28c05933dbdce05a864781d57fb19f3b2464558d77d7660732c284585ac00db6201455f0333cd7d0ddeecf1a38c88b262c81d016bbad36a7d19a0533d5563c51cde5fb15deac8372f8b607ad94e5", 0x5c) ftruncate(r7, 0x2007fff) sendfile(r2, r7, 0x0, 0x87ff7) [ 657.670790][T12772] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 657.724245][T12777] input: syz1 as /devices/virtual/input/input287 [ 657.751515][T12777] ------------[ cut here ]------------ [ 657.757248][T12777] refcount_t: increment on 0; use-after-free. [ 657.763666][T12777] WARNING: CPU: 0 PID: 12777 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 657.772880][T12777] Kernel panic - not syncing: panic_on_warn set ... [ 657.779464][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 657.786999][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.797041][T12777] Call Trace: [ 657.800345][T12777] dump_stack+0x172/0x1f0 [ 657.804675][T12777] ? refcount_inc_not_zero_checked+0x1e0/0x200 [ 657.810812][T12777] panic+0x2dc/0x755 [ 657.814699][T12777] ? add_taint.cold+0x16/0x16 [ 657.819364][T12777] ? __kasan_check_write+0x14/0x20 [ 657.824458][T12777] ? __warn.cold+0x5/0x4c [ 657.828773][T12777] ? refcount_inc_checked+0x61/0x70 [ 657.833960][T12777] __warn.cold+0x20/0x4c [ 657.838186][T12777] ? refcount_inc_checked+0x61/0x70 [ 657.843366][T12777] report_bug+0x263/0x2b0 [ 657.847684][T12777] do_error_trap+0x11b/0x200 [ 657.852267][T12777] do_invalid_op+0x37/0x50 [ 657.856669][T12777] ? refcount_inc_checked+0x61/0x70 [ 657.861933][T12777] invalid_op+0x23/0x30 [ 657.866076][T12777] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 657.871864][T12777] Code: 1d 46 b6 64 06 31 ff 89 de e8 ab 78 35 fe 84 db 75 dd e8 62 77 35 fe 48 c7 c7 c0 08 c6 87 c6 05 26 b6 64 06 01 e8 17 ff 06 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 657.891548][T12777] RSP: 0018:ffff88804b6178b8 EFLAGS: 00010282 [ 657.897595][T12777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 657.905549][T12777] RDX: 0000000000017674 RSI: ffffffff815c3826 RDI: ffffed10096c2f09 [ 657.913505][T12777] RBP: ffff88804b6178c8 R08: ffff88804f6ea300 R09: ffffed1015d04101 [ 657.921461][T12777] R10: ffffed1015d04100 R11: ffff8880ae820807 R12: ffff88804c8d49c0 [ 657.929415][T12777] R13: 0000000000000000 R14: ffff8880a01efa40 R15: ffff8880a5ec19a8 [ 657.937387][T12777] ? vprintk_func+0x86/0x189 [ 657.941963][T12777] ? refcount_inc_checked+0x61/0x70 [ 657.947153][T12777] kobject_get+0x66/0xc0 [ 657.951380][T12777] cdev_get+0x60/0xb0 [ 657.955345][T12777] chrdev_open+0xb0/0x6b0 [ 657.959657][T12777] ? cdev_put.part.0+0x50/0x50 [ 657.964407][T12777] ? security_file_open+0x87/0x300 [ 657.969520][T12777] do_dentry_open+0x4df/0x1250 [ 657.974270][T12777] ? match_exception_partial+0x242/0x2d0 [ 657.979888][T12777] ? cdev_put.part.0+0x50/0x50 [ 657.984640][T12777] ? chown_common+0x5c0/0x5c0 [ 657.989303][T12777] ? inode_permission+0xb4/0x560 [ 657.994227][T12777] vfs_open+0xa0/0xd0 [ 657.998204][T12777] path_openat+0x10e9/0x4630 [ 658.002789][T12777] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 658.008579][T12777] ? kasan_slab_alloc+0xf/0x20 [ 658.013321][T12777] ? kmem_cache_alloc+0x121/0x710 [ 658.018433][T12777] ? getname_flags+0xd6/0x5b0 [ 658.023112][T12777] ? getname+0x1a/0x20 [ 658.027184][T12777] ? do_sys_open+0x2c9/0x5d0 [ 658.031775][T12777] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 658.037143][T12777] ? perf_trace_lock_acquire+0xf5/0x530 [ 658.042679][T12777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 658.048424][T12777] do_filp_open+0x1a1/0x280 [ 658.052919][T12777] ? may_open_dev+0x100/0x100 [ 658.057606][T12777] ? __kasan_check_read+0x11/0x20 [ 658.062627][T12777] ? do_raw_spin_unlock+0x57/0x270 [ 658.067725][T12777] ? _raw_spin_unlock+0x2d/0x50 [ 658.072595][T12777] ? __alloc_fd+0x487/0x620 [ 658.077091][T12777] do_sys_open+0x3fe/0x5d0 [ 658.081494][T12777] ? filp_open+0x80/0x80 [ 658.085761][T12777] ? __x64_sys_clock_gettime+0x16d/0x240 [ 658.091379][T12777] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 658.097439][T12777] __x64_sys_open+0x7e/0xc0 [ 658.101973][T12777] do_syscall_64+0xfd/0x6a0 [ 658.106467][T12777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.112380][T12777] RIP: 0033:0x4137d1 [ 658.116280][T12777] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 658.135885][T12777] RSP: 002b:00007f1bc26a07a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 658.144304][T12777] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1 [ 658.152365][T12777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f1bc26a0850 [ 658.160327][T12777] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 658.168302][T12777] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1bc26a16d4 [ 658.176278][T12777] R13: 00000000004c8c84 R14: 00000000004dfc48 R15: 00000000ffffffff [ 658.185838][T12777] Kernel Offset: disabled [ 658.190212][T12777] Rebooting in 86400 seconds..