ompute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

03:32:44 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:44 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x0, 0x3, 0x4}}}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff7f0000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newneigh={0x24, 0x1c, 0x4, 0x70bd28, 0x25dfdbfc, {0x1c, 0x0, 0x0, r5, 0x4, 0x4, 0x6}, [@NDA_MASTER={0x8, 0x9, 0x9}]}, 0x24}}, 0x800)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xf81}, &(0x7f0000000100)=0x8)

03:32:44 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0xa, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_sa={0x2}]}, 0x30}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

03:32:44 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/213)

03:32:45 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000040)=@ethtool_cmd={0x17, 0x2625}})

03:32:45 executing program 3:
openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

[  976.508248][ T3224] usb 3-1: new high-speed USB device number 21 using dummy_hcd
03:32:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x2c, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0)

[  976.768934][ T3224] usb 3-1: Using ep0 maxpacket: 8
[  976.870221][ T3224] usb 3-1: unable to get BOS descriptor or descriptor too short
[  976.969604][ T3224] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  976.978699][ T3224] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  976.989790][ T3224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
03:32:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x24}}, 0x0)

03:32:46 executing program 3:
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0xa0}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

03:32:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)

[  977.797226][ T3224] usb 3-1: string descriptor 0 read error: -22
[  977.803805][ T3224] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  977.813229][ T3224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.879529][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  978.289443][ T3224] usb 3-1: 0:2 : does not exist
[  978.361209][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  978.485894][ T3224] usb 3-1: USB disconnect, device number 21
03:32:47 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

03:32:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x2c, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0)

[  978.987352][T25707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  979.290241][ T3224] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  979.547388][ T3224] usb 3-1: Using ep0 maxpacket: 8
[  979.643529][ T3224] usb 3-1: unable to get BOS descriptor or descriptor too short
[  979.751166][ T3224] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  979.760190][ T3224] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  979.770710][ T3224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
03:32:48 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:48 executing program 1:
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
syz_open_dev$midi(0x0, 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, &(0x7f00000000c0)=""/248)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @broadcast}})

03:32:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)

03:32:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x2c, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0)

03:32:48 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
r1 = socket$kcm(0x2, 0x2, 0x73)
dup3(r0, r1, 0x0)

[  980.038703][ T3224] usb 3-1: string descriptor 0 read error: -71
[  980.045326][ T3224] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  980.054706][ T3224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.148064][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  980.277491][ T3224] usb 3-1: can't set config #1, error -71
[  980.317510][ T3224] usb 3-1: USB disconnect, device number 22
03:32:49 executing program 3:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)

03:32:49 executing program 1:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

03:32:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x2c, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0)

[  980.808446][T25751] IPVS: ftp: loaded support on port[0] = 21
[  980.847287][ T3224] usb 3-1: new high-speed USB device number 23 using dummy_hcd
03:32:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002280)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)

[  981.007492][ T9512] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  981.117091][ T3224] usb 3-1: Using ep0 maxpacket: 8
[  981.204841][ T3224] usb 3-1: unable to get BOS descriptor or descriptor too short
[  981.269497][ T9512] usb 4-1: Using ep0 maxpacket: 8
[  981.297537][ T3224] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  981.306453][ T3224] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  981.317348][ T3224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  981.343100][T25766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  981.378286][ T9512] usb 4-1: unable to get BOS descriptor or descriptor too short
[  981.472577][ T9512] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  981.481602][ T9512] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  981.492452][ T9512] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
03:32:50 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

03:32:50 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, 0x0, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4)
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x300, 0x4, 0x0, 0x0, 0xff, @dev={[], 0xfd}}, 0x10)

[  981.681473][ T3224] usb 3-1: string descriptor 0 read error: -22
[  981.688158][ T3224] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  981.697633][ T3224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.778227][ T9512] usb 4-1: string descriptor 0 read error: -22
[  981.784794][ T9512] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  981.794224][ T9512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.878051][ T3224] usb 3-1: 0:2 : does not exist
[  981.982135][ T9512] usb 4-1: 0:2 : does not exist
[  982.180253][T25661] tipc: TX() has been purged, node left!
[  982.249690][ T3224] usb 3-1: USB disconnect, device number 23
[  982.308877][ T3746] usb 4-1: USB disconnect, device number 41
03:32:51 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:51 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

03:32:51 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, 0x0, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4)
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x300, 0x4, 0x0, 0x0, 0xff, @dev={[], 0xfd}}, 0x10)

03:32:51 executing program 1:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

[  982.970953][T25830] IPVS: ftp: loaded support on port[0] = 21
03:32:52 executing program 3:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:52 executing program 4:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

03:32:52 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, 0x0, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4)
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x300, 0x4, 0x0, 0x0, 0xff, @dev={[], 0xfd}}, 0x10)

[  983.677106][ T9087] usb 3-1: new high-speed USB device number 24 using dummy_hcd
03:32:52 executing program 1:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

[  983.880958][T25869] IPVS: ftp: loaded support on port[0] = 21
[  983.897553][ T3224] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  983.947955][ T9087] usb 3-1: Using ep0 maxpacket: 8
[  984.028360][ T9087] usb 3-1: unable to get BOS descriptor or descriptor too short
[  984.108907][ T9087] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  984.117930][ T9087] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  984.128447][ T9087] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
03:32:53 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, 0x0, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4)
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x300, 0x4, 0x0, 0x0, 0xff, @dev={[], 0xfd}}, 0x10)

[  984.191533][ T3224] usb 4-1: Using ep0 maxpacket: 8
[  984.287810][ T3224] usb 4-1: unable to get BOS descriptor or descriptor too short
[  984.333845][T25886] IPVS: ftp: loaded support on port[0] = 21
[  984.421903][ T3224] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  984.430905][ T3224] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  984.441645][ T3224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  984.634140][ T9087] usb 3-1: string descriptor 0 read error: -22
[  984.640902][ T9087] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  984.650327][ T9087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.798239][ T3224] usb 4-1: string descriptor 0 read error: -22
[  984.804924][ T3224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  984.814276][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
03:32:53 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="cf00000000000000009b800686dd", 0x36}], 0x1}, 0x0)

[  985.006637][ T9087] usb 3-1: 0:2 : does not exist
[  985.145104][ T3224] usb 4-1: 0:2 : does not exist
[  985.356669][ T3224] usb 3-1: USB disconnect, device number 24
[  985.460334][ T9087] usb 4-1: USB disconnect, device number 42
[  985.789615][T25661] tipc: TX() has been purged, node left!
[  985.805259][T25661] tipc: TX() has been purged, node left!
[  985.814733][T25661] tipc: TX() has been purged, node left!
03:32:55 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

03:32:55 executing program 4:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

03:32:55 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f0009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

03:32:55 executing program 1:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

03:32:55 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

03:32:55 executing program 3:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

[  986.708826][T25967] IPVS: ftp: loaded support on port[0] = 21
[  986.770507][T25972] IPVS: ftp: loaded support on port[0] = 21
[  987.018311][ T9087] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  987.026547][ T3224] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  987.044673][ T8698] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  987.257583][ T9087] usb 1-1: Using ep0 maxpacket: 8
[  987.289041][ T8698] usb 3-1: Using ep0 maxpacket: 8
[  987.298253][ T3224] usb 4-1: Using ep0 maxpacket: 8
[  987.368852][ T8698] usb 3-1: unable to get BOS descriptor or descriptor too short
[  987.387921][ T9087] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[  987.399335][ T9087] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  987.409480][ T9087] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  987.419536][ T9087] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  987.429620][ T9087] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  987.442877][ T9087] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[  987.452216][ T9087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.462541][ T3224] usb 4-1: unable to get BOS descriptor or descriptor too short
[  987.488977][ T8698] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  987.498672][ T8698] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  987.509066][ T8698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  987.509479][T25968] raw-gadget gadget: fail, usb_ep_enable returned -22
[  987.568692][ T3224] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  987.578133][ T3224] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  987.588488][ T3224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  987.600151][ T9087] hub 1-1:1.0: bad descriptor, ignoring hub
[  987.606303][ T9087] hub: probe of 1-1:1.0 failed with error -5
[  987.832880][T25968] raw-gadget gadget: fail, usb_ep_enable returned -22
[  987.890364][ T3224] usb 4-1: string descriptor 0 read error: -22
[  987.898500][ T3224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  987.907743][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.928811][ T8698] usb 3-1: string descriptor 0 read error: -22
[  987.935378][ T8698] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  987.944842][ T8698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
03:32:56 executing program 4:
unshare(0x6c060000)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8", 0x80}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d488424001", 0xe4}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de0", 0x1a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245", 0x8b}, {&(0x7f0000000300)}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf538", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c", 0xbf}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d582de47d925a6188dd0b53", 0x3d}], 0x2}}], 0x3, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0)

[  988.049053][ T3224] usb 4-1: 0:2 : does not exist
[  988.140353][ T9087] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  988.202022][ T8698] usb 3-1: 0:2 : does not exist
[  988.299234][ T9087] usb 1-1: USB disconnect, device number 27
[  988.377344][ T9087] usblp0: removed
[  988.415364][ T3224] usb 4-1: USB disconnect, device number 43
[  988.502208][ T8698] usb 3-1: USB disconnect, device number 25
03:32:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r1, 0x0)
dup2(r1, r0)

[  988.760632][T26076] IPVS: ftp: loaded support on port[0] = 21
[  989.036494][ T9087] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  989.287148][ T9087] usb 1-1: Using ep0 maxpacket: 8
[  989.418630][ T9087] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024
[  989.429881][ T9087] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  989.440182][ T9087] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  989.450246][ T9087] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
03:32:58 executing program 1:
clone(0x8000000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x1}, 0x40)
bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000214fd4)={0xd, 0x9, 0x4, 0x121, 0x0, r0, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8]}, 0x40)

[  989.460278][ T9087] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  989.473493][ T9087] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[  989.482774][ T9087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:32:58 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth0_to_bond\x00'}, 0x18)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0_to_bond\x00'}, 0x18)

03:32:59 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)

[  990.327925][ T9087] usb 1-1: can't set config #1, error -71
[  990.410003][ T9087] usb 1-1: USB disconnect, device number 28
03:32:59 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40a9b3144", 0xff7c}], 0x1)

[  990.734963][T26120] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  990.874213][T26122] IPVS: stopping backup sync thread 26120 ...
[  991.107079][T26125] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
03:33:00 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

03:33:00 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

03:33:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x5f66, 0x8000cc, 0x6, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000380)="98a0473fe5ddbcd8399d960856b3aed9d5197164c43fc7297d3955c82a62800728672c24ce0d6c50d672fa1d1fdf608021a1e3c7d64be5375d14f237aa65204932610776fc59ac10b81cd4ad1ba353cc58393ccc3815c2f083bf55bb048ba0918bc44445522696390900893c5d1aefb09379a8a5ebf3e94febce9281ed595d99f2297ef0b909c00849ea9924be788ca55591a1c533302543c2e459d5ea4cf1006a956a3d344a4f598e0909dcb6417ff71ad1666509b2709476888cccf11fdc198838a4bdefff5225e4990867e711db32412a845f76a6cb0463b3077aa5c7a7", &(0x7f00000002c0)=""/80, &(0x7f0000000580)="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", &(0x7f0000000680)="4f1d36f77205888ad455fec8a88e3521cd53ad5507471dd74b9600fb37d50f0381201e20ef618b396578dfd088c186f8440b22ba83207799f5da13d23dacb97a15368e761b33d502a079987fab0422f0fe9b95a2750bdcb7a08d19cebd01219dbdc7e52dca1b6fe79151f18da1bb49362a394c83463efe32a835e63bce8bf4f8407af5b3057be0120d723758f2b548dac254940852e8c9058e5b300ae72802a8ac89af2c50e687ac44c40d12c750b5a2bbf4", 0x5, r1, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0", 0x0, 0x0, 0x60000000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x24)

03:33:00 executing program 0:
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]})

03:33:00 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40a9b3144", 0xff7c}], 0x1)

03:33:00 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}], 0x38)

03:33:00 executing program 0:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private1, @in=@local}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40046602, &(0x7f0000000040)=ANY=[])
lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440))

03:33:00 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

03:33:01 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a28093020600010001fd01020000003900090035000c00060000001900054006000000000022dc1338d54400009b84136ef75afb83de4411000b00c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f6, 0x0)

03:33:01 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x5f66, 0x8000cc, 0x6, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000380)="98a0473fe5ddbcd8399d960856b3aed9d5197164c43fc7297d3955c82a62800728672c24ce0d6c50d672fa1d1fdf608021a1e3c7d64be5375d14f237aa65204932610776fc59ac10b81cd4ad1ba353cc58393ccc3815c2f083bf55bb048ba0918bc44445522696390900893c5d1aefb09379a8a5ebf3e94febce9281ed595d99f2297ef0b909c00849ea9924be788ca55591a1c533302543c2e459d5ea4cf1006a956a3d344a4f598e0909dcb6417ff71ad1666509b2709476888cccf11fdc198838a4bdefff5225e4990867e711db32412a845f76a6cb0463b3077aa5c7a7", &(0x7f00000002c0)=""/80, &(0x7f0000000580)="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", &(0x7f0000000680)="4f1d36f77205888ad455fec8a88e3521cd53ad5507471dd74b9600fb37d50f0381201e20ef618b396578dfd088c186f8440b22ba83207799f5da13d23dacb97a15368e761b33d502a079987fab0422f0fe9b95a2750bdcb7a08d19cebd01219dbdc7e52dca1b6fe79151f18da1bb49362a394c83463efe32a835e63bce8bf4f8407af5b3057be0120d723758f2b548dac254940852e8c9058e5b300ae72802a8ac89af2c50e687ac44c40d12c750b5a2bbf4", 0x5, r1, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0", 0x0, 0x0, 0x60000000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x24)

03:33:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40a9b3144", 0xff7c}], 0x1)

03:33:01 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

[  993.095556][T25661] tipc: TX() has been purged, node left!
[  993.139847][T25661] tipc: TX() has been purged, node left!
[  993.177860][T25661] tipc: TX() has been purged, node left!
03:33:02 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227ffff000000000000f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1083a30369d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660580800dbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd80a504cea9542e62d7f69667e3ddcd567b3aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326efa31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f695c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc22941330000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d120000de3241bf4a00fcffffffffffffffe09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768fb40fe418ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fa32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d1d4b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e76003b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e089b862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27de8f2a4ebb04b0c485b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e600263d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bb49faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868c6da7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c000000000000000000000000009bff5348dd9639a9f34b5f92b7646000e3053358f55cb9f97c269eaf7327c32ab116a303ae64c9c714217c"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x5f66, 0x8000cc, 0x6, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000380)="98a0473fe5ddbcd8399d960856b3aed9d5197164c43fc7297d3955c82a62800728672c24ce0d6c50d672fa1d1fdf608021a1e3c7d64be5375d14f237aa65204932610776fc59ac10b81cd4ad1ba353cc58393ccc3815c2f083bf55bb048ba0918bc44445522696390900893c5d1aefb09379a8a5ebf3e94febce9281ed595d99f2297ef0b909c00849ea9924be788ca55591a1c533302543c2e459d5ea4cf1006a956a3d344a4f598e0909dcb6417ff71ad1666509b2709476888cccf11fdc198838a4bdefff5225e4990867e711db32412a845f76a6cb0463b3077aa5c7a7", &(0x7f00000002c0)=""/80, &(0x7f0000000580)="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", &(0x7f0000000680)="4f1d36f77205888ad455fec8a88e3521cd53ad5507471dd74b9600fb37d50f0381201e20ef618b396578dfd088c186f8440b22ba83207799f5da13d23dacb97a15368e761b33d502a079987fab0422f0fe9b95a2750bdcb7a08d19cebd01219dbdc7e52dca1b6fe79151f18da1bb49362a394c83463efe32a835e63bce8bf4f8407af5b3057be0120d723758f2b548dac254940852e8c9058e5b300ae72802a8ac89af2c50e687ac44c40d12c750b5a2bbf4", 0x5, r1, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0", 0x0, 0x0, 0x60000000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x24)

03:33:02 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080))

03:33:02 executing program 4:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r0 = socket$inet(0x2, 0x2000080001, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1a9}, 0x8)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)='*', 0x1}], 0x1}, 0x0)

03:33:02 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

03:33:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40a9b3144", 0xff7c}], 0x1)

03:33:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, &(0x7f0000000440), 0x3, 0x0)

03:33:03 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080))

03:33:03 executing program 3:
r0 = memfd_create(&(0x7f0000000740)='systemem0md5sum$\x05\x00^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9b\x18++x\x8f\'\xf3j\x13\x99\a\xfd#\x9f\xa4j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\x00\x02~\x80O\xe0\xfc\xb3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)\x80\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbc\x01\x00hb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xdayu\x12\x9a \xcd\xeb<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88l\x1f-JN+2a4\xfc\a=&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1-\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13\xf0>\x12\xf8\x1d\xdf\x15\xa8#\xcd\xaa\t\x00\xbfV\x9f\xd3\x06:\xbc}\x96T\x84|\xb9x\xae *\'\xc2 \x97)\x88%\xf0\\\xff\x01\x00\x00\x00\x00\x00\x00\b\xdfi|\x1a,\x82\xc9\xed\x1d\x8c\x1bO.\x16k{\x84\x83\xc1\xbfs\x11\x1bI!\xfd+^\x81\b\xed\xe1a=\xf8\x84\a\xedEL\x0fM\xdf\x8e\x95\xb2\xd58[qG\xa3plm\x8cz2\xea\xdcq4\xb0\xf0?\x85\xd6\xa9\xe7}jCm9\x1aYMg\xea\xd8\xbe\x89\xefq\xe3\\\x00\x00\x00\x00\xae\t\xa39\xc74\x1d.\xf14\xd6\xea\xf5\xccxKn\xa5\xd8\\\x81\x97\xc6\xbfc\tl\xba\x97j}\xdc\xa9\x1b\xb4.\xb5R\xee\xde\xea\x86Oc\xce\xcct\xaa\xa3\xd8:\xc0\xa2\x91\xc65\'\xe9Z\v_@\xf3a\xe1\x11nB\xe4Z\x98\x80\xb7\x9e\xef\xeei\xab}\x11\x9f \x8d\tlFJ\v\xd9\xb9\xb7\xa5\xa4_\x0f\xeb\x14\x80*7(|\x8b|\x9e\xb1\xe59\x11\xaca^Y\xecO\xce L\xd3\x93\xaf\xbe\xfeS\x9f\x82+\xd5\x91\v\xe5T\x91:\xc21\x05\xf6\xe2\b\xa1PT\xe3\x85\xe8\xfb\xcc\x8d\n\xa5 \xb8b\a@\xe6\xc8@3o\x1b:~\x8a\x8e\xdd<>\x03\xce(\xd9\xd9\x14\xaa\x81\t\xf7\x00\xb6?f\xcbzv\xa3>\xf1\xe9d\r\xfe\xc4\xa9\x9bcI\xffiz\xc8q\xd0\xf9\xbd3\x04RE\xcc\x03\x00\x1f\xabFy\xa33\xde\x84\x17\xfdu;\x14q^B\x9d\xca[u0\xbd\xb7\x1dng\xd5p_U\xda', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0)
r1 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

03:33:03 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e343286558f378b8fea322f0949d7231ba86dd", 0xdd5}], 0x2)

03:33:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:33:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x5f66, 0x8000cc, 0x6, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000380)="98a0473fe5ddbcd8399d960856b3aed9d5197164c43fc7297d3955c82a62800728672c24ce0d6c50d672fa1d1fdf608021a1e3c7d64be5375d14f237aa65204932610776fc59ac10b81cd4ad1ba353cc58393ccc3815c2f083bf55bb048ba0918bc44445522696390900893c5d1aefb09379a8a5ebf3e94febce9281ed595d99f2297ef0b909c00849ea9924be788ca55591a1c533302543c2e459d5ea4cf1006a956a3d344a4f598e0909dcb6417ff71ad1666509b2709476888cccf11fdc198838a4bdefff5225e4990867e711db32412a845f76a6cb0463b3077aa5c7a7", &(0x7f00000002c0)=""/80, &(0x7f0000000580)="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", &(0x7f0000000680)="4f1d36f77205888ad455fec8a88e3521cd53ad5507471dd74b9600fb37d50f0381201e20ef618b396578dfd088c186f8440b22ba83207799f5da13d23dacb97a15368e761b33d502a079987fab0422f0fe9b95a2750bdcb7a08d19cebd01219dbdc7e52dca1b6fe79151f18da1bb49362a394c83463efe32a835e63bce8bf4f8407af5b3057be0120d723758f2b548dac254940852e8c9058e5b300ae72802a8ac89af2c50e687ac44c40d12c750b5a2bbf4", 0x5, r1, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0", 0x0, 0x0, 0x60000000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x24)

03:33:04 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x210b405, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x108020, &(0x7f0000000340)={[{@grpjquota='grpjquota='}]})

03:33:04 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080))

03:33:04 executing program 1:
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0}], 0x1c0001)

03:33:05 executing program 2:
syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, [], {0x0, 0x6, '4b_', 0x0, 0x2f, 0x0, @private2, @remote, [@hopopts]}}}}}}}, 0x0)

03:33:05 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080))

[  996.772186][T26216] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,,errors=continue
[  996.802464][T26225] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,,errors=continue
03:33:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE]}, 0x18}}, 0x0)

[  997.402098][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  997.449635][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:33:07 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000040))

03:33:07 executing program 2:
mkdir(&(0x7f0000000480)='./control\x00', 0x0)
chown(&(0x7f0000000000)='./control\x00', 0xee00, 0x0)
lsetxattr$security_selinux(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x0)

03:33:07 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:07 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e343286558f378b8fea322f0949d7231ba86dd", 0xdd5}], 0x2)

03:33:07 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x9000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)

03:33:07 executing program 0:
r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x341002, 0x0)
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

03:33:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0)

03:33:07 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:07 executing program 0:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6d6820fae399c0f1a439b00b8beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x8000)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/88, 0x58}], 0x2}, 0x0)

03:33:08 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:08 executing program 0:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:08 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]})
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

03:33:08 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4)

03:33:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e343286558f378b8fea322f0949d7231ba86dd", 0xdd5}], 0x2)

03:33:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0xfffffffe, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0))

03:33:08 executing program 0:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:08 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)

03:33:09 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4)

03:33:09 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

03:33:09 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfe67, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000140)=0x10)

03:33:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000040000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)

[ 1000.623721][T26299] vivid-001: =================  START STATUS  =================
[ 1000.631847][T26299] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar
[ 1000.638807][T26299] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100
[ 1000.647243][T26299] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement
[ 1000.654439][T26299] v4l2-ctrls: vivid-001: Vertical Movement: No Movement
[ 1000.661606][T26299] v4l2-ctrls: vivid-001: OSD Text Mode: All
[ 1000.667672][T26299] v4l2-ctrls: vivid-001: Show Border: false
[ 1000.673637][T26299] v4l2-ctrls: vivid-001: Show Square: false
[ 1000.679720][T26299] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false
[ 1000.687196][T26299] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false
[ 1000.694379][T26299] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false
[ 1000.703658][T26299] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false
[ 1000.710855][T26299] v4l2-ctrls: vivid-001: Reduced Framerate: false
[ 1000.717459][T26299] v4l2-ctrls: vivid-001: Enable Capture Cropping: true
[ 1000.724403][T26299] v4l2-ctrls: vivid-001: Enable Capture Composing: true
[ 1000.731561][T26299] v4l2-ctrls: vivid-001: Enable Capture Scaler: true
[ 1000.738400][T26299] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame
[ 1000.745411][T26299] v4l2-ctrls: vivid-001: Colorspace: sRGB
[ 1000.751349][T26299] v4l2-ctrls: vivid-001: Transfer Function: Default
[ 1000.758115][T26299] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default
[ 1000.764610][T26299] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179
[ 1000.771158][T26299] v4l2-ctrls: vivid-001: Quantization: Default
[ 1000.777518][T26299] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false
[ 1000.784535][T26299] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3
[ 1000.791374][T26299] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 1000.800400][T26299] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive
[ 1000.807644][T26299] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 1000.816049][T26299] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2
[ 1000.822501][T26299] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false
[ 1000.829971][T26299] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic
[ 1000.837655][T26299] v4l2-ctrls: vivid-001: Power Present: 0x00000001
[ 1000.844249][T26299] tpg source WxH: 640x360 (Y'CbCr)
[ 1000.849548][T26299] tpg field: 1
[ 1000.853043][T26299] tpg crop: 640x360@0x0
[ 1000.857412][T26299] tpg compose: 640x360@0x0
[ 1000.861884][T26299] tpg colorspace: 8
[ 1000.865732][T26299] tpg transfer function: 0/0
[ 1000.870552][T26299] tpg Y'CbCr encoding: 0/0
[ 1000.875019][T26299] tpg quantization: 0/0
[ 1000.879373][T26299] tpg RGB range: 0/2
[ 1000.883323][T26299] vivid-001: ==================  END STATUS  ==================
03:33:09 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4)

03:33:09 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x2}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})

[ 1001.109584][T26304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1001.451843][T26318] vivid-001: =================  START STATUS  =================
[ 1001.460235][T26318] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar
[ 1001.467136][T26318] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100
[ 1001.474159][T26318] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement
[ 1001.481532][T26318] v4l2-ctrls: vivid-001: Vertical Movement: No Movement
[ 1001.488743][T26318] v4l2-ctrls: vivid-001: OSD Text Mode: All
[ 1001.494831][T26318] v4l2-ctrls: vivid-001: Show Border: false
[ 1001.500946][T26318] v4l2-ctrls: vivid-001: Show Square: false
[ 1001.507160][T26318] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false
[ 1001.514524][T26318] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false
[ 1001.521885][T26318] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false
[ 1001.529117][T26318] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false
[ 1001.536211][T26318] v4l2-ctrls: vivid-001: Reduced Framerate: false
[ 1001.542807][T26318] v4l2-ctrls: vivid-001: Enable Capture Cropping: true
[ 1001.549833][T26318] v4l2-ctrls: vivid-001: Enable Capture Composing: true
[ 1001.556948][T26318] v4l2-ctrls: vivid-001: Enable Capture Scaler: true
[ 1001.563702][T26318] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame
[ 1001.570863][T26318] v4l2-ctrls: vivid-001: Colorspace: sRGB
[ 1001.576659][T26318] v4l2-ctrls: vivid-001: Transfer Function: Default
[ 1001.583451][T26318] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default
[ 1001.590031][T26318] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179
[ 1001.596451][T26318] v4l2-ctrls: vivid-001: Quantization: Default
[ 1001.602769][T26318] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false
[ 1001.609896][T26318] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3
[ 1001.616562][T26318] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 1001.625502][T26318] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive
[ 1001.632715][T26318] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 1001.641208][T26318] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2
[ 1001.647627][T26318] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false
[ 1001.654893][T26318] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic
[ 1001.662495][T26318] v4l2-ctrls: vivid-001: Power Present: 0x00000001
[ 1001.669328][T26318] tpg source WxH: 640x360 (Y'CbCr)
[ 1001.674491][T26318] tpg field: 1
[ 1001.678016][T26318] tpg crop: 640x360@0x0
[ 1001.682238][T26318] tpg compose: 640x360@0x0
[ 1001.686810][T26318] tpg colorspace: 8
[ 1001.690675][T26318] tpg transfer function: 0/0
[ 1001.695304][T26318] tpg Y'CbCr encoding: 0/0
[ 1001.699849][T26318] tpg quantization: 0/0
[ 1001.704069][T26318] tpg RGB range: 0/2
[ 1001.708107][T26318] vivid-001: ==================  END STATUS  ==================
[ 1002.037063][ T3224] usb 1-1: new high-speed USB device number 29 using dummy_hcd
03:33:11 executing program 5:
setrlimit(0x2, &(0x7f0000000780)={0x2000000, 0x20080000000})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil)

03:33:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e343286558f378b8fea322f0949d7231ba86dd", 0xdd5}], 0x2)

03:33:11 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0)
timerfd_gettime(r0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

03:33:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4)

03:33:11 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

[ 1002.407958][ T3224] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.411017][T26336] vivid-001: =================  START STATUS  =================
[ 1002.425939][T26336] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar
[ 1002.432786][T26336] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100
[ 1002.439862][T26336] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement
[ 1002.447245][T26336] v4l2-ctrls: vivid-001: Vertical Movement: No Movement
[ 1002.454262][T26336] v4l2-ctrls: vivid-001: OSD Text Mode: All
[ 1002.460555][T26336] v4l2-ctrls: vivid-001: Show Border: false
[ 1002.466521][T26336] v4l2-ctrls: vivid-001: Show Square: false
[ 1002.472654][T26336] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false
[ 1002.480174][T26336] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false
[ 1002.487489][T26336] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false
[ 1002.494579][T26336] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false
[ 1002.501755][T26336] v4l2-ctrls: vivid-001: Reduced Framerate: false
[ 1002.508347][T26336] v4l2-ctrls: vivid-001: Enable Capture Cropping: true
[ 1002.515271][T26336] v4l2-ctrls: vivid-001: Enable Capture Composing: true
[ 1002.522377][T26336] v4l2-ctrls: vivid-001: Enable Capture Scaler: true
[ 1002.529213][T26336] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame
[ 1002.536219][T26336] v4l2-ctrls: vivid-001: Colorspace: sRGB
[ 1002.542171][T26336] v4l2-ctrls: vivid-001: Transfer Function: Default
[ 1002.548973][T26336] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default
[ 1002.555466][T26336] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179
[ 1002.562031][T26336] v4l2-ctrls: vivid-001: Quantization: Default
[ 1002.569054][T26336] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false
[ 1002.576071][T26336] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3
[ 1002.582839][T26336] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 1002.591780][T26336] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive
[ 1002.598982][T26336] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 1002.607505][T26336] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2
[ 1002.613824][T26336] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false
[ 1002.631480][T26336] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic
[ 1002.639117][T26336] v4l2-ctrls: vivid-001: Power Present: 0x00000001
[ 1002.642957][ T3224] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1002.645748][T26336] tpg source WxH: 640x360 (Y'CbCr)
[ 1002.654899][ T3224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.660063][T26336] tpg field: 1
[ 1002.668151][ T3224] usb 1-1: Product: syz
[ 1002.671538][T26336] tpg crop: 640x360@0x0
[ 1002.675716][ T3224] usb 1-1: Manufacturer: syz
[ 1002.679956][T26336] tpg compose: 640x360@0x0
[ 1002.684559][ T3224] usb 1-1: SerialNumber: syz
[ 1002.689039][T26336] tpg colorspace: 8
[ 1002.697531][T26336] tpg transfer function: 0/0
[ 1002.702173][T26336] tpg Y'CbCr encoding: 0/0
[ 1002.706627][T26336] tpg quantization: 0/0
[ 1002.710916][T26336] tpg RGB range: 0/2
[ 1002.714881][T26336] vivid-001: ==================  END STATUS  ==================
03:33:11 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0)
timerfd_gettime(r0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

03:33:11 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)='S', 0x1}], 0x1, 0x0, 0x618}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x1a57b, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

03:33:12 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

[ 1003.100430][ T3224] cdc_ether 1-1:1.0: invalid descriptor buffer length
[ 1003.108549][ T3224] usb 1-1: bad CDC descriptors
[ 1003.303863][T26238] usb 1-1: USB disconnect, device number 29
03:33:12 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0)
timerfd_gettime(r0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

[ 1003.552360][T26356] vivid-001: =================  START STATUS  =================
[ 1003.560234][T26356] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar
[ 1003.567155][T26356] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100
[ 1003.574082][T26356] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement
[ 1003.581535][T26356] v4l2-ctrls: vivid-001: Vertical Movement: No Movement
[ 1003.588661][T26356] v4l2-ctrls: vivid-001: OSD Text Mode: All
[ 1003.594651][T26356] v4l2-ctrls: vivid-001: Show Border: false
[ 1003.600788][T26356] v4l2-ctrls: vivid-001: Show Square: false
[ 1003.606952][T26356] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false
[ 1003.614307][T26356] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false
[ 1003.621642][T26356] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false
[ 1003.628873][T26356] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false
[ 1003.635974][T26356] v4l2-ctrls: vivid-001: Reduced Framerate: false
[ 1003.643316][T26356] v4l2-ctrls: vivid-001: Enable Capture Cropping: true
[ 1003.650381][T26356] v4l2-ctrls: vivid-001: Enable Capture Composing: true
[ 1003.657579][T26356] v4l2-ctrls: vivid-001: Enable Capture Scaler: true
[ 1003.664331][T26356] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame
[ 1003.671493][T26356] v4l2-ctrls: vivid-001: Colorspace: sRGB
[ 1003.677423][T26356] v4l2-ctrls: vivid-001: Transfer Function: Default
[ 1003.684090][T26356] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default
[ 1003.690714][T26356] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179
[ 1003.697403][T26356] v4l2-ctrls: vivid-001: Quantization: Default
[ 1003.703629][T26356] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false
[ 1003.710778][T26356] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3
[ 1003.717654][T26356] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 1003.726526][T26356] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive
[ 1003.733807][T26356] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 1003.742375][T26356] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2
[ 1003.748851][T26356] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false
[ 1003.756157][T26356] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic
[ 1003.763843][T26356] v4l2-ctrls: vivid-001: Power Present: 0x00000001
[ 1003.770569][T26356] tpg source WxH: 640x360 (Y'CbCr)
[ 1003.775744][T26356] tpg field: 1
[ 1003.779350][T26356] tpg crop: 640x360@0x0
[ 1003.783577][T26356] tpg compose: 640x360@0x0
[ 1003.788186][T26356] tpg colorspace: 8
[ 1003.792042][T26356] tpg transfer function: 0/0
[ 1003.796825][T26356] tpg Y'CbCr encoding: 0/0
[ 1003.801300][T26356] tpg quantization: 0/0
[ 1003.805518][T26356] tpg RGB range: 0/2
[ 1003.809642][T26356] vivid-001: ==================  END STATUS  ==================
[ 1003.907209][T26354] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 1003.915391][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1003.925074][T26354] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[ 1003.933998][T26354] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (83)
03:33:13 executing program 4:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)
fcntl$setownex(r2, 0xf, &(0x7f0000000080))
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

[ 1004.197238][ T9087] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1004.234146][T26362] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
03:33:13 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

[ 1004.242801][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1004.252515][T26362] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[ 1004.261487][T26362] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (83)
[ 1004.508521][T26366] vivid-001: =================  START STATUS  =================
[ 1004.516262][T26366] v4l2-ctrls: vivid-001: Test Pattern: 75% Colorbar
[ 1004.523270][T26366] v4l2-ctrls: vivid-001: Fill Percentage of Frame: 100
[ 1004.530451][T26366] v4l2-ctrls: vivid-001: Horizontal Movement: No Movement
[ 1004.539209][T26366] v4l2-ctrls: vivid-001: Vertical Movement: No Movement
[ 1004.546251][T26366] v4l2-ctrls: vivid-001: OSD Text Mode: All
[ 1004.552291][T26366] v4l2-ctrls: vivid-001: Show Border: false
[ 1004.558378][T26366] v4l2-ctrls: vivid-001: Show Square: false
[ 1004.564340][T26366] v4l2-ctrls: vivid-001: Sensor Flipped Horizontally: false
[ 1004.571791][T26366] v4l2-ctrls: vivid-001: Sensor Flipped Vertically: false
[ 1004.579040][T26366] v4l2-ctrls: vivid-001: Insert SAV Code in Image: false
[ 1004.586146][T26366] v4l2-ctrls: vivid-001: Insert EAV Code in Image: false
[ 1004.593321][T26366] v4l2-ctrls: vivid-001: Reduced Framerate: false
[ 1004.599888][T26366] v4l2-ctrls: vivid-001: Enable Capture Cropping: true
[ 1004.606881][T26366] v4l2-ctrls: vivid-001: Enable Capture Composing: true
[ 1004.610338][   T29] audit: type=1800 audit(1597807993.440:64): pid=26367 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16381 res=0
[ 1004.614021][T26366] v4l2-ctrls: vivid-001: Enable Capture Scaler: true
[ 1004.640979][T26366] v4l2-ctrls: vivid-001: Timestamp Source: End of Frame
[ 1004.648057][T26366] v4l2-ctrls: vivid-001: Colorspace: sRGB
[ 1004.653843][T26366] v4l2-ctrls: vivid-001: Transfer Function: Default
[ 1004.660623][T26366] v4l2-ctrls: vivid-001: Y'CbCr Encoding: Default
[ 1004.667221][T26366] v4l2-ctrls: vivid-001: HSV Encoding: Hue 0-179
[ 1004.673625][T26366] v4l2-ctrls: vivid-001: Quantization: Default
[ 1004.679964][T26366] v4l2-ctrls: vivid-001: Apply Alpha To Red Only: false
[ 1004.687121][T26366] v4l2-ctrls: vivid-001: Standard Aspect Ratio: 4x3
[ 1004.693794][T26366] v4l2-ctrls: vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 1004.702754][T26366] v4l2-ctrls: vivid-001: DV Timings: 640x480p59 inactive
[ 1004.709985][T26366] v4l2-ctrls: vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 1004.718494][T26366] v4l2-ctrls: vivid-001: Maximum EDID Blocks: 2
[ 1004.724809][T26366] v4l2-ctrls: vivid-001: Limited RGB Range (16-235): false
[ 1004.732195][T26366] v4l2-ctrls: vivid-001: Rx RGB Quantization Range: Automatic
[ 1004.739836][T26366] v4l2-ctrls: vivid-001: Power Present: 0x00000001
[ 1004.746417][T26366] tpg source WxH: 640x360 (Y'CbCr)
[ 1004.751706][T26366] tpg field: 1
[ 1004.755131][T26366] tpg crop: 640x360@0x0
[ 1004.759454][T26366] tpg compose: 640x360@0x0
[ 1004.763928][T26366] tpg colorspace: 8
[ 1004.767902][T26366] tpg transfer function: 0/0
[ 1004.772549][T26366] tpg Y'CbCr encoding: 0/0
[ 1004.777192][T26366] tpg quantization: 0/0
[ 1004.781387][T26366] tpg RGB range: 0/2
[ 1004.785336][T26366] vivid-001: ==================  END STATUS  ==================
03:33:13 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41)
ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1004.940179][   T29] audit: type=1800 audit(1597807993.830:65): pid=26367 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16381 res=0
[ 1005.037349][ T9087] usb 1-1: unable to read config index 0 descriptor/all
[ 1005.044527][ T9087] usb 1-1: can't read configurations, error -71
03:33:14 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r3}, &(0x7f0000000380)=0x8)

03:33:14 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x7ffff}}], 0x18}}], 0x2, 0x0)

03:33:14 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0)
timerfd_gettime(r0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

03:33:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7)

03:33:14 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5})

03:33:14 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41)
ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:14 executing program 1:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4, 0x3}]}]}, 0x1c}}, 0x0)

03:33:14 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5})

03:33:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=@newae={0x40, 0x12, 0x211, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x40}}, 0x0)

03:33:14 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41)
ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:14 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x7ffff}}], 0x18}}], 0x2, 0x0)

[ 1006.211243][T26394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1006.222050][T26392] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 1006.288473][T26398] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 1006.295392][T26399] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
03:33:15 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41)
ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:16 executing program 5:
unshare(0x20000400)
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
close(r0)
fsync(r0)

03:33:16 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5})

03:33:16 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x7ffff}}], 0x18}}], 0x2, 0x0)

03:33:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000002060104560f000000000000000300000d000300686173683a6e65740000000005000400000000000900020073797a3000000000050005000a0000000500010006"], 0x54}}, 0x0)

03:33:16 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d4, 0x0)

03:33:16 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0)

[ 1007.909099][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:33:17 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x7ffff}}], 0x18}}], 0x2, 0x0)

03:33:17 executing program 4:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
inotify_add_watch(r0, 0x0, 0x4000640)

03:33:17 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5})

03:33:17 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d4, 0x0)

03:33:17 executing program 4:
rt_sigaction(0x33, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000440))

03:33:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xe1, 0x0, 0x0, 0x0, 0xc0000084]})

03:33:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:33:18 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d4, 0x0)

03:33:18 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f0000004600)=""/199, 0x4a, 0xc7, 0x8}, 0x20)

03:33:18 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="6e9c390194f5d97a615b1e8cefa44af02fee96f6ee1969a268cf491e01ac2d3bc5b81f0314756d73e2a5df40fca3d18fc26d27794b4956f0b88211c5ed6f64c5d15fb0761f2067ffd67769af4d4de512a36580ffe11e23034212bb"], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf1, 0x0, &(0x7f0000000080))

03:33:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
dup(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00e4e4550414000008000a00", @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190028"], 0x3c}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

03:33:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xe1, 0x0, 0x0, 0x0, 0xc0000084]})

[ 1009.686681][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1009.708567][T26452] device bridge3 entered promiscuous mode
[ 1009.752872][T26458] device bridge_slave_0 left promiscuous mode
[ 1009.760226][T26458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.804237][T26462] BPF:[1] STRUCT (anon) 
[ 1009.808775][T26462] BPF:size=0 vlen=1
[ 1009.812657][T26462] BPF: 
[ 1009.815470][T26462] BPF:Loop detected
[ 1009.819564][T26462] BPF:
[ 1009.819564][T26462] 
[ 1009.908449][T26458] bridge3: port 1(bridge_slave_0) entered blocking state
[ 1009.915744][T26458] bridge3: port 1(bridge_slave_0) entered disabled state
[ 1009.926067][T26458] device bridge_slave_0 entered promiscuous mode
[ 1009.936429][T26458] bridge3: port 1(bridge_slave_0) entered blocking state
[ 1009.943840][T26458] bridge3: port 1(bridge_slave_0) entered forwarding state
[ 1009.956543][T26459] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[ 1009.984554][T26459] bridge3: port 1(bridge_slave_0) entered disabled state
[ 1009.992362][T26459] device bridge3 left promiscuous mode
[ 1010.009231][T26462] BPF:[1] STRUCT (anon) 
[ 1010.013684][T26462] BPF:size=0 vlen=1
[ 1010.018466][T26462] BPF: 
[ 1010.021282][T26462] BPF:Loop detected
[ 1010.025134][T26462] BPF:
[ 1010.025134][T26462] 
03:33:19 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d4, 0x0)

03:33:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xe1, 0x0, 0x0, 0x0, 0xc0000084]})

03:33:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="040000000000000008", @ANYBLOB='\b', @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB="1000030000"], 0x8c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x7, 0xee01}], {}, [{0x8, 0x6}, {0x8, 0x7}, {0x8, 0x1}, {}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x6}}, 0x5c, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
setresgid(r0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000)

03:33:19 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x21, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)

[ 1010.547414][T26458] device bridge_slave_0 left promiscuous mode
[ 1010.554512][T26458] bridge3: port 1(bridge_slave_0) entered disabled state
[ 1010.621885][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1010.643273][T26452] device bridge4 entered promiscuous mode
[ 1010.667771][T26475] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
03:33:19 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

[ 1010.865145][T26481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:33:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xe1, 0x0, 0x0, 0x0, 0xc0000084]})

[ 1012.642599][T26511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1012.781545][T26516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
03:33:21 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1a55a97b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
r0 = socket(0x11, 0x80002, 0x0)
setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5)

03:33:21 executing program 5:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

03:33:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
dup(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00e4e4550414000008000a00", @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190028"], 0x3c}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

03:33:21 executing program 2:
r0 = socket$inet6(0xa, 0x80001, 0x0)
fremovexattr(r0, 0x0)

03:33:21 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

03:33:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="040000000000000008", @ANYBLOB='\b', @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB="1000030000"], 0x8c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x7, 0xee01}], {}, [{0x8, 0x6}, {0x8, 0x7}, {0x8, 0x1}, {}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x6}}, 0x5c, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
setresgid(r0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000)

[ 1013.169444][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1013.191690][T26528] device bridge6 entered promiscuous mode
[ 1013.231700][T26531] bridge6: port 1(bridge_slave_0) entered blocking state
[ 1013.239126][T26531] bridge6: port 1(bridge_slave_0) entered disabled state
[ 1013.249276][T26531] device bridge_slave_0 entered promiscuous mode
[ 1013.259473][T26531] bridge6: port 1(bridge_slave_0) entered blocking state
[ 1013.266932][T26531] bridge6: port 1(bridge_slave_0) entered forwarding state
03:33:22 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x0, 0xd, "57a7372278d24f10acac4d7eff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1013.298982][T26532] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
03:33:22 executing program 3:
unshare(0x8000400)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0)

[ 1013.377916][T26532] bridge6: port 1(bridge_slave_0) entered disabled state
[ 1013.385605][T26532] device bridge6 left promiscuous mode
[ 1013.937689][ T3224] usb 3-1: new high-speed USB device number 26 using dummy_hcd
03:33:22 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

03:33:23 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000ec84e720cd0608012b490000000109021b000100000000090400000114a867000905876fa0"], 0x0)

03:33:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
dup(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00e4e4550414000008000a00", @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190028"], 0x3c}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

[ 1014.302129][ T3224] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2
[ 1014.311963][ T3224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.399442][ T3224] usb 3-1: config 0 descriptor??
[ 1014.441119][ T3224] cp210x 3-1:0.0: cp210x converter detected
[ 1014.843721][T26553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1014.865491][T26553] device bridge7 entered promiscuous mode
[ 1014.912853][T26559] device bridge_slave_0 left promiscuous mode
[ 1014.919935][T26559] bridge6: port 1(bridge_slave_0) entered disabled state
[ 1014.984715][T26559] bridge7: port 1(bridge_slave_0) entered blocking state
[ 1014.992595][T26559] bridge7: port 1(bridge_slave_0) entered disabled state
[ 1015.002944][T26559] device bridge_slave_0 entered promiscuous mode
[ 1015.013109][T26559] bridge7: port 1(bridge_slave_0) entered blocking state
[ 1015.020560][T26559] bridge7: port 1(bridge_slave_0) entered forwarding state
[ 1015.039875][T26563] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[ 1015.061722][T26563] bridge7: port 1(bridge_slave_0) entered disabled state
[ 1015.069605][T26563] device bridge7 left promiscuous mode
03:33:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="040000000000000008", @ANYBLOB='\b', @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB="1000030000"], 0x8c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x7, 0xee01}], {}, [{0x8, 0x6}, {0x8, 0x7}, {0x8, 0x1}, {}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x6}}, 0x5c, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
setresgid(r0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000)

[ 1015.108912][ T3224] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[ 1015.116323][ T3224] cp210x: probe of ttyUSB0 failed with error -71
[ 1015.127067][T26233] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1015.188176][ T3224] usb 3-1: USB disconnect, device number 26
[ 1015.245091][ T3224] cp210x 3-1:0.0: device disconnected
[ 1015.397452][T26233] usb 4-1: Using ep0 maxpacket: 32
[ 1015.518395][T26233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1015.533304][T26233] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=49.2b
[ 1015.542654][T26233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:33:24 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

[ 1015.847420][T26233] usb 4-1: config 0 descriptor??
[ 1015.896686][T26233] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[ 1015.904612][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1015.914512][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1015.922641][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1015.930700][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 1015.938755][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[ 1015.946810][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[ 1016.298223][T26233] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1016.360518][   T28] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1016.375256][T26233] usb 4-1: USB disconnect, device number 44
[ 1016.433482][T26233] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1016.445490][T26233] keyspan 4-1:0.0: device disconnected
[ 1016.867479][   T28] usb 3-1: device descriptor read/all, error -71
[ 1017.039291][T26233] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1017.307550][T26233] usb 4-1: Using ep0 maxpacket: 32
[ 1017.448688][T26233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1017.459857][T26233] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=49.2b
[ 1017.469203][T26233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.550620][T26233] usb 4-1: config 0 descriptor??
[ 1017.591939][T26233] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[ 1017.600346][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1017.610231][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1017.618315][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1017.626232][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 1017.634268][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[ 1017.642362][T26233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[ 1017.724416][T26233] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1017.838262][T26046] usb 4-1: USB disconnect, device number 45
[ 1017.855141][T26046] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1017.867283][T26046] keyspan 4-1:0.0: device disconnected
03:33:27 executing program 5:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

03:33:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
dup(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00e4e4550414000008000a00", @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190028"], 0x3c}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

03:33:27 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x0, 0xd, "57a7372278d24f10acac4d7eff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="040000000000000008", @ANYBLOB='\b', @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB="1000030000"], 0x8c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresgid(0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x7, 0xee01}], {}, [{0x8, 0x6}, {0x8, 0x7}, {0x8, 0x1}, {}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x6}}, 0x5c, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
setresgid(r0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000)

03:33:27 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0)

03:33:27 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000ec84e720cd0608012b490000000109021b000100000000090400000114a867000905876fa0"], 0x0)

[ 1018.187238][T26628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1018.209186][T26628] device bridge8 entered promiscuous mode
[ 1018.265252][T26632] device bridge_slave_0 left promiscuous mode
[ 1018.272489][T26632] bridge7: port 1(bridge_slave_0) entered disabled state
[ 1018.366346][T26632] bridge8: port 1(bridge_slave_0) entered blocking state
[ 1018.373782][T26632] bridge8: port 1(bridge_slave_0) entered disabled state
[ 1018.385111][T26632] device bridge_slave_0 entered promiscuous mode
[ 1018.395144][T26632] bridge8: port 1(bridge_slave_0) entered blocking state
[ 1018.402482][T26632] bridge8: port 1(bridge_slave_0) entered forwarding state
[ 1018.423245][T26637] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[ 1018.444597][T26637] bridge8: port 1(bridge_slave_0) entered disabled state
[ 1018.453484][T26637] device bridge8 left promiscuous mode
[ 1018.557859][T26046] usb 3-1: new high-speed USB device number 29 using dummy_hcd
03:33:27 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x19, 0x0, 0x3d)

[ 1018.617883][T26231] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1018.874680][T26231] usb 4-1: Using ep0 maxpacket: 32
[ 1018.918785][T26046] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2
[ 1018.928738][T26046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.994246][T26046] usb 3-1: config 0 descriptor??
[ 1019.010887][T26231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1019.022193][T26231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=49.2b
[ 1019.031506][T26231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.044104][T26046] cp210x 3-1:0.0: cp210x converter detected
[ 1019.332219][T26231] usb 4-1: config 0 descriptor??
[ 1019.410477][T26231] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[ 1019.420033][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1019.429948][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1019.438030][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1019.445932][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
03:33:28 executing program 1:
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000140041f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6e74703c48f93b82a0000000000000000a5e54e0000000300000000", 0x41}, {&(0x7f0000000300)="4d999e6effc4548cbffb2f", 0xb}], 0x2}, 0x0)

[ 1019.453939][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[ 1019.462037][T26231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
03:33:28 executing program 4:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = userfaultfd(0x0)
dup3(r1, r0, 0x0)
io_setup(0x3, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x80000000000000, 0x5, 0x0, r0, 0x0}])

[ 1019.687486][T26046] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71
[ 1019.695003][T26046] cp210x: probe of ttyUSB1 failed with error -71
[ 1019.748943][T26046] usb 3-1: USB disconnect, device number 29
[ 1019.790946][T26046] cp210x 3-1:0.0: device disconnected
[ 1019.793817][T26231] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1019.910774][T26231] usb 4-1: USB disconnect, device number 46
[ 1019.992223][T26231] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1020.004533][T26231] keyspan 4-1:0.0: device disconnected
03:33:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400})
dup3(r0, r1, 0x0)

03:33:29 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000ec84e720cd0608012b490000000109021b000100000000090400000114a867000905876fa0"], 0x0)

03:33:29 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
socket$packet(0x11, 0x0, 0x300)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

[ 1021.007814][T26238] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1021.277190][T26238] usb 4-1: Using ep0 maxpacket: 32
[ 1021.398761][T26238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1021.409936][T26238] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=49.2b
[ 1021.410071][T26238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.459749][T26238] usb 4-1: config 0 descriptor??
[ 1021.506607][T26238] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[ 1021.514578][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1021.524412][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1021.532519][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1021.540562][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 1021.548708][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[ 1021.556818][T26238] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[ 1021.730097][T26238] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1021.796721][T26238] usb 4-1: USB disconnect, device number 47
[ 1021.898511][T26238] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1021.910145][T26238] keyspan 4-1:0.0: device disconnected
03:33:31 executing program 5:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50)

03:33:31 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x0, 0xd, "57a7372278d24f10acac4d7eff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:31 executing program 0:
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
sendfile(r2, r0, 0x0, 0x7ffff004)

03:33:31 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14)
getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="f002000024000b0f00000000100000000001000a", @ANYRES32=r4, @ANYBLOB="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"], 0x2f0}}, 0x0)

03:33:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400})
dup3(r0, r1, 0x0)

[ 1022.256575][T26742] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1022.266722][T26742] netlink: 371 bytes leftover after parsing attributes in process `syz-executor.4'.
03:33:31 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000ec84e720cd0608012b490000000109021b000100000000090400000114a867000905876fa0"], 0x0)

[ 1022.628068][T26238] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1022.711895][T26754] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1022.721927][T26754] netlink: 371 bytes leftover after parsing attributes in process `syz-executor.4'.
03:33:31 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x72, 0xc9, 0x9e, 0x40, 0xfe9, 0xdb00, 0x5d7d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd4, 0x9, 0xe1}}]}}]}}, 0x0)

03:33:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400})
dup3(r0, r1, 0x0)

03:33:31 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d2, 0x0)

[ 1023.000543][T26238] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2
[ 1023.009905][T26238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.124308][T26238] usb 3-1: config 0 descriptor??
[ 1023.171575][T26238] cp210x 3-1:0.0: cp210x converter detected
[ 1023.197258][   T28] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1023.438843][   T28] usb 4-1: Using ep0 maxpacket: 32
03:33:32 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d2, 0x0)

[ 1023.559839][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1023.571021][   T28] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=49.2b
[ 1023.580384][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.598148][T26231] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1023.648410][   T28] usb 4-1: config 0 descriptor??
[ 1023.692271][   T28] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[ 1023.701118][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1023.710899][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1023.719038][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1023.727118][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 1023.735042][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
03:33:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400})
dup3(r0, r1, 0x0)

[ 1023.743933][   T28] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[ 1023.770599][   T28] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1
[ 1023.808399][T26238] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[ 1023.815826][T26238] cp210x: probe of ttyUSB0 failed with error -71
[ 1023.916141][   T28] usb 4-1: USB disconnect, device number 48
[ 1023.939974][   T28] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1
[ 1023.942219][T26238] usb 3-1: USB disconnect, device number 30
[ 1023.951646][   T28] keyspan 4-1:0.0: device disconnected
[ 1024.010904][T26231] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db00, bcdDevice=5d.7d
[ 1024.020553][T26231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.059650][T26238] cp210x 3-1:0.0: device disconnected
[ 1024.107868][T26231] usb 1-1: config 0 descriptor??
03:33:33 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d2, 0x0)

[ 1024.168332][T26231] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in cold state, will try to load a firmware
[ 1024.223358][T26231] usb 1-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2
[ 1024.232813][T26231] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1024.248557][T26231] dvb_usb_cxusb: probe of 1-1:0.0 failed with error -22
[ 1024.370687][T26238] usb 1-1: USB disconnect, device number 32
[ 1025.148016][T26238] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1025.528185][T26238] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db00, bcdDevice=5d.7d
[ 1025.537503][T26238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.634941][T26238] usb 1-1: config 0 descriptor??
[ 1025.701865][T26238] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in cold state, will try to load a firmware
[ 1025.714016][T26238] usb 1-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2
[ 1025.723365][T26238] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1025.738952][T26238] dvb_usb_cxusb: probe of 1-1:0.0 failed with error -22
[ 1025.884383][T26238] usb 1-1: USB disconnect, device number 33
03:33:35 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x32, 0x0, 0x0)

03:33:35 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x0, 0xd, "57a7372278d24f10acac4d7eff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:33:35 executing program 3:
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0)

03:33:35 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FITRIM(r0, 0x800442d2, 0x0)

03:33:35 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffff8100e931190000000000000680ffffff81000000e100e2ff8777007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}])

03:33:35 executing program 5:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$HDIO_GETGEO(r0, 0x1260, &(0x7f0000000000))

[ 1026.364651][T26857] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
03:33:35 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x208926, 0x2f, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r2, r1, 0x0)

03:33:35 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

03:33:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
pipe(&(0x7f00000001c0))
socket(0x10, 0x803, 0x0)
socket$inet(0x10, 0x2, 0x0)
r0 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40000)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xe00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x0)

[ 1026.707103][T26231] usb 3-1: new high-speed USB device number 31 using dummy_hcd
03:33:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r1, &(0x7f00000006c0)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a840400400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0)

[ 1027.011121][T26874] team0: Device vlan2 is already an upper device of the team interface
03:33:35 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

03:33:36 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x208926, 0x2f, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r2, r1, 0x0)

[ 1027.095719][T26231] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2
[ 1027.105109][T26231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.161511][T26231] usb 3-1: config 0 descriptor??
[ 1027.214475][T26231] cp210x 3-1:0.0: cp210x converter detected
03:33:36 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

[ 1027.887306][T26231] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[ 1027.894876][T26231] cp210x: probe of ttyUSB0 failed with error -71
[ 1027.928274][T26231] usb 3-1: USB disconnect, device number 31
[ 1027.955902][T26231] cp210x 3-1:0.0: device disconnected
[ 1028.258040][T26894] team0: Device vlan2 is already an upper device of the team interface
03:33:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000f900000008000a00", @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

03:33:37 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x208926, 0x2f, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r2, r1, 0x0)

03:33:37 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

03:33:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={<r2=>r1, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={r2, 0xa0, "5f6354a7714f03dea36648c41cae7661ad317936b73e17da129b98f288926da05dc6e88d0e6de98603bb786951d2cf7cbf25b298fb2a1522955a8e9ac01bd98b3e9dc7cc2dd87f2bd4ad2b60ae31fed7630710f5e873ba5b96c1c66b32684a6b5c1f45128ef42e0c96a230c26f99e228fcda60037b27aa23f7adade8314655cd379f8051d20130f4828039eae77252ee5aadbb05ce97c4c8cac20ee4407176de"}, &(0x7f0000000180)=0xa8)

[ 1029.264056][T26927] bridge5: port 1(dummy0) entered blocking state
[ 1029.270811][T26927] bridge5: port 1(dummy0) entered disabled state
[ 1029.286162][T26923] bridge5: port 1(dummy0) entered disabled state
[ 1029.473795][T26923] bridge5: port 1(dummy0) entered blocking state
[ 1029.481297][T26923] bridge5: port 1(dummy0) entered disabled state
[ 1029.496627][T26927] bridge5: port 1(dummy0) entered disabled state
03:33:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x17, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x40}}, 0x0)

03:33:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
shutdown(r0, 0x0)

03:33:38 executing program 4:
bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x0, 0x300, 0xffffffffffffffff, 0x0, [0x31, 0x6e, 0x6e, 0x2e, 0x2e, 0x32, 0x5f, 0x5f, 0x2e, 0x2e]}, 0x40)

03:33:38 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x208926, 0x2f, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r2, r1, 0x0)

03:33:38 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000"], 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0)

03:33:39 executing program 4:
r0 = socket(0x18, 0x0, 0x800000000000002)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc)

[ 1030.063848][T26956] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1030.072177][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1030.092051][T26956] device macsec2 entered promiscuous mode
03:33:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={<r2=>r1, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={r2, 0xa0, "5f6354a7714f03dea36648c41cae7661ad317936b73e17da129b98f288926da05dc6e88d0e6de98603bb786951d2cf7cbf25b298fb2a1522955a8e9ac01bd98b3e9dc7cc2dd87f2bd4ad2b60ae31fed7630710f5e873ba5b96c1c66b32684a6b5c1f45128ef42e0c96a230c26f99e228fcda60037b27aa23f7adade8314655cd379f8051d20130f4828039eae77252ee5aadbb05ce97c4c8cac20ee4407176de"}, &(0x7f0000000180)=0xa8)

03:33:39 executing program 1:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)

[ 1030.303304][T26959] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1030.311746][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
03:33:39 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000"], 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0)

03:33:39 executing program 4:
io_setup(0x4, &(0x7f0000000080)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

03:33:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={<r2=>r1, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={r2, 0xa0, "5f6354a7714f03dea36648c41cae7661ad317936b73e17da129b98f288926da05dc6e88d0e6de98603bb786951d2cf7cbf25b298fb2a1522955a8e9ac01bd98b3e9dc7cc2dd87f2bd4ad2b60ae31fed7630710f5e873ba5b96c1c66b32684a6b5c1f45128ef42e0c96a230c26f99e228fcda60037b27aa23f7adade8314655cd379f8051d20130f4828039eae77252ee5aadbb05ce97c4c8cac20ee4407176de"}, &(0x7f0000000180)=0xa8)

03:33:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0x4b564d03, 0x0, 0x0, 0x0, 0xe1]})

[ 1030.988123][T26977] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1030.996414][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1031.569930][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:33:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)

03:33:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x88}}, 0x0)

03:33:40 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="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")

03:33:40 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000"], 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0)

03:33:40 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={<r2=>r1, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={r2, 0xa0, "5f6354a7714f03dea36648c41cae7661ad317936b73e17da129b98f288926da05dc6e88d0e6de98603bb786951d2cf7cbf25b298fb2a1522955a8e9ac01bd98b3e9dc7cc2dd87f2bd4ad2b60ae31fed7630710f5e873ba5b96c1c66b32684a6b5c1f45128ef42e0c96a230c26f99e228fcda60037b27aa23f7adade8314655cd379f8051d20130f4828039eae77252ee5aadbb05ce97c4c8cac20ee4407176de"}, &(0x7f0000000180)=0xa8)

03:33:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0x4b564d03, 0x0, 0x0, 0x0, 0xe1]})

[ 1031.664585][T26999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1031.891606][T27014] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1031.901158][T27014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
03:33:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0x4b564d03, 0x0, 0x0, 0x0, 0xe1]})

03:33:41 executing program 0:
r0 = socket$inet(0x2b, 0x801, 0x0)
shutdown(r0, 0x0)

03:33:41 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="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")

03:33:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0)

03:33:41 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000"], 0x50}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0)

03:33:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0x4b564d03, 0x0, 0x0, 0x0, 0xe1]})

[ 1032.663588][T27032] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1032.672032][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1033.434553][T27048] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1033.498533][T27048] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1033.585805][T27083] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1033.621790][T27083] device bond1 entered promiscuous mode
[ 1033.629102][T27083] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1033.650058][T27083] device bond1 left promiscuous mode
03:33:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000040)=0x2)

03:33:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="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")

03:33:42 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904", @ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

03:33:42 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)
dup2(r0, r3)

03:33:42 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0xfffffffffffffffd}}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

03:33:42 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ff74ae20"}, 0x0, 0x0, @planes=0x0})

[ 1034.023906][T27095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:33:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ff74ae20"}, 0x0, 0x0, @planes=0x0})

03:33:43 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}}, 0x0, 0x2e}, 0x20)

03:33:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="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")

[ 1034.304187][ T9512] usb 1-1: new high-speed USB device number 34 using dummy_hcd
03:33:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ff74ae20"}, 0x0, 0x0, @planes=0x0})

[ 1034.670907][ T9512] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1034.679372][ T9512] usb 1-1: config 0 has no interface number 0
[ 1034.685611][ T9512] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1034.697288][ T9512] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1034.711046][ T9512] usb 1-1: config 0 interface 255 has no altsetting 0
03:33:43 executing program 3:
r0 = socket(0x25, 0x1, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x100, 0x0, 0xff1f)

[ 1034.718133][ T9512] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b
[ 1034.727459][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:33:43 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x2}]}}]}, 0x44}}, 0x0)

[ 1035.129223][ T9512] usb 1-1: config 0 descriptor??
[ 1035.304831][T27124] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1035.355377][T27125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1035.591217][ T9512] usb 1-1: string descriptor 0 read error: -71
[ 1035.700300][ T9512] usb 1-1: Cannot read MAC address
[ 1035.705951][ T9512] MOSCHIP usb-ethernet driver: probe of 1-1:0.255 failed with error -71
[ 1035.755629][ T9512] usb 1-1: USB disconnect, device number 34
03:33:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x3c, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}}, 0x0)

03:33:44 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)
dup2(r0, r3)

[ 1036.347564][ T9512] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1036.707953][ T9512] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1036.716356][ T9512] usb 1-1: config 0 has no interface number 0
[ 1036.722799][ T9512] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1036.734186][ T9512] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1036.747848][ T9512] usb 1-1: config 0 interface 255 has no altsetting 0
[ 1036.754747][ T9512] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b
[ 1036.764071][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.795850][ T9512] usb 1-1: config 0 descriptor??
03:33:46 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904", @ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

03:33:46 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ff74ae20"}, 0x0, 0x0, @planes=0x0})

03:33:46 executing program 4:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f)
write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6)
splice(r0, 0x0, r1, 0x0, 0xffff, 0x0)

03:33:46 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvfrom$llc(r0, &(0x7f0000000380)=""/150, 0x96, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESHEX=r0], 0xfffffd6d)

03:33:46 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18)
write$binfmt_script(r0, 0x0, 0x59)

03:33:46 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)
dup2(r0, r3)

[ 1037.167176][ T9512] usb 1-1: string descriptor 0 read error: -71
[ 1037.297464][ T9512] usb 1-1: Cannot read MAC address
[ 1037.303193][ T9512] MOSCHIP usb-ethernet driver: probe of 1-1:0.255 failed with error -71
[ 1037.409722][ T9512] usb 1-1: USB disconnect, device number 35
03:33:46 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="6801000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000003801020014000100ff0000001f00000000000000041d1403140001002609000008000000ffff000002040200040102"], 0x168}}, 0x0)

03:33:46 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0)

03:33:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_create(0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x88}}, 0x0)

[ 1037.933296][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1037.947488][ T9512] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1037.998449][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:33:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c)
listen(r0, 0xb9)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10003000000000000000", 0x58}], 0x1)

03:33:47 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}]})

03:33:47 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)
dup2(r0, r3)

[ 1038.308020][ T9512] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1038.316493][ T9512] usb 1-1: config 0 has no interface number 0
[ 1038.323481][ T9512] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1038.334966][ T9512] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1038.348603][ T9512] usb 1-1: config 0 interface 255 has no altsetting 0
[ 1038.355530][ T9512] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b
[ 1038.364771][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.712077][ T9512] usb 1-1: config 0 descriptor??
[ 1039.198681][ T9512] usb 1-1: string descriptor 0 read error: -71
[ 1039.307605][ T9512] usb 1-1: Cannot read MAC address
[ 1039.313233][ T9512] MOSCHIP usb-ethernet driver: probe of 1-1:0.255 failed with error -71
[ 1039.362047][ T9512] usb 1-1: USB disconnect, device number 36
03:33:48 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904", @ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

03:33:48 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]})
acct(0x0)

03:33:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ffff7f070000ebffff080000001c000480040004"], 0x30}}, 0x0)

03:33:48 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}, 0x2e)

03:33:48 executing program 5:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8913, &(0x7f0000000700)={'macsec0\x00', @broadcast})

03:33:48 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r0)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

03:33:48 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc180)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f86b8cfe4ac769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6033578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb", 0x257}], 0x1}, 0x8000)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0)

[ 1040.021620][T27231] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1040.122947][T27235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
03:33:49 executing program 1:
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb)

03:33:49 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

[ 1040.377912][ T9087] usb 1-1: new high-speed USB device number 37 using dummy_hcd
03:33:49 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc180)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0)

03:33:49 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740af9", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[])

[ 1040.738093][ T9087] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1040.746522][ T9087] usb 1-1: config 0 has no interface number 0
[ 1040.753030][ T9087] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1040.764443][ T9087] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1040.779230][ T9087] usb 1-1: config 0 interface 255 has no altsetting 0
[ 1040.786216][ T9087] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b
[ 1040.795429][ T9087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:33:49 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

[ 1040.965021][ T9087] usb 1-1: config 0 descriptor??
[ 1041.427559][ T9087] usb 1-1: string descriptor 0 read error: -71
[ 1041.537788][ T9087] usb 1-1: Cannot read MAC address
[ 1041.543508][ T9087] MOSCHIP usb-ethernet driver: probe of 1-1:0.255 failed with error -71
[ 1041.599727][ T9087] usb 1-1: USB disconnect, device number 37
03:33:50 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904", @ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

03:33:50 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc180)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0)

03:33:50 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

03:33:50 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

03:33:50 executing program 4:
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x38}, @lsrr={0x83, 0x3, 0x7c}]}}}}}}, 0x0)

03:33:50 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000540)=ANY=[], 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00')
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:33:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

03:33:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001100000000000004000a000a000100726f757465000000140002000800030000000000080002"], 0x44}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

03:33:51 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc180)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0)

03:33:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

[ 1042.729956][T27288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1042.761074][ T9512] usb 1-1: new high-speed USB device number 38 using dummy_hcd
03:33:51 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2}, 0x8)

03:33:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0)

[ 1042.944272][T27294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1043.129740][ T9512] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1043.138272][ T9512] usb 1-1: config 0 has no interface number 0
[ 1043.144538][ T9512] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1043.156089][ T9512] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1043.170055][ T9512] usb 1-1: config 0 interface 255 has no altsetting 0
[ 1043.177862][ T9512] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b
[ 1043.187135][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.297654][ T9512] usb 1-1: config 0 descriptor??
[ 1043.798146][ T9512] usb 1-1: string descriptor 0 read error: -32
[ 1043.907348][ T9512] usb 1-1: Cannot read MAC address
[ 1043.913071][ T9512] MOSCHIP usb-ethernet driver: probe of 1-1:0.255 failed with error -71
[ 1043.931854][ T9512] usb 1-1: USB disconnect, device number 38
03:33:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xfffffffd}]}, 0x3c}}, 0x0)

03:33:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x20000001})
ioctl(r0, 0x8b0f, &(0x7f0000000040))

03:33:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:53 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)

03:33:53 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000))

03:33:53 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000540)=ANY=[], 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00')
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:33:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

[ 1044.807898][T26238] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1045.047341][T26238] usb 4-1: Using ep0 maxpacket: 32
03:33:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:54 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000))

[ 1045.178115][T26238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1045.188545][T26238] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
03:33:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

[ 1045.378712][T26238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1045.388156][T26238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.396283][T26238] usb 4-1: Product: syz
[ 1045.400781][T26238] usb 4-1: Manufacturer: syz
[ 1045.405524][T26238] usb 4-1: SerialNumber: syz
03:33:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:54 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000))

[ 1045.757371][T26238] usblp: can't set desired altsetting 0 on interface 0
[ 1045.851913][T26238] usb 4-1: USB disconnect, device number 49
[ 1046.537318][T26238] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1046.797282][T26238] usb 4-1: Using ep0 maxpacket: 32
[ 1046.927751][T26238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1046.939929][T26238] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1047.118055][T26238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1047.127663][T26238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.135970][T26238] usb 4-1: Product: syz
[ 1047.140386][T26238] usb 4-1: Manufacturer: syz
[ 1047.145381][T26238] usb 4-1: SerialNumber: syz
[ 1047.413086][T26238] usblp: can't set desired altsetting 0 on interface 0
[ 1047.463492][T26238] usb 4-1: USB disconnect, device number 50
03:33:56 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)

03:33:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, 0x0)

03:33:56 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

03:33:56 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000))

03:33:56 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000540)=ANY=[], 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00')
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:33:56 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fanotify_init(0x200, 0x0)
dup2(r0, r1)

03:33:57 executing program 1:
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffffa5000000e100e2ff877300720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}])

03:33:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}}, 0x0)

03:33:57 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

[ 1048.277218][T26231] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1048.292927][T27404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1048.325783][T27404] bridge9: port 1(syz_tun) entered blocking state
[ 1048.333021][T27404] bridge9: port 1(syz_tun) entered disabled state
[ 1048.342516][T27404] device syz_tun entered promiscuous mode
[ 1048.447010][T27407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1048.458571][T27404] device syz_tun left promiscuous mode
[ 1048.464945][T27404] bridge9: port 1(syz_tun) entered disabled state
03:33:57 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

[ 1048.557482][T26231] usb 4-1: Using ep0 maxpacket: 32
03:33:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "e85f99062fd0d2c6"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "ef44580beb424b2fefbbeaf17bd512db060b2978"}}]}, 0x14c}}, 0x0)

[ 1048.698978][T26231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1048.709187][T26231] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1048.938613][T26231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1048.947938][T26231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.956167][T26231] usb 4-1: Product: syz
[ 1048.960843][T26231] usb 4-1: Manufacturer: syz
[ 1048.965625][T26231] usb 4-1: SerialNumber: syz
[ 1049.298095][T26231] usblp: can't set desired altsetting 0 on interface 0
[ 1049.336104][T26231] usb 4-1: USB disconnect, device number 51
03:33:58 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)

03:33:58 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

03:33:58 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

03:33:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0)

03:33:58 executing program 4:
syz_emit_ethernet(0xce, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x98, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80502"}, {0x0, 0x1, "00000000000095e397bfbc6c"}, {0x1f, 0x6, "0615c95bcf8af4ce6312fd5a6e56957be72979b70f0c80f4bb5d02e6332b8c9e6700a0fd097156fb4d8b0b129c1e"}]}}}}}}, 0x0)

03:33:58 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000540)=ANY=[], 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00')
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:33:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x38}}, 0x0)

03:33:59 executing program 4:
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030600000000000000000000000000000900020073797a30000000000900020073797a310000f6ff04000100070000000900020073797a3100000000052001"], 0x48}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

03:33:59 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

03:33:59 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r1}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0x0, @loopback}, r3}}, 0x30)

[ 1050.406701][T27463] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[ 1050.488190][ T3224] usb 4-1: new high-speed USB device number 52 using dummy_hcd
03:33:59 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000001c0))

03:33:59 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)

[ 1050.727186][ T3224] usb 4-1: Using ep0 maxpacket: 32
[ 1050.847878][ T3224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1050.858025][ T3224] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1051.039493][ T3224] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1051.049573][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.058052][ T3224] usb 4-1: Product: syz
[ 1051.062362][ T3224] usb 4-1: Manufacturer: syz
[ 1051.067257][ T3224] usb 4-1: SerialNumber: syz
[ 1051.358210][ T3224] usblp: can't set desired altsetting 0 on interface 0
[ 1051.393981][ T3224] usb 4-1: USB disconnect, device number 52
03:34:00 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)

03:34:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "5959d1e31987065d"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "16cd61427832f779"}, 0x6}}]}, 0x44}}, 0x0)

03:34:00 executing program 4:
unshare(0x2000400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f00000000c0))

03:34:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@mcast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0xa0}}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0xa0}}, 0x0)

03:34:00 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000001c0))

03:34:01 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10)
r2 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0)

03:34:01 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000001c0))

03:34:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "5959d1e31987065d"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "16cd61427832f779"}, 0x6}}]}, 0x44}}, 0x0)

03:34:01 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0xe, &(0x7f00000000c0)=""/4107, &(0x7f0000000040)=0x100b)

03:34:01 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_mount_image$tmpfs(0x0, &(0x7f0000000480)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000580)='./bus/file0\x00')

[ 1052.567223][T26238] usb 4-1: new high-speed USB device number 53 using dummy_hcd
03:34:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "5959d1e31987065d"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "16cd61427832f779"}, 0x6}}]}, 0x44}}, 0x0)

03:34:01 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10)
r2 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0)

[ 1052.948174][T26238] usb 4-1: Using ep0 maxpacket: 32
[ 1053.188153][T26238] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1053.198243][T26238] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1053.454322][T26238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1053.464024][T26238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.473005][T26238] usb 4-1: Product: syz
[ 1053.477399][T26238] usb 4-1: Manufacturer: syz
[ 1053.482145][T26238] usb 4-1: SerialNumber: syz
[ 1053.817685][T26238] usblp: can't set desired altsetting 0 on interface 0
[ 1053.846390][T26238] usb 4-1: USB disconnect, device number 53
[ 1054.316224][T27535] overlayfs: filesystem on './bus' not supported as upperdir
03:34:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000100)=0x1e)

03:34:03 executing program 5:
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))

03:34:03 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000001c0))

03:34:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "5959d1e31987065d"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "16cd61427832f779"}, 0x6}}]}, 0x44}}, 0x0)

03:34:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10)
r2 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0)

03:34:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x5, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

03:34:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b32, 0x0)

03:34:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10)
r2 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0)

03:34:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1)

03:34:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newnexthop={0x24, 0x68, 0x103, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0)

03:34:04 executing program 3:
io_setup(0xb, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = eventfd(0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r2}])

[ 1055.166645][T27554] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1055.179639][T27554] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
03:34:04 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400)="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", 0x205)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000005c0)={&(0x7f0000001600)=""/4096, 0x1000})

03:34:04 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x1404, 0x1}, 0x10}}, 0x0)

03:34:05 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f0000000180)={0x0, @time})

03:34:05 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400)="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", 0x205)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000005c0)={&(0x7f0000001600)=""/4096, 0x1000})

03:34:05 executing program 3:
clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4d180930a06000004a843089100fe803900060008000a0000dc13382d0010009b7a136ef75afbc9bff7de5cf25fa8", 0x3b}, {&(0x7f00000005c0)="7c3817362aa707ecd5d59f4fefc75ec8b0a86b7a5084925374c6", 0x1a}], 0x2}, 0x0)

03:34:05 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
fcntl$setstatus(r0, 0x4, 0x44800)
io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000100000, 0x8000000, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x7000}])

03:34:05 executing program 1:
r0 = socket(0xa, 0x3, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)

03:34:05 executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5a5ff3309bcbd7bb"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a4ef08f666c5d148"}}, 0x48}}, 0x0)
close(r0)

03:34:05 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400)="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", 0x205)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000005c0)={&(0x7f0000001600)=""/4096, 0x1000})

[ 1056.391580][T27585] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
03:34:05 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000000904810000000000000921000000012200ff080581"], 0x0)

03:34:05 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f907})

03:34:05 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400)="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", 0x205)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000005c0)={&(0x7f0000001600)=""/4096, 0x1000})

03:34:05 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0x801, 0x0, 0x0)

03:34:05 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, r0}, 0x38)

[ 1057.147226][T21908] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1057.407141][T21908] usb 2-1: Using ep0 maxpacket: 16
03:34:06 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f0000000180)={0x0, @time})

03:34:06 executing program 2:
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x10)

03:34:06 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f907})

03:34:06 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0x801, 0x0, 0x0)

03:34:06 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x3, &(0x7f0000000040), 0x4)

[ 1057.551685][T21908] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[ 1057.560270][T21908] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1057.567869][T21908] usb 2-1: config 0 has no interface number 0
[ 1057.574129][T21908] usb 2-1: config 0 interface 129 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1057.587456][T21908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1057.596653][T21908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.765898][T21908] usb 2-1: config 0 descriptor??
03:34:06 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0x801, 0x0, 0x0)

03:34:06 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x0, @remote}], 0x20)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}], 0x10)

[ 1058.012645][ T9512] usb 2-1: USB disconnect, device number 41
[ 1058.808096][T21908] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1059.067073][T21908] usb 2-1: Using ep0 maxpacket: 16
[ 1059.208369][T21908] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[ 1059.216694][T21908] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1059.224208][T21908] usb 2-1: config 0 has no interface number 0
[ 1059.230579][T21908] usb 2-1: config 0 interface 129 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1059.243978][T21908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1059.253349][T21908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.267207][T21908] usb 2-1: config 0 descriptor??
[ 1059.533473][T21908] usb 2-1: USB disconnect, device number 42
03:34:08 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000000904810000000000000921000000012200ff080581"], 0x0)

03:34:08 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906038108deffec87d64ae8fe000e0105000100060000fd100008800c0007800800094077ca99830900020073797a3000000000080009"], 0x1}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0)

03:34:08 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f907})

03:34:08 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0x801, 0x0, 0x0)

03:34:08 executing program 2:
unshare(0x2a000400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

03:34:08 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f0000000180)={0x0, @time})

03:34:08 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f907})

[ 1059.864139][T27667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:34:08 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xfffffffa, 0x4)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r1, 0x400000001ffffffd)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

03:34:08 executing program 2:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000080000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d0500000090c8b9f70dc136cb184a"}, 0x80)
sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2000}}, 0x80, 0x0}, 0x0)

[ 1060.212229][   T29] audit: type=1400 audit(1597808049.100:66): avc:  denied  { name_bind } for  pid=27673 comm="syz-executor.3" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
03:34:09 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x10004)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0)
ftruncate(r1, 0x10004)

[ 1060.300499][T21908] usb 2-1: new high-speed USB device number 43 using dummy_hcd
03:34:09 executing program 2:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000080000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d0500000090c8b9f70dc136cb184a"}, 0x80)
sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2000}}, 0x80, 0x0}, 0x0)

[ 1060.567318][T21908] usb 2-1: Using ep0 maxpacket: 16
03:34:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x58, r1, 0x401, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x58}}, 0x0)

[ 1060.698749][T21908] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[ 1060.707209][T21908] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1060.714554][T21908] usb 2-1: config 0 has no interface number 0
[ 1060.720992][T21908] usb 2-1: config 0 interface 129 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1060.734221][T21908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1060.743490][T21908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.771596][T21908] usb 2-1: config 0 descriptor??
[ 1061.080667][T21908] usb 2-1: USB disconnect, device number 43
03:34:10 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000000904810000000000000921000000012200ff080581"], 0x0)

03:34:10 executing program 2:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000080000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d0500000090c8b9f70dc136cb184a"}, 0x80)
sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2000}}, 0x80, 0x0}, 0x0)

03:34:10 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906038108deffec87d64ae8fe000e0105000100060000fd100008800c0007800800094077ca99830900020073797a3000000000080009"], 0x1}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0)

03:34:10 executing program 3:
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

03:34:10 executing program 0:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)

03:34:10 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f0000000180)={0x0, @time})

03:34:10 executing program 2:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000080000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d0500000090c8b9f70dc136cb184a"}, 0x80)
sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2000}}, 0x80, 0x0}, 0x0)

[ 1061.864377][T27713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1061.919203][T27715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1061.951625][T27712] not chained 10000 origins
[ 1061.956178][T27712] CPU: 0 PID: 27712 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0
[ 1061.964870][T27712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1061.974927][T27712] Call Trace:
[ 1061.978241][T27712]  dump_stack+0x21c/0x280
[ 1061.982606][T27712]  kmsan_internal_chain_origin+0x6f/0x130
[ 1061.988346][T27712]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1061.994481][T27712]  ? udpv6_recvmsg+0x28dc/0x2bc0
[ 1061.999472][T27712]  ? kmsan_get_metadata+0x116/0x180
[ 1062.004685][T27712]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1062.010255][T27712]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1062.016382][T27712]  ? _copy_from_user+0x201/0x310
[ 1062.021348][T27712]  ? kmsan_get_metadata+0x116/0x180
[ 1062.026561][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.031527][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.036679][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.041648][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.046177][T27712]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1062.052016][T27712]  ? kmsan_get_metadata+0x116/0x180
[ 1062.057241][T27712]  ? kmsan_internal_check_memory+0xb1/0x3d0
[ 1062.063156][T27712]  ? kmsan_get_metadata+0x116/0x180
[ 1062.068372][T27712]  ? kmsan_internal_set_origin+0x75/0xb0
[ 1062.074024][T27712]  ? __msan_poison_alloca+0xf0/0x120
[ 1062.079850][T27712]  ? __sys_recvmmsg+0xbb/0x610
[ 1062.084629][T27712]  ? __sys_recvmmsg+0xbb/0x610
[ 1062.089413][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.094132][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.100231][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.106404][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.111636][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.116502][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.121023][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.127359][T27712] RIP: 0023:0xf7efd549
[ 1062.131421][T27712] Code: Bad RIP value.
[ 1062.135512][T27712] RSP: 002b:00000000f54f70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[ 1062.143933][T27712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040
[ 1062.151932][T27712] RDX: 0000000000000284 RSI: 000000000000002b RDI: 0000000000000000
[ 1062.159921][T27712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1062.167912][T27712] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1062.175906][T27712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1062.183911][T27712] Uninit was stored to memory at:
[ 1062.188980][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.194740][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.199705][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.204851][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.209818][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.214331][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.219024][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.225107][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.231283][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.236488][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.241346][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.245870][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.252189][T27712] 
[ 1062.254519][T27712] Uninit was stored to memory at:
[ 1062.259553][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.265276][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.270219][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.275336][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.280278][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.284784][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.289469][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.295547][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.301710][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.306922][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.311781][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.316291][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.322607][T27712] 
[ 1062.324935][T27712] Uninit was stored to memory at:
[ 1062.329970][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.335695][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.340644][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.345765][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.350708][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.355214][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.359896][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.365969][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.372127][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.377337][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.382191][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.386700][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.393021][T27712] 
[ 1062.395350][T27712] Uninit was stored to memory at:
[ 1062.400380][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.406117][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.411066][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.416179][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.421121][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.425800][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.430486][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.436574][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.443175][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.448380][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.453235][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.457746][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.464063][T27712] 
[ 1062.466385][T27712] Uninit was stored to memory at:
[ 1062.471419][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.477146][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.482088][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.487204][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.492147][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.496655][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.501345][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.507418][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.513578][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.518783][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.523639][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.528152][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.534470][T27712] 
[ 1062.536794][T27712] Uninit was stored to memory at:
[ 1062.541826][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.547552][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.552500][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.557619][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.562560][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.567077][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.571772][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.577852][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.584012][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.589221][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.594075][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.598586][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.604902][T27712] 
[ 1062.607225][T27712] Uninit was stored to memory at:
[ 1062.612273][T27712]  kmsan_internal_chain_origin+0xad/0x130
[ 1062.617999][T27712]  __msan_chain_origin+0x50/0x90
[ 1062.622943][T27712]  __get_compat_msghdr+0x6db/0x9d0
[ 1062.628064][T27712]  get_compat_msghdr+0x108/0x2b0
[ 1062.633009][T27712]  do_recvmmsg+0xdbb/0x22c0
[ 1062.637519][T27712]  __sys_recvmmsg+0x5dd/0x610
[ 1062.642206][T27712]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1062.648280][T27712]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1062.654440][T27712]  __do_fast_syscall_32+0x2af/0x480
[ 1062.659647][T27712]  do_fast_syscall_32+0x6b/0xd0
[ 1062.664505][T27712]  do_SYSENTER_32+0x73/0x90
[ 1062.669017][T27712]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1062.675340][T27712] 
[ 1062.677667][T27712] Local variable ----msg_sys@do_recvmmsg created at:
[ 1062.684357][T27712]  do_recvmmsg+0xbf/0x22c0
[ 1062.688775][T27712]  do_recvmmsg+0xbf/0x22c0
[ 1062.777704][T21908] usb 1-1: new high-speed USB device number 39 using dummy_hcd
03:34:11 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906038108deffec87d64ae8fe000e0105000100060000fd100008800c0007800800094077ca99830900020073797a3000000000080009"], 0x1}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0)

03:34:12 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x1, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1063.047226][T21908] usb 1-1: Using ep0 maxpacket: 32
[ 1063.052731][T26231] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1063.181370][T21908] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1063.191331][T21908] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1063.201372][T21908] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1063.211393][T21908] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1063.249086][T27723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1063.367487][T26231] usb 2-1: Using ep0 maxpacket: 16
[ 1063.443133][T21908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1063.452433][T21908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.460668][T21908] usb 1-1: Product: syz
[ 1063.464920][T21908] usb 1-1: Manufacturer: syz
[ 1063.469725][T21908] usb 1-1: SerialNumber: syz
03:34:12 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {0x2}, [], {0x2}, {0x4}}, 0x24, 0x0)

[ 1063.558419][T26231] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[ 1063.566778][T26231] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1063.574914][T26231] usb 2-1: config 0 has no interface number 0
[ 1063.581257][T26231] usb 2-1: config 0 interface 129 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1063.594562][T26231] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1063.603857][T26231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:34:12 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x32, 0x0, "9652c258b8ca299f3410ba78a989b716fbcde978dce367ee7f6bfeaa4745b8c94e2daa13ccb1f2121b25de16030ce223bba8e4dd6b2f9c9433b27006dd65446a9c4838584deed5616a6d9be7c09e00"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1d, 0x0, "2461758a5264d9a14fb62fe6bce0eeb5025264c73c839e09f5ff08cccc6e3ffd7477f28557a8556964d283b24c2a0e31a1d4a8d735eec48df90a55e5c0b3a337860cfd677448d1258641934ef7302d02"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x43, 0x0, "bb9a7222839f83ddefe86371381b4540b6d4cfdd4963fe365699d8068246d55b2c9b3b14573c4f0ddd8e7916c2f01ce8fd1838e7accae339b83aa3ed0b52cac8d0d5c5211dfd0dff95915461db688d1e"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

[ 1063.778974][T26231] usb 2-1: config 0 descriptor??
[ 1063.839184][T21908] usblp: can't set desired altsetting 0 on interface 0
[ 1063.873983][T21908] usb 1-1: USB disconnect, device number 39
[ 1064.106391][T26231] usb 2-1: USB disconnect, device number 44
03:34:13 executing program 2:
r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='autofs\x00', &(0x7f0000000140)='./file0\x00', r1)

[ 1064.609489][ T9512] usb 1-1: new high-speed USB device number 40 using dummy_hcd
03:34:13 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000000904810000000000000921000000012200ff080581"], 0x0)

03:34:13 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906038108deffec87d64ae8fe000e0105000100060000fd100008800c0007800800094077ca99830900020073797a3000000000080009"], 0x1}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0)

03:34:13 executing program 3:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

03:34:13 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x900000000000, 0x5})

[ 1064.858114][ T9512] usb 1-1: Using ep0 maxpacket: 32
[ 1064.968663][T27764] encrypted_key: key trusted:em1 not found
[ 1064.970778][T27764] encrypted_key: keyword 'new' not allowed when called from .update method
[ 1064.987075][ T9512] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1064.997128][ T9512] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1065.007035][ T9512] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1065.017782][ T9512] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1065.038574][T27766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:34:14 executing program 0:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)

[ 1065.388006][ T9512] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1065.397364][ T9512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.405459][ T9512] usb 1-1: Product: syz
03:34:14 executing program 2:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:14 executing program 3:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:34:14 executing program 5:
bpf$PROG_LOAD(0x3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

[ 1065.487413][T21908] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1065.505160][ T9512] usb 1-1: can't set config #1, error -71
[ 1065.571547][ T9512] usb 1-1: USB disconnect, device number 40
[ 1065.737442][T21908] usb 2-1: Using ep0 maxpacket: 16
[ 1065.879178][T21908] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[ 1065.887630][T21908] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1065.895032][T21908] usb 2-1: config 0 has no interface number 0
[ 1065.901592][T21908] usb 2-1: config 0 interface 129 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1065.914918][T21908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1065.924275][T21908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:34:14 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

[ 1066.065495][T27782] hub 9-0:1.0: USB hub found
03:34:15 executing program 3:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

[ 1066.111341][T27782] hub 9-0:1.0: 8 ports detected
[ 1066.197409][ T9512] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1066.229992][T21908] usb 2-1: config 0 descriptor??
03:34:15 executing program 2:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:15 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

[ 1066.437228][ T9512] usb 1-1: Using ep0 maxpacket: 32
[ 1066.547177][T21908] usb 2-1: USB disconnect, device number 45
[ 1066.558237][ T9512] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1066.568921][ T9512] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1066.578865][ T9512] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1066.588974][ T9512] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1066.898709][ T9512] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1066.907989][ T9512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.916075][ T9512] usb 1-1: Product: syz
[ 1066.920645][ T9512] usb 1-1: Manufacturer: syz
[ 1066.925319][ T9512] usb 1-1: SerialNumber: syz
03:34:16 executing program 3:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:34:16 executing program 2:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:16 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

[ 1067.308048][ T9512] usblp: can't set desired altsetting 0 on interface 0
[ 1067.351957][ T9512] usb 1-1: USB disconnect, device number 41
03:34:16 executing program 3:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

03:34:16 executing program 0:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)

03:34:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

03:34:16 executing program 2:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:17 executing program 5:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x9}]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20)

03:34:17 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

03:34:17 executing program 3:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:17 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400007000810ce00f80ecdb4cb9f207c804a00d00000002002efb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

03:34:17 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

[ 1068.650341][T21908] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1068.724052][T27852] netlink: 1046 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1068.917086][T21908] usb 1-1: Using ep0 maxpacket: 32
03:34:17 executing program 3:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0)

03:34:17 executing program 2:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

03:34:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
lseek(r0, 0x3, 0x0)

[ 1069.059267][T21908] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1069.069486][T21908] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1069.079531][T21908] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1069.089511][T21908] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1069.288061][T21908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1069.297320][T21908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.305391][T21908] usb 1-1: Product: syz
[ 1069.309830][T21908] usb 1-1: Manufacturer: syz
[ 1069.314515][T21908] usb 1-1: SerialNumber: syz
[ 1069.426907][T27862] hub 9-0:1.0: USB hub found
[ 1069.435540][T27862] hub 9-0:1.0: 8 ports detected
[ 1069.870056][T21908] usblp: can't set desired altsetting 0 on interface 0
[ 1069.897958][T21908] usb 1-1: USB disconnect, device number 42
[ 1070.150302][T27884] BPF:[2] Invalid kind:0
[ 1070.166315][T27885] BPF:[2] Invalid kind:0
03:34:19 executing program 0:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)

03:34:19 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0)

03:34:19 executing program 3:
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
tee(0xffffffffffffffff, r0, 0x0, 0x2)

03:34:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:34:19 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x64, 0x3c}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:34:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0)

[ 1070.608009][T27893] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[ 1070.692988][T27895] hub 9-0:1.0: USB hub found
[ 1070.699857][T27895] hub 9-0:1.0: 8 ports detected
[ 1070.774145][T27897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:34:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000035000538d25a802a8c63940d0224fc6010000a400a000048053582c137153e370948098000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000)

[ 1070.872274][T27902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:34:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0)

03:34:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x20000004, 0x32fe3cf0}, 0x14)
shutdown(r0, 0x1)

03:34:20 executing program 1:
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@upgrade='upgrade'}]})

[ 1071.216997][T26231] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1071.238550][T27918] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1071.248952][T27918] openvswitch: netlink: ufid size 18437 bytes exceeds the range (1, 16)
[ 1071.456555][T27922] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[ 1071.497072][T26231] usb 1-1: Using ep0 maxpacket: 32
03:34:20 executing program 4:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ec7f54", 0x0, "36ee00"}}}}}}, 0x0)

03:34:20 executing program 3:
r0 = getpid()
r1 = gettid()
kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)

[ 1071.651160][T26231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1071.661152][T26231] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1071.671540][T26231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1071.681497][T26231] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1071.975618][T26231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1071.984964][T26231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.993288][T26231] usb 1-1: Product: syz
[ 1071.997624][T26231] usb 1-1: Manufacturer: syz
[ 1072.002314][T26231] usb 1-1: SerialNumber: syz
[ 1072.406325][T26231] usblp: can't set desired altsetting 0 on interface 0
[ 1072.438507][T26231] usb 1-1: USB disconnect, device number 43
03:34:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0)

03:34:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)

03:34:21 executing program 3:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x5206, 0x0)

03:34:21 executing program 4:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ec7f54", 0x0, "36ee00"}}}}}}, 0x0)

03:34:21 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
r3 = dup3(r1, r2, 0x0)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)=ANY=[], 0x33fe0}}, 0x0)
write$rfkill(r3, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1073.151439][T27951] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
03:34:22 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)

03:34:22 executing program 3:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x20841, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='\r', 0x1}], 0x1)

03:34:22 executing program 4:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ec7f54", 0x0, "36ee00"}}}}}}, 0x0)

03:34:22 executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='nls=cp850,nls=i'])

03:34:22 executing program 3:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x20841, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='\r', 0x1}], 0x1)

03:34:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0)

03:34:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)

03:34:22 executing program 4:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ec7f54", 0x0, "36ee00"}}}}}}, 0x0)

[ 1074.251543][T27982] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
03:34:23 executing program 3:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x20841, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='\r', 0x1}], 0x1)

03:34:23 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

03:34:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)

03:34:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000001d40)=ANY=[@ANYBLOB="d80b000000000000000a00005a711a73590bc3268a05f3c1c7d415666d7d0684ecb6d134be"])

03:34:24 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x55}, [@call={0x27}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64)

03:34:24 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x83, 0x0, &(0x7f00000001c0)=0x20000148)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:34:24 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@name, 0x10)

03:34:24 executing program 3:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x20841, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='\r', 0x1}], 0x1)

03:34:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)

03:34:25 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2)

03:34:25 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

03:34:25 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x0, 0x0, 0x0, 0x2, 0x2}, @restrict={0x0, 0x0, 0x0, 0xa}]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20)

03:34:25 executing program 1:
r0 = socket$kcm(0x11, 0x3, 0x300)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
sendmsg$sock(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="a0", 0x1}], 0x1}, 0x2000a844)
write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38)

03:34:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0)

03:34:25 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2)

03:34:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000001d40)=ANY=[@ANYBLOB="d80b000000000000000a00005a711a73590bc3268a05f3c1c7d415666d7d0684ecb6d134be"])

03:34:26 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x3, 0x40000000001004)

03:34:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x78, r1, 0x401, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x4, 0x0, 0x0, 0x0}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x78}}, 0x0)

03:34:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a05000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0xb4}}, 0x0)

03:34:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:34:26 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2)

[ 1077.625380][T28041] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
03:34:26 executing program 2:
bpf$OBJ_GET_MAP(0x9, &(0x7f00000001c0)={0x0, 0x11}, 0x10)

03:34:26 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x1}]}]}}, &(0x7f0000000340)=""/131, 0x36, 0x83, 0x8}, 0x20)

03:34:26 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r1)
close(r0)

03:34:26 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2)

03:34:26 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x3, 0x40000000001004)

03:34:27 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040), 0x0)

[ 1078.269054][T28052] BPF:[1] FUNC_PROTO (anon) 
[ 1078.273845][T28052] BPF:return=0 args=(
[ 1078.278278][T28052] BPF:0 (anon)
[ 1078.281823][T28052] BPF:, 1 (invalid-name-offset)
[ 1078.286996][T28052] BPF:)
[ 1078.290047][T28052] BPF: 
[ 1078.292878][T28052] BPF:Invalid arg#1
[ 1078.298356][T28052] BPF:
[ 1078.298356][T28052] 
[ 1078.335294][T28054] BPF:[1] FUNC_PROTO (anon) 
[ 1078.340636][T28054] BPF:return=0 args=(
[ 1078.344835][T28054] BPF:0 (anon)
[ 1078.348458][T28054] BPF:, 1 (invalid-name-offset)
[ 1078.353383][T28054] BPF:)
[ 1078.356216][T28054] BPF: 
[ 1078.359246][T28054] BPF:Invalid arg#1
[ 1078.363376][T28054] BPF:
[ 1078.363376][T28054] 
03:34:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000001d40)=ANY=[@ANYBLOB="d80b000000000000000a00005a711a73590bc3268a05f3c1c7d415666d7d0684ecb6d134be"])

03:34:27 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x1}]}]}}, &(0x7f0000000340)=""/131, 0x36, 0x83, 0x8}, 0x20)

03:34:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x381080, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)

03:34:27 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r1)
close(r0)

03:34:27 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @exit_looper, @register_looper], 0x0, 0x0, 0x0})

03:34:27 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x3, 0x40000000001004)

03:34:28 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x1}]}]}}, &(0x7f0000000340)=""/131, 0x36, 0x83, 0x8}, 0x20)

[ 1079.202668][T28073] BPF:[1] FUNC_PROTO (anon) 
[ 1079.207967][T28073] BPF:return=0 args=(
[ 1079.212048][T28073] BPF:0 (anon)
[ 1079.215761][T28073] BPF:, 1 (invalid-name-offset)
[ 1079.220884][T28073] BPF:)
[ 1079.223730][T28073] BPF: 
[ 1079.226584][T28073] BPF:Invalid arg#1
[ 1079.230674][T28073] BPF:
[ 1079.230674][T28073] 
03:34:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @exit_looper, @register_looper], 0x0, 0x0, 0x0})

03:34:28 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x3, 0x40000000001004)

03:34:28 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r1)
close(r0)

03:34:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x381080, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)

[ 1079.644950][T28088] BPF:[1] FUNC_PROTO (anon) 
[ 1079.649945][T28088] BPF:return=0 args=(
[ 1079.654014][T28088] BPF:0 (anon)
[ 1079.657702][T28088] BPF:, 1 (invalid-name-offset)
[ 1079.662706][T28088] BPF:)
[ 1079.665669][T28088] BPF: 
[ 1079.668590][T28088] BPF:Invalid arg#1
[ 1079.672668][T28088] BPF:
[ 1079.672668][T28088] 
03:34:28 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x1}]}]}}, &(0x7f0000000340)=""/131, 0x36, 0x83, 0x8}, 0x20)

[ 1080.229305][T28105] BPF:[1] FUNC_PROTO (anon) 
[ 1080.234524][T28105] BPF:return=0 args=(
[ 1080.239110][T28105] BPF:0 (anon)
[ 1080.242793][T28105] BPF:, 1 (invalid-name-offset)
[ 1080.248040][T28105] BPF:)
[ 1080.251002][T28105] BPF: 
[ 1080.253928][T28105] BPF:Invalid arg#1
[ 1080.258204][T28105] BPF:
[ 1080.258204][T28105] 
03:34:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000001d40)=ANY=[@ANYBLOB="d80b000000000000000a00005a711a73590bc3268a05f3c1c7d415666d7d0684ecb6d134be"])

03:34:29 executing program 4:
futex(&(0x7f0000000000)=0x2, 0x8b, 0x2, &(0x7f0000000080), &(0x7f00000000c0), 0x0)

03:34:29 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r1)
close(r0)

03:34:29 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @exit_looper, @register_looper], 0x0, 0x0, 0x0})

03:34:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x381080, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)

03:34:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14)
getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x34}}, 0x0)

03:34:30 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
poll(0x0, 0x0, 0x20204)

03:34:30 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @exit_looper, @register_looper], 0x0, 0x0, 0x0})

03:34:30 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write(r1, &(0x7f0000000040)='$', 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

03:34:30 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x381080, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)

03:34:30 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x7)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xfffffeff, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

03:34:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0)

03:34:32 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write(r1, &(0x7f0000000040)='$', 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

03:34:32 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x32}, 0x20)

03:34:32 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:32 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write(r1, &(0x7f0000000040)='$', 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

03:34:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1f6, 0x0, 0x0)

03:34:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0)

03:34:33 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x7)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xfffffeff, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

03:34:33 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:33 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write(r1, &(0x7f0000000040)='$', 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

03:34:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_hsr\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x7}})

03:34:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x0)

03:34:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @cond})
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

[ 1085.296424][   T29] audit: type=1400 audit(1597808074.180:67): avc:  denied  { relabelfrom } for  pid=28182 comm="syz-executor.2" name="" dev="pipefs" ino=79789 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[ 1085.320887][   T29] audit: type=1401 audit(1597808074.180:68): op=setxattr invalid_context=""
[ 1085.455966][   T29] audit: type=1401 audit(1597808074.240:69): op=setxattr invalid_context=""
03:34:34 executing program 2:
open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unshare(0x2a000400)
fcntl$setlease(r0, 0x400, 0x2)

03:34:34 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x10a781, 0x0)
r1 = getpgid(0x0)
r2 = pidfd_open(r1, 0x0)
pidfd_getfd(r2, r0, 0x0)

03:34:35 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:35 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @cond})
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

03:34:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:34:35 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x49, 0x71, 0x78, 0x10, 0x7c4, 0xa001, 0xa52b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0xfb, 0x71}}]}}]}}, 0x0)

03:34:35 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x7)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xfffffeff, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

[ 1087.104433][T28208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer.
[ 1087.337977][T26231] usb 1-1: new high-speed USB device number 44 using dummy_hcd
03:34:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @cond})
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

03:34:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x4b45, 0x0)

03:34:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1087.589598][T26231] usb 1-1: Using ep0 maxpacket: 16
03:34:36 executing program 1:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

[ 1087.876186][T26231] usb 1-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=a5.2b
[ 1087.885903][T26231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.894254][T26231] usb 1-1: Product: syz
[ 1087.898626][T26231] usb 1-1: Manufacturer: syz
[ 1087.903291][T26231] usb 1-1: SerialNumber: syz
03:34:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @cond})
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

[ 1087.960073][T26231] usb 1-1: config 0 descriptor??
[ 1088.000766][T26231] ums-datafab 1-1:0.0: USB Mass Storage device detected
03:34:36 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x7)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xfffffeff, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

[ 1088.204468][ T9512] usb 1-1: USB disconnect, device number 44
[ 1088.997170][T26231] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1089.239701][T26231] usb 1-1: Using ep0 maxpacket: 16
03:34:38 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/141)

03:34:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:34:38 executing program 1:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

03:34:38 executing program 3:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

[ 1089.537979][T26231] usb 1-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=a5.2b
[ 1089.547237][T26231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.555307][T26231] usb 1-1: Product: syz
[ 1089.559755][T26231] usb 1-1: Manufacturer: syz
[ 1089.564431][T26231] usb 1-1: SerialNumber: syz
[ 1089.789013][T26231] usb 1-1: config 0 descriptor??
[ 1089.834607][T26231] ums-datafab 1-1:0.0: USB Mass Storage device detected
03:34:39 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x49, 0x71, 0x78, 0x10, 0x7c4, 0xa001, 0xa52b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0xfb, 0x71}}]}}]}}, 0x0)

03:34:39 executing program 1:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

03:34:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:34:39 executing program 3:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

[ 1090.123252][ T3224] usb 1-1: USB disconnect, device number 45
03:34:39 executing program 3:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

03:34:39 executing program 1:
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="21000000020000000b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
getdents64(r0, &(0x7f0000000080)=""/181, 0xb5)

03:34:39 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x30, 0x4)
bind$inet(r0, &(0x7f0000000940)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[{0x10, 0x11}], 0x10}}], 0x2, 0x0)

03:34:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)

[ 1090.947199][T26238] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1091.188087][T26238] usb 1-1: Using ep0 maxpacket: 16
[ 1091.468911][T26238] usb 1-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=a5.2b
[ 1091.478358][T26238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.486427][T26238] usb 1-1: Product: syz
[ 1091.490849][T26238] usb 1-1: Manufacturer: syz
[ 1091.495534][T26238] usb 1-1: SerialNumber: syz
[ 1091.597580][T26238] usb 1-1: config 0 descriptor??
[ 1091.640446][T26238] ums-datafab 1-1:0.0: USB Mass Storage device detected
[ 1091.892902][   T28] usb 1-1: USB disconnect, device number 46
03:34:41 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc2c45512, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'})

03:34:41 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}]}, 0x20}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e000002"], 0x10}}, 0x0)

03:34:41 executing program 5:
unshare(0x6000400)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
fcntl$setlease(r0, 0x400, 0x2)

03:34:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'vlan1\x00'})

03:34:41 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x49, 0x71, 0x78, 0x10, 0x7c4, 0xa001, 0xa52b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0xfb, 0x71}}]}}]}}, 0x0)

03:34:41 executing program 2:
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x3, [0x0, 0x0, 0x6]}, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="62ae382a1dcd8fbe30"], 0x10)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080))

03:34:41 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc2c45512, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'})

03:34:41 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

03:34:41 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc2c45512, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'})

03:34:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev}]}}]}, 0x48}}, 0x0)

[ 1093.167388][T26238] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1093.417000][T26238] usb 1-1: Using ep0 maxpacket: 16
[ 1093.698303][T26238] usb 1-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=a5.2b
[ 1093.708270][T26238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.716341][T26238] usb 1-1: Product: syz
[ 1093.720748][T26238] usb 1-1: Manufacturer: syz
[ 1093.725421][T26238] usb 1-1: SerialNumber: syz
03:34:42 executing program 3:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

[ 1094.303702][T26238] usb 1-1: config 0 descriptor??
03:34:43 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

[ 1094.356388][T26238] ums-datafab 1-1:0.0: USB Mass Storage device detected
[ 1094.561307][T28503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1094.612588][T26238] usb 1-1: USB disconnect, device number 47
03:34:43 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc2c45512, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'})

[ 1094.749523][T28506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:34:43 executing program 3:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:34:45 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)

03:34:45 executing program 2:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:34:45 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x49, 0x71, 0x78, 0x10, 0x7c4, 0xa001, 0xa52b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0xfb, 0x71}}]}}]}}, 0x0)

03:34:45 executing program 4:
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast1={0x0}, 0x4}, 0x1c)

03:34:45 executing program 3:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:34:45 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

03:34:45 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0)

03:34:45 executing program 2:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:34:45 executing program 3:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

[ 1096.567032][T26046] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1096.839933][T26046] usb 1-1: Using ep0 maxpacket: 16
03:34:45 executing program 2:
r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:34:45 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffc}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r4=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d032807f3e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

03:34:46 executing program 3:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000)
shmdt(r1)

[ 1097.141342][T26046] usb 1-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=a5.2b
[ 1097.150598][T26046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.158977][T26046] usb 1-1: Product: syz
[ 1097.163220][T26046] usb 1-1: Manufacturer: syz
[ 1097.168060][T26046] usb 1-1: SerialNumber: syz
[ 1097.392154][T26046] usb 1-1: config 0 descriptor??
[ 1097.452429][T26046] ums-datafab 1-1:0.0: USB Mass Storage device detected
[ 1097.505214][T28613] tpacket_rcv: packet too big, clamped from 32698 to 32638. macoff=82
[ 1097.726665][ T9511] usb 1-1: USB disconnect, device number 48
03:34:47 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x0, 0x7})

03:34:47 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

03:34:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:34:47 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = dup2(r0, r1)
ppoll(&(0x7f0000000100)=[{r2, 0x120}], 0x1, 0x0, 0x0, 0x0)

03:34:47 executing program 3:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000)
shmdt(r1)

03:34:47 executing program 0:
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffc)

03:34:47 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x1f, 0xfffffff8, 0x0, 0x0, 0x58, 0x92a, {0x0, 0x0, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, "a3c2bb9f3ad0329c98bc36ba4e65f05429c80ee6c4126a820431eebea6b182f9"}})
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

03:34:47 executing program 2:
unshare(0x2a040600)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_evm(0x0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000140000000700b541aedc851b0e3b9c29016dc33ec4ca557ce2ea2da7d9b4b7f3936d41d2d1813224ff8f6ffa88b4c3ed18b55e16e23ad2f27fdc6782efbb642b6d21b1c90865f3248fd60281ca2f75ce2d34682406fe32faef66fbe5afca7de4890f30c7cdf375a938725c01cdd12e1ebea30be3a58e61dd7527bf4ac9a976dfdf6026309e8050964d0f936361368a31a13f32929a78f8b94f04af1b010000005cf5794f781429b4d7549b2e96e19714a20bb915438afe881c9a8882"], 0xbe, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x800, "b84fde", 0x2, 0x3})
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

03:34:47 executing program 3:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000)
shmdt(r1)

03:34:47 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = dup2(r0, r1)
ppoll(&(0x7f0000000100)=[{r2, 0x120}], 0x1, 0x0, 0x0, 0x0)

03:34:48 executing program 3:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000)
shmdt(r1)

03:34:48 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = dup2(r0, r1)
ppoll(&(0x7f0000000100)=[{r2, 0x120}], 0x1, 0x0, 0x0, 0x0)

03:34:49 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
io_setup(0x7f, &(0x7f0000000000)=<r1=>0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="aa63ae79dba182e427c0fd1343f29fdae35f5dfc0f281f22ee700e9a7d03190a2ae59cbb6ff7f2c41f2f9451c91f93fb6adb93992fe55d11fba60b685c319ea788c7", 0x42}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x3, 0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])

03:34:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x2})

03:34:49 executing program 2:
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/227, 0xe3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:34:49 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0))

03:34:49 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x1f, 0xfffffff8, 0x0, 0x0, 0x58, 0x92a, {0x0, 0x0, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, "a3c2bb9f3ad0329c98bc36ba4e65f05429c80ee6c4126a820431eebea6b182f9"}})
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

03:34:49 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = dup2(r0, r1)
ppoll(&(0x7f0000000100)=[{r2, 0x120}], 0x1, 0x0, 0x0, 0x0)

03:34:49 executing program 4:
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f676465763d2e2f4d66696c65302c1e"])

03:34:49 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000004000000000006241a0000000901810300000000000904010000020d00000904010102020d00000905820200020000000905035a0002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

03:34:49 executing program 2:
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/227, 0xe3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:34:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x2})

03:34:50 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000004e00010000000000005cc51163060000000000130001000f0e13a772696e6771b6c1d20c1a3182419863b260f1d0cfa37c64ff6c296f38a1a5f7e7df26a8699be136486b1ebc1c010000000000000008e5f36d31e27172a6cd6add0d849dcba8214b96a79d61801d4943eeb901282c2d8edf3b932db48796c0b740a62b4003840e9820085ffc95631520026f374c849df9d5d442e6c8615c04a5bceb085500"/173], 0x28}}, 0x20000015)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x3, 0xd3a}]}, 0x4c}}, 0x0)

03:34:50 executing program 2:
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/227, 0xe3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[ 1101.367759][ T3224] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1101.503887][T28706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1101.595612][T28707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1101.638464][ T3224] usb 4-1: Using ep0 maxpacket: 32
[ 1101.778364][ T3224] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1101.787508][ T3224] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1101.978832][ T3224] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1101.988188][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.996311][ T3224] usb 4-1: Product: syz
[ 1102.000804][ T3224] usb 4-1: Manufacturer: syz
[ 1102.005535][ T3224] usb 4-1: SerialNumber: syz
[ 1102.113549][ T3224] cdc_ncm 4-1:1.0: skipping garbage
03:34:51 executing program 5:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

03:34:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x2})

03:34:51 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x1f, 0xfffffff8, 0x0, 0x0, 0x58, 0x92a, {0x0, 0x0, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, "a3c2bb9f3ad0329c98bc36ba4e65f05429c80ee6c4126a820431eebea6b182f9"}})
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

03:34:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

03:34:51 executing program 2:
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/227, 0xe3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:34:51 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x5)
sendfile(r0, r1, &(0x7f00000000c0), 0x2000000c)
fcntl$addseals(r1, 0x409, 0xb)
fremovexattr(r1, &(0x7f0000000140)=@known='system.posix_acl_access\x00')

03:34:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x2})

[ 1103.207338][ T3224] cdc_ncm 4-1:1.0: bind() failure
[ 1103.259148][ T3224] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1103.277742][ T3224] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1103.320262][ T3224] usbtest: probe of 4-1:1.1 failed with error -71
[ 1103.361644][ T3224] usb 4-1: USB disconnect, device number 54
[ 1103.967286][ T9511] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1104.207076][ T9511] usb 4-1: Using ep0 maxpacket: 32
[ 1104.327189][ T9511] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1104.336087][ T9511] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1104.517345][ T9511] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1104.526550][ T9511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.534820][ T9511] usb 4-1: Product: syz
[ 1104.539208][ T9511] usb 4-1: Manufacturer: syz
[ 1104.543936][ T9511] usb 4-1: SerialNumber: syz
[ 1104.600520][ T9511] cdc_ncm 4-1:1.0: skipping garbage
03:34:53 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000004000000000006241a0000000901810300000000000904010000020d00000904010102020d00000905820200020000000905035a0002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

03:34:53 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x2fc, 0x0, 0x6600, 0x2f47, 0x150, 0x245, 0x234, 0x2e8, 0x2e8, 0x234, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@dev}}, @common=@inet=@socket3={{0x24, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x358)

03:34:53 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:34:53 executing program 4:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3)

03:34:53 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x1f, 0xfffffff8, 0x0, 0x0, 0x58, 0x92a, {0x0, 0x0, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, "a3c2bb9f3ad0329c98bc36ba4e65f05429c80ee6c4126a820431eebea6b182f9"}})
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

03:34:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}]}, 0x38}}, 0x0)

[ 1104.777437][ T9511] cdc_ncm 4-1:1.0: bind() failure
[ 1104.792291][ T9511] cdc_ncm 4-1:1.1: bind() failure
[ 1104.889838][ T9511] usb 4-1: USB disconnect, device number 55
03:34:54 executing program 4:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
accept4(r2, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb)
keyctl$update(0x2, r4, &(0x7f0000000400)='E', 0x1)
keyctl$set_timeout(0xf, r4, 0x800)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x14)
mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

03:34:54 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x2fc, 0x0, 0x6600, 0x2f47, 0x150, 0x245, 0x234, 0x2e8, 0x2e8, 0x234, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@dev}}, @common=@inet=@socket3={{0x24, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x358)

[ 1105.558372][ T9511] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1105.807876][ T9511] usb 4-1: Using ep0 maxpacket: 32
[ 1105.928246][ T9511] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1105.937257][ T9511] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
03:34:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e6ffffffffffffff00", @ANYRES32=r4, @ANYBLOB="e2ffffff00000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}}, 0x0)

03:34:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
read(r1, 0x0, 0x0)

03:34:54 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x2fc, 0x0, 0x6600, 0x2f47, 0x150, 0x245, 0x234, 0x2e8, 0x2e8, 0x234, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@dev}}, @common=@inet=@socket3={{0x24, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x358)

03:34:55 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 1106.180762][ T9511] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1106.190137][ T9511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.198453][ T9511] usb 4-1: Product: syz
[ 1106.202753][ T9511] usb 4-1: Manufacturer: syz
[ 1106.207578][ T9511] usb 4-1: SerialNumber: syz
[ 1106.290448][ T9511] cdc_ncm 4-1:1.0: skipping garbage
[ 1106.464967][T28804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1106.494424][T28804] device veth27 entered promiscuous mode
[ 1106.523802][T28810] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1106.572314][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1106.590460][T28804] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1107.360267][ T9511] cdc_ncm 4-1:1.0: bind() failure
[ 1107.410699][ T9511] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1107.437653][ T9511] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1107.468607][ T9511] usbtest: probe of 4-1:1.1 failed with error -71
[ 1107.508537][ T9511] usb 4-1: USB disconnect, device number 56
03:34:56 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000004000000000006241a0000000901810300000000000904010000020d00000904010102020d00000905820200020000000905035a0002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

03:34:56 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:34:56 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x2fc, 0x0, 0x6600, 0x2f47, 0x150, 0x245, 0x234, 0x2e8, 0x2e8, 0x234, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'bond_slave_0\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@dev}}, @common=@inet=@socket3={{0x24, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x358)

03:34:56 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9})

03:34:56 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:34:56 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000400000008000a00", @ANYRES32], 0x28}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:34:57 executing program 1:
setrlimit(0x7, &(0x7f00000000c0))
memfd_create(&(0x7f0000000100)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1s\xeb\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\f7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x9e\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J', 0x0)

[ 1108.345756][T28841] device bridge_slave_0 left promiscuous mode
[ 1108.353150][T28841] bridge0: port 1(bridge_slave_0) entered disabled state
03:34:57 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9})

03:34:57 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x20011, r0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040))

[ 1108.577331][ T9511] usb 4-1: new high-speed USB device number 57 using dummy_hcd
03:34:57 executing program 1:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x2710}}], 0x18)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x0)
truncate(&(0x7f0000000080)='./bus\x00', 0x8b3e)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3)

[ 1108.879068][ T9511] usb 4-1: Using ep0 maxpacket: 32
03:34:57 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x20011, r0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040))

03:34:57 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9})

[ 1109.018686][ T9511] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1109.027764][ T9511] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1109.142069][   T29] audit: type=1804 audit(1597808098.030:70): pid=28852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir646745548/syzkaller.6K1JGX/660/bus" dev="sda1" ino=16339 res=1
[ 1109.228085][ T9511] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1109.237857][ T9511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.246005][ T9511] usb 4-1: Product: syz
[ 1109.250477][ T9511] usb 4-1: Manufacturer: syz
[ 1109.255207][ T9511] usb 4-1: SerialNumber: syz
[ 1109.307316][   T29] audit: type=1804 audit(1597808098.060:71): pid=28852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir646745548/syzkaller.6K1JGX/660/bus" dev="sda1" ino=16339 res=1
[ 1109.331843][   T29] audit: type=1804 audit(1597808098.080:72): pid=28852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir646745548/syzkaller.6K1JGX/660/bus" dev="sda1" ino=16339 res=1
[ 1109.491504][ T9511] cdc_ncm 4-1:1.0: skipping garbage
[ 1110.598527][ T9511] cdc_ncm 4-1:1.0: bind() failure
[ 1110.654610][ T9511] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1110.677477][ T9511] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1110.717449][ T9511] usbtest: probe of 4-1:1.1 failed with error -71
[ 1110.731032][ T9511] usb 4-1: USB disconnect, device number 57
03:35:00 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000004000000000006241a0000000901810300000000000904010000020d00000904010102020d00000905820200020000000905035a0002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

03:35:00 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080))

03:35:00 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9})

03:35:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x20011, r0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040))

03:35:00 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:35:00 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x88, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0)

03:35:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x20011, r0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040))

03:35:00 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080))

03:35:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)

[ 1111.697416][T26238] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1111.957359][T26238] usb 4-1: Using ep0 maxpacket: 32
[ 1112.078988][T26238] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1112.087999][T26238] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
03:35:01 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0xa)
close(r2)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x7ffffffe, 0x0)

03:35:01 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080))

[ 1112.328081][T26238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1112.337607][T26238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.345731][T26238] usb 4-1: Product: syz
[ 1112.350201][T26238] usb 4-1: Manufacturer: syz
[ 1112.354933][T26238] usb 4-1: SerialNumber: syz
[ 1112.553337][T26238] cdc_ncm 4-1:1.0: skipping garbage
[ 1113.584338][T28923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1113.650455][T26238] cdc_ncm 4-1:1.0: bind() failure
[ 1113.678275][T26238] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1113.698028][T26238] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1113.731113][T26238] usbtest: probe of 4-1:1.1 failed with error -71
[ 1113.790732][T26238] usb 4-1: USB disconnect, device number 58
03:35:03 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:03 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:03 executing program 0:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB="252e6a975da3670c385760f04c36bdf9a0fbed8cadf4536cd24c3a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0)

03:35:03 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080))

03:35:03 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

[ 1114.451009][T28942] kAFS: unable to lookup cell '.j—]£g8W`ðL6½ù û팭ôSlÒL'
03:35:03 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0xffffffff})

03:35:03 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000001c0)=""/100, 0xcf)
lseek(r0, 0x4, 0x1)
getdents64(r0, &(0x7f0000000280)=""/66, 0x42)

03:35:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @empty}, @in={0x2, 0x4e21, @remote}], 0x2c)

03:35:03 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

03:35:03 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000005000000", 0x58}], 0x1)

03:35:04 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140)="15", 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10)

03:35:04 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
r0 = gettid()
tkill(r0, 0x3c)

03:35:04 executing program 3:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
r1 = socket(0x200040000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x271a, 0x0, &(0x7f0000000000))

03:35:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x42b, 0x0, 0x0, {{}, {}, {0x2}}}, 0x2c}}, 0x0)

03:35:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)

03:35:05 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0xfffffffffffffefc, 0x0, 0x0})

[ 1116.462236][T28983] binder: 28980:28983 ioctl c0306201 20000500 returned -14
[ 1117.338711][T29000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1117.360479][T29000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1117.370864][T29000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:35:06 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x80045113, &(0x7f0000a07fff))

03:35:06 executing program 2:
socket(0x8000000024, 0x0, 0x0)

03:35:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

03:35:06 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)

03:35:06 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0xfffffffffffffefc, 0x0, 0x0})

03:35:06 executing program 1:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

03:35:06 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0xfffffffffffffefc, 0x0, 0x0})

[ 1117.693255][T29006] binder: 29004:29006 ioctl c0306201 20000500 returned -14
03:35:06 executing program 2:
r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300), 0x0, 0xfffeffff, 0x0, 0x0, 0x0})

03:35:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

[ 1118.009994][ T3224] usb 5-1: new high-speed USB device number 41 using dummy_hcd
03:35:06 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0xfffffffffffffefc, 0x0, 0x0})

03:35:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

[ 1118.056938][T29017] binder: 29016:29017 ioctl c0306201 20000500 returned -14
[ 1118.257207][T29023] binder: 29021:29023 ioctl c0306201 20000500 returned -14
[ 1118.257654][ T3224] usb 5-1: Using ep0 maxpacket: 16
03:35:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

[ 1118.400442][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1118.411653][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1118.422206][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1118.435356][ T3224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1118.444719][ T3224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.696226][ T3224] usb 5-1: config 0 descriptor??
[ 1119.077985][ T3224] usbhid 5-1:0.0: can't add hid device: -71
[ 1119.084433][ T3224] usbhid: probe of 5-1:0.0 failed with error -71
[ 1119.143419][ T3224] usb 5-1: USB disconnect, device number 41
03:35:08 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x14, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8)

03:35:08 executing program 2:
unshare(0x2000400)
r0 = socket$inet(0x2, 0x6, 0x0)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

03:35:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

[ 1119.667818][ T3224] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1119.916990][ T3224] usb 5-1: Using ep0 maxpacket: 16
[ 1120.037411][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1120.048571][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1120.058771][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1120.071828][ T3224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1120.081126][ T3224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.110086][ T3224] usb 5-1: config 0 descriptor??
[ 1120.582068][ T3224] pyra 0003:1E7D:2C24.0022: unknown main item tag 0x0
[ 1120.589264][ T3224] pyra 0003:1E7D:2C24.0022: unknown main item tag 0x0
[ 1120.596296][ T3224] pyra 0003:1E7D:2C24.0022: unknown main item tag 0x0
[ 1120.603532][ T3224] pyra 0003:1E7D:2C24.0022: unknown main item tag 0x0
[ 1120.610652][ T3224] pyra 0003:1E7D:2C24.0022: unknown main item tag 0x0
[ 1120.688865][ T3224] pyra 0003:1E7D:2C24.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0
[ 1120.832811][ T3224] usb 5-1: USB disconnect, device number 42
[ 1121.627039][ T3224] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1121.898078][ T3224] usb 5-1: Using ep0 maxpacket: 16
[ 1122.037811][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1122.048940][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1122.058984][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1122.072104][ T3224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1122.081640][ T3224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.093097][ T3224] usb 5-1: config 0 descriptor??
03:35:11 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)

03:35:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

03:35:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xff}]}}}]}, 0x40}}, 0x0)

03:35:11 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

03:35:11 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)=0xd641)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000040))

03:35:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

[ 1122.318132][ T3224] usbhid 5-1:0.0: can't add hid device: -71
[ 1122.324570][ T3224] usbhid: probe of 5-1:0.0 failed with error -71
[ 1122.421523][ T3224] usb 5-1: USB disconnect, device number 43
03:35:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

03:35:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x81000000}}]}]}]}, 0x3c}}, 0x0)

03:35:11 executing program 2:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x2a4)
read(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1123.137821][ T3224] usb 5-1: new high-speed USB device number 44 using dummy_hcd
03:35:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x20000000000003, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

[ 1123.397375][ T3224] usb 5-1: Using ep0 maxpacket: 16
03:35:12 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2ea, 0x0, "03008694e3bf3017"})
read(r1, &(0x7f00000000c0)=""/19, 0x200000c8)

03:35:12 executing program 3:
r0 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r0, 0x0, 0xc9, 0x0, 0x0)

[ 1123.531688][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1123.542896][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1123.553307][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1123.566400][ T3224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1123.575720][ T3224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.661952][T29117] device lo entered promiscuous mode
[ 1123.893114][ T3224] usb 5-1: config 0 descriptor??
[ 1123.947460][T29116] device lo left promiscuous mode
[ 1123.971957][T29117] device lo entered promiscuous mode
[ 1124.099319][T29116] device lo left promiscuous mode
[ 1124.258327][ T3224] usbhid 5-1:0.0: can't add hid device: -71
[ 1124.264768][ T3224] usbhid: probe of 5-1:0.0 failed with error -71
[ 1124.321258][ T3224] usb 5-1: USB disconnect, device number 44
[ 1124.787091][ T3224] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1125.036943][ T3224] usb 5-1: Using ep0 maxpacket: 16
[ 1125.157284][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1125.168389][ T3224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1125.179509][ T3224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1125.192821][ T3224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1125.202195][ T3224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.219586][ T3224] usb 5-1: config 0 descriptor??
[ 1125.702161][ T3224] pyra 0003:1E7D:2C24.0023: unknown main item tag 0x0
[ 1125.709343][ T3224] pyra 0003:1E7D:2C24.0023: unknown main item tag 0x0
[ 1125.716380][ T3224] pyra 0003:1E7D:2C24.0023: unknown main item tag 0x0
[ 1125.723620][ T3224] pyra 0003:1E7D:2C24.0023: unknown main item tag 0x0
[ 1125.730804][ T3224] pyra 0003:1E7D:2C24.0023: unknown main item tag 0x0
[ 1125.797336][ T3224] pyra 0003:1E7D:2C24.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0
[ 1125.948527][ T3224] usb 5-1: USB disconnect, device number 45
03:35:15 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)

03:35:15 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x689}}}}}}, 0x0)

03:35:15 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

03:35:15 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getpriority(0x0, 0x0)

03:35:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x20000000000003, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

03:35:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x41a0ae8d, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x0, 0x0, 0xc0010015]})

[ 1126.623534][T29171] device lo entered promiscuous mode
[ 1126.653319][   T29] audit: type=1800 audit(1597808115.540:73): pid=29172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16377 res=0
[ 1126.915589][T29167] device lo left promiscuous mode
03:35:15 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x3)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[], 0x14}}, 0x0)
sigaltstack(&(0x7f0000f6c000/0x1000)=nil, &(0x7f0000000180))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000e2d000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10)

03:35:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x20000000000003, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

[ 1127.426328][   T29] audit: type=1800 audit(1597808116.310:74): pid=29177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16377 res=0
[ 1127.460342][T26046] usb 5-1: new high-speed USB device number 46 using dummy_hcd
03:35:16 executing program 0:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000001080)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
exit(0x0)

03:35:16 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

[ 1127.718142][T26046] usb 5-1: Using ep0 maxpacket: 16
[ 1127.724148][T29196] device lo entered promiscuous mode
03:35:16 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

[ 1127.837956][T26046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1127.849698][T26046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1127.859789][T26046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1127.872890][T26046] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1127.882170][T26046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.969327][T26046] usb 5-1: config 0 descriptor??
[ 1128.037595][T29194] device lo left promiscuous mode
03:35:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x20000000000003, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

[ 1128.297437][T26046] usbhid 5-1:0.0: can't add hid device: -71
[ 1128.303919][T26046] usbhid: probe of 5-1:0.0 failed with error -71
[ 1128.309976][   T29] audit: type=1800 audit(1597808117.190:75): pid=29214 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0
[ 1128.387917][T26046] usb 5-1: USB disconnect, device number 46
[ 1128.584292][   T29] audit: type=1800 audit(1597808117.470:76): pid=29224 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16371 res=0
[ 1128.937062][T26046] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1129.112183][T29229] device lo entered promiscuous mode
[ 1129.197529][T26046] usb 5-1: Using ep0 maxpacket: 16
[ 1129.255179][T29227] device lo left promiscuous mode
[ 1129.318335][T26046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.329809][T26046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.341146][T26046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1129.354226][T26046] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1129.363494][T26046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.381858][T26046] usb 5-1: config 0 descriptor??
[ 1129.872341][T26046] pyra 0003:1E7D:2C24.0024: unknown main item tag 0x0
[ 1129.879934][T26046] pyra 0003:1E7D:2C24.0024: unknown main item tag 0x0
[ 1129.888214][T26046] pyra 0003:1E7D:2C24.0024: unknown main item tag 0x0
[ 1129.895326][T26046] pyra 0003:1E7D:2C24.0024: unknown main item tag 0x0
[ 1129.902504][T26046] pyra 0003:1E7D:2C24.0024: unknown main item tag 0x0
[ 1129.914828][T26046] pyra 0003:1E7D:2C24.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0
[ 1130.098171][ T3224] usb 5-1: USB disconnect, device number 47
03:35:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)

03:35:19 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

03:35:19 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

03:35:19 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0), 0x8)

03:35:19 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

03:35:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000002200)=0x30)

[ 1130.796131][T29260] ERROR: Domain '<kernel> /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined.
[ 1130.827068][   T29] audit: type=1800 audit(1597808119.710:77): pid=29261 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16361 res=0
[ 1130.982590][   T29] audit: type=1800 audit(1597808119.770:78): pid=29262 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16360 res=0
03:35:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000002200)=0x30)

03:35:20 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

03:35:20 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

03:35:20 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x24050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)

03:35:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000002200)=0x30)

[ 1131.877390][T26238] usb 5-1: new high-speed USB device number 48 using dummy_hcd
03:35:20 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

[ 1132.107968][   T29] audit: type=1800 audit(1597808120.990:79): pid=29280 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15812 res=0
[ 1132.168510][T26238] usb 5-1: Using ep0 maxpacket: 16
[ 1132.254163][   T29] audit: type=1800 audit(1597808121.140:80): pid=29283 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15875 res=0
[ 1132.368496][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1132.379905][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1132.389998][T26238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1132.403112][T26238] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1132.412692][T26238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.818365][T26238] usb 5-1: config 0 descriptor??
[ 1133.194164][T26238] usbhid 5-1:0.0: can't add hid device: -71
[ 1133.200673][T26238] usbhid: probe of 5-1:0.0 failed with error -71
[ 1133.284394][T26238] usb 5-1: USB disconnect, device number 48
[ 1133.767086][T26238] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1134.007086][T26238] usb 5-1: Using ep0 maxpacket: 16
[ 1134.157407][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1134.168544][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1134.178601][T26238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1134.191676][T26238] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40
[ 1134.201058][T26238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1134.218643][T26238] usb 5-1: config 0 descriptor??
03:35:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

03:35:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000002200)=0x30)

03:35:23 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x23, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)

03:35:23 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

03:35:23 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)='-', 0x1}], 0x1)

03:35:23 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0xd}, 0x40)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00'})
bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0xfffffddc, &(0x7f0000000080)}, 0x18e)

[ 1134.607830][T26238] usbhid 5-1:0.0: can't add hid device: -71
[ 1134.614267][T26238] usbhid: probe of 5-1:0.0 failed with error -71
[ 1134.717569][T26238] usb 5-1: USB disconnect, device number 49
[ 1134.721724][T29318] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:23 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)

03:35:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0)

03:35:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x9}, @multicast1, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

03:35:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x39, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

03:35:24 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4092, 0x1c74}], 0x300}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:35:24 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp,port=0x'])

03:35:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)

03:35:24 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000440)={0x1, &(0x7f0000000c00)=[{0x6}]}, 0x8)

03:35:24 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp,port=0x'])

[ 1135.863575][T29344] 9pnet: p9_fd_create_tcp (29344): problem connecting socket to 127.0.0.1
[ 1135.888672][T29346] 9pnet: p9_fd_create_tcp (29346): problem connecting socket to 127.0.0.1
03:35:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x39, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

[ 1136.062175][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1136.080382][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1136.088528][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1136.255065][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1136.273248][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1136.281324][T29350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1136.593544][T29356] 9pnet: p9_fd_create_tcp (29356): problem connecting socket to 127.0.0.1
03:35:25 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x801}, 0x14}}, 0x0)

03:35:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x39, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

03:35:25 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4092, 0x1c74}], 0x300}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:35:25 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp,port=0x'])

03:35:25 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0)
mlock(&(0x7f0000005000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000003000/0x3000)=nil, 0x3002)

03:35:25 executing program 0:
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x2}]}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xac14140a}}}}}}, 0x0)

03:35:26 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp,port=0x'])

[ 1137.195726][T29373] 9pnet: p9_fd_create_tcp (29373): problem connecting socket to 127.0.0.1
03:35:26 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x39, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

03:35:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000200)=@framed={{0x2b, 0x8}, [@call={0x85, 0x0, 0x3b00}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:35:26 executing program 2:
mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x0, 0x400000000005e831, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

03:35:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

[ 1137.623500][T29382] 9pnet: p9_fd_create_tcp (29382): problem connecting socket to 127.0.0.1
03:35:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, &(0x7f0000000000), 0x299)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:35:27 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "090011", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0)

03:35:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)

03:35:27 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000340)="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", 0xfc)

03:35:27 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4092, 0x1c74}], 0x300}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:35:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f00000002c0)=""/386, 0x182)
prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0)
r1 = gettid()
poll(0x0, 0x0, 0xffffffffffbffff8)
tkill(r1, 0xb)

03:35:27 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0xb8}}, 0x0)

03:35:27 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)={0x3, "b9ae76"}, 0x4)

03:35:27 executing program 4:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f77657200001c0002000600080088a800000600170000000000060019"], 0x4c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

03:35:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

03:35:27 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
shutdown(r0, 0x1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="ae4a56b3b0022cc93b60059e06755476cb57c8e19ebf7e5effc0a5314330e27c0f5fb9bc407a9175", 0x28}], 0x1}}], 0x1, 0x0)

[ 1139.205916][T29419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1139.333791][T29419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:35:28 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4092, 0x1c74}], 0x300}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

03:35:28 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000280)="1b7e350bcae86881e69dddd20d7aeb8656f50910812db5b792ee384485a0461ef33769d2df43163f6d9bfdbb822e543500497a48c87c9d2b4d92ce2d98ee3bfeb2705696b1c33fbdc3dae19c899ebb0fe3025e07ea93bb705bb078d28db2d3b79dfcdd12c8a8f5519a14a63d63f1e92a9a4e06f01de8477d76542ce535ee4d", 0x7f}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x80000000000002, 0x0)
sendto$inet6(r2, &(0x7f0000000240)="109535192793d3423d43ce9b7283bcd7c9b2c4b154cbe4cb4c3408c3aa8a1e9a7dfd6d432649045f6df301", 0xfe02, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x31)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4)
splice(r0, 0x0, r2, 0x0, 0x2000003a, 0x0)

03:35:29 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, @none}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0)

03:35:29 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f00000002c0)=""/386, 0x182)
prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0)
r1 = gettid()
poll(0x0, 0x0, 0xffffffffffbffff8)
tkill(r1, 0xb)

03:35:29 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)

03:35:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x1c}}, 0x0)

03:35:29 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0)

03:35:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0c3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x8, 0x4}]}}}}}}}}, 0x0)

03:35:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22)

03:35:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b2a, &(0x7f0000000040))

03:35:29 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x8d, 0xf7, 0x4b, 0x40, 0x8ca, 0x24, 0xfe34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x4c, 0x2b}}]}}]}}, 0x0)

[ 1141.255845][T29471] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22)

03:35:30 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000012001fff0400268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00110076786c614e00000004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

03:35:30 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @broadcast=[0x0], @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "cac53a", 0x10, 0x3c, 0x0, @private0, @mcast2, {[@dstopts={0x0, 0x1, [], [@jumbo, @padn]}]}}}}}, 0x0)

[ 1141.707624][T26046] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1141.863706][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1141.873320][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1141.939885][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1141.949459][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1142.241011][T26046] usb 4-1: New USB device found, idVendor=08ca, idProduct=0024, bcdDevice=fe.34
[ 1142.250443][T26046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.259055][T26046] usb 4-1: Product: syz
[ 1142.263361][T26046] usb 4-1: Manufacturer: syz
[ 1142.268269][T26046] usb 4-1: SerialNumber: syz
[ 1142.303627][T26046] usb 4-1: config 0 descriptor??
[ 1142.354739][T26046] aiptek 4-1:0.0: interface has 0 endpoints, but must have minimum 1
[ 1142.363561][T26046] aiptek: probe of 4-1:0.0 failed with error -22
[ 1142.555465][T26046] usb 4-1: USB disconnect, device number 59
03:35:31 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b70000000100000007000000f80400009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x86)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)

03:35:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f00000002c0)=""/386, 0x182)
prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0)
r1 = gettid()
poll(0x0, 0x0, 0xffffffffffbffff8)
tkill(r1, 0xb)

03:35:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22)

03:35:31 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2, 0x0}}, 0x1c)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

03:35:31 executing program 0:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
listen(r0, 0x100000000009)
listen(r0, 0x0)
listen(r0, 0x1)

03:35:31 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0)

03:35:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22)

03:35:32 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242b09880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28)

[ 1143.327351][T26046] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1143.350494][T29520] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[ 1143.400531][T29520] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[ 1143.849123][T26046] usb 4-1: New USB device found, idVendor=08ca, idProduct=0024, bcdDevice=fe.34
[ 1143.858516][T26046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.866628][T26046] usb 4-1: Product: syz
[ 1143.871469][T26046] usb 4-1: Manufacturer: syz
[ 1143.876268][T26046] usb 4-1: SerialNumber: syz
[ 1143.937194][T26046] usb 4-1: config 0 descriptor??
[ 1143.988204][T26046] aiptek 4-1:0.0: interface has 0 endpoints, but must have minimum 1
[ 1143.997164][T26046] aiptek: probe of 4-1:0.0 failed with error -22
[ 1144.188049][ T3224] usb 4-1: USB disconnect, device number 60
03:35:33 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x8d, 0xf7, 0x4b, 0x40, 0x8ca, 0x24, 0xfe34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x4c, 0x2b}}]}}]}}, 0x0)

03:35:33 executing program 0:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce0", 0x7a, r0)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

03:35:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:35:33 executing program 1:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140))
read(r0, &(0x7f0000000200)=""/250, 0xfffffe8a)

[ 1144.717134][ T3224] usb 4-1: new high-speed USB device number 61 using dummy_hcd
03:35:33 executing program 5:
socket$inet(0x2b, 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x23c, 0x14, 0x101, 0x0, 0x0, "", [@nested={0x22b, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @generic="024f6edd634d74146a1ac0ef53a90aa9c74de12324fdbcf1d2a7cfa50191d97e8ae00b750aaf7de8072aef7eba42cddf169d50b4baab78dd29cb083589329182eabfccaa471c567f03b6430272997a20e90edb157f35ad7a77d27af767cb762c0962b221f8a1d154df88e59a06673d591d89fff4e3329d27734e849c39e2ac734c23e019bba140b6f786ba614d4ff13c050d7a7e17352c5fa99dfa39a6f6926ce720dc6a08b66d7a49e16122bfb4ab09d7ef66a906f1be94815eff4ed0ef9e97ffaf3089818e96bdd766a730d3", @generic="ca9ebfb9638b7380e066839d6cca299ac34021f187e7a8b7ee6c29ee4bc785b37f7d492c1eb6c644547f05f0d5d4a5a5f55c71fbb06af70603f854461f6511176d2b2c4ac601df44fb3cc71b4e8651cff251dbbb168feecbae5a295d153318fb2c0026177cfb311bdfd58641ad4bb3e5da219947f0e50fddcac9440c9a7d3f8415079d1db3843fddb3a7496b7bebf810f55d7d0f0ea1d4c84c0f166c52e36d247441810be507739ebc2eacba00935f378b35416dfc33acd955ae0c73ed3441e00e5cf2051dcbcd2567bb5b", @generic="560d1ac397b7c5ef484c721edc75fcf6e017473414d23aee33d4740954f04c09685b736357e73d45f93f88178bca3b345bf310e795931a916b8335a3317a7b802445048e23329fc70b19afdf4ae36ca1f94e238c6f4a680982a94fdf284ac7d7e4a031ddbe4587abe130e0b0cebfea0fbad94b", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x23c}], 0x1}, 0x0)

03:35:33 executing program 0:
clock_adjtime(0x0, &(0x7f00000002c0))

03:35:33 executing program 4:
unshare(0x2c020400)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:35:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f00000002c0)=""/386, 0x182)
prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0)
r1 = gettid()
poll(0x0, 0x0, 0xffffffffffbffff8)
tkill(r1, 0xb)

03:35:34 executing program 4:
unshare(0x2c020400)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1145.248080][ T3224] usb 4-1: New USB device found, idVendor=08ca, idProduct=0024, bcdDevice=fe.34
[ 1145.257783][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.265918][ T3224] usb 4-1: Product: syz
[ 1145.270415][ T3224] usb 4-1: Manufacturer: syz
[ 1145.275152][ T3224] usb 4-1: SerialNumber: syz
03:35:34 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x3, 0xffff}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x492f}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00')
sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:35:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x7)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000000)=0x8)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf000000, 0x40000, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0920, 0x3, [], @value=0x9}})
dup(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)=0x700)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
r3 = dup(r2)
getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[ 1145.437404][ T3224] usb 4-1: config 0 descriptor??
[ 1145.484875][ T3224] aiptek 4-1:0.0: interface has 0 endpoints, but must have minimum 1
[ 1145.493789][ T3224] aiptek: probe of 4-1:0.0 failed with error -22
[ 1145.698991][T29569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1145.762900][ T9512] usb 4-1: USB disconnect, device number 61
[ 1145.826299][T29569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
03:35:35 executing program 4:
unshare(0x2c020400)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:35:35 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x8d, 0xf7, 0x4b, 0x40, 0x8ca, 0x24, 0xfe34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x4c, 0x2b}}]}}]}}, 0x0)

03:35:35 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
lseek(r0, 0x1, 0x4)

03:35:35 executing program 4:
unshare(0x2c020400)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:35:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
ioctl$TCFLSH(r0, 0x540b, 0x1)

[ 1147.280628][ T9512] usb 4-1: new high-speed USB device number 62 using dummy_hcd
03:35:36 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket(0x1e, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0xa0000004})
epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)

03:35:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4188aea7, &(0x7f0000000000))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0)

03:35:36 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008)

03:35:36 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$tun(r1, 0x0, 0x4a)
r2 = socket$unix(0x1, 0x5, 0x0)
splice(r0, 0x0, r2, 0x0, 0x7ffffffd, 0x0)

03:35:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x7)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000000)=0x8)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf000000, 0x40000, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0920, 0x3, [], @value=0x9}})
dup(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)=0x700)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
r3 = dup(r2)
getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[ 1147.811292][ T9512] usb 4-1: New USB device found, idVendor=08ca, idProduct=0024, bcdDevice=fe.34
[ 1147.820809][ T9512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.829206][ T9512] usb 4-1: Product: syz
[ 1147.833500][ T9512] usb 4-1: Manufacturer: syz
[ 1147.838335][ T9512] usb 4-1: SerialNumber: syz
[ 1148.085956][ T9512] usb 4-1: config 0 descriptor??
[ 1148.202857][ T9512] aiptek 4-1:0.0: interface has 0 endpoints, but must have minimum 1
[ 1148.211713][ T9512] aiptek: probe of 4-1:0.0 failed with error -22
03:35:37 executing program 4:
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
read$usbfs(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x208, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1f2, 0x80, "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"}]}, 0x208}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)

[ 1148.512746][ T9512] usb 4-1: USB disconnect, device number 62
03:35:37 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'})

03:35:37 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008)

03:35:37 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x8d, 0xf7, 0x4b, 0x40, 0x8ca, 0x24, 0xfe34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x4c, 0x2b}}]}}]}}, 0x0)

03:35:37 executing program 4:
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
read$usbfs(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x208, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1f2, 0x80, "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"}]}, 0x208}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)

03:35:38 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'})

03:35:38 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008)

[ 1149.687214][T26231] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1150.279445][T26231] usb 4-1: New USB device found, idVendor=08ca, idProduct=0024, bcdDevice=fe.34
[ 1150.288747][T26231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.297152][T26231] usb 4-1: Product: syz
[ 1150.301445][T26231] usb 4-1: Manufacturer: syz
[ 1150.306167][T26231] usb 4-1: SerialNumber: syz
[ 1150.343160][T26231] usb 4-1: config 0 descriptor??
03:35:39 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000000000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0)

03:35:39 executing program 4:
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
read$usbfs(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x208, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1f2, 0x80, "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"}]}, 0x208}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)

03:35:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'})

03:35:39 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008)

03:35:39 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x7)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000000)=0x8)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf000000, 0x40000, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0920, 0x3, [], @value=0x9}})
dup(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)=0x700)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
r3 = dup(r2)
getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[ 1150.404057][T26231] aiptek 4-1:0.0: interface has 0 endpoints, but must have minimum 1
[ 1150.412842][T26231] aiptek: probe of 4-1:0.0 failed with error -22
[ 1150.716282][T26231] usb 4-1: USB disconnect, device number 63
03:35:39 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
sysfs$2(0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)

03:35:40 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'})

03:35:40 executing program 4:
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
read$usbfs(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x208, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1f2, 0x80, "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"}]}, 0x208}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)

[ 1151.435053][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x7)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000000)=0x8)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf000000, 0x40000, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0920, 0x3, [], @value=0x9}})
dup(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)=0x700)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
r3 = dup(r2)
getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:35:40 executing program 0:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xfd, 0x0, &(0x7f0000000080))

03:35:41 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:35:41 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
clone(0x68022980, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1152.541178][T29718] IPVS: ftp: loaded support on port[0] = 21
[ 1152.805451][T29718] IPVS: ftp: loaded support on port[0] = 21
[ 1152.825074][T25648] tipc: TX() has been purged, node left!
03:35:42 executing program 5:
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r0 = getpgid(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x13, &(0x7f0000000240))

03:35:42 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
sysfs$2(0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)

03:35:42 executing program 0:
unshare(0x20000400)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0xfe74, {0x2, 0x0, @local}}, 0x24)

03:35:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, 'macvtap0\x00'})

03:35:42 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x4)
pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0)

03:35:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073014b00000000009500000000000000a86fd191c2137edf1176df08a7311c127b7a2202d04563c7412a1426671cc46a7c37227bd5b8f7c7ccac64c34b8cf403b7be3d59bca5ff6c13ff3f183111b3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)

[ 1153.676216][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:42 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

03:35:42 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5336, &(0x7f0000000180)={0x0, @time})

03:35:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:35:42 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
sysfs$2(0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)

03:35:43 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5336, &(0x7f0000000180)={0x0, @time})

[ 1154.604339][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:44 executing program 3:
unshare(0x8000400)
mq_open(&(0x7f0000000040)='.selinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)

03:35:44 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:35:44 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

03:35:44 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
sysfs$2(0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)

03:35:44 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5336, &(0x7f0000000180)={0x0, @time})

03:35:44 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0205710, 0x0)

[ 1156.141861][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:35:45 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

03:35:45 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5336, &(0x7f0000000180)={0x0, @time})

03:35:45 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:35:45 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x8919)

03:35:45 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x3, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x8a26, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:35:45 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x8919)

03:35:45 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

03:35:45 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)='\x00\x02\x17\xc7I')

03:35:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:35:46 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x3, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x8a26, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:35:46 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x8919)

03:35:47 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0205710, 0x0)

03:35:47 executing program 4:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0)

03:35:47 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f00000042c0)='./file0\x00', 0x2941, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1}}, 0x28)

03:35:47 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x11)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x28, 0x29, 0x2, "fe8000"/17}], 0x28}, 0x0)

03:35:47 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x8919)

03:35:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x3, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x8a26, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:35:47 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1, 'w'}], 0x10}}], 0x1, 0x0)

03:35:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0)

03:35:47 executing program 3:
unshare(0x400)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect(r0, &(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80)

03:35:47 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @mcast1}, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @remote}], 0x55)

03:35:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x3, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x8a26, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:35:48 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4}, [@call]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfa}, 0x48)

03:35:48 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0205710, 0x0)

03:35:48 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44850)
sendfile(r0, r1, 0x0, 0x1ffe00)
sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0xf0ff7f}, {&(0x7f0000000340)='V', 0x1}], 0x2}, 0x0)

03:35:48 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:48 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

03:35:48 executing program 4:
r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

03:35:48 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:35:49 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
io_setup(0x7, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
shutdown(r0, 0x0)

03:35:49 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/237, 0xed}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000016c0)=""/135, 0x87}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

03:35:49 executing program 0:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffffffffffb5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6de, 0xf08b}, 0x14)
splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0)

03:35:49 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x18, 0x1, 0x2, {r3}}}], 0x18}, 0x0)

03:35:49 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:49 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:50 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0205710, 0x0)

03:35:50 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1}, 0x10)
write(r0, &(0x7f0000000080)="240000004a005f0214f9f407000904000a00000000000000000000000800020000000000", 0x24)

03:35:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_PARAMS={0x9}]}, 0x30}}, 0x0)

03:35:50 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:50 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:50 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18)

03:35:51 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780))
epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)

03:35:51 executing program 4:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r2}, &(0x7f0000000100)=""/35, 0x23, &(0x7f0000000180)={&(0x7f0000000140)={'rmd320-generic\x00'}})

03:35:51 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:51 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
dup3(r1, r0, 0x0)

03:35:51 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300001cfeffff7a0af0fff8ffffff61a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

03:35:52 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
write$cgroup_int(r0, &(0x7f0000000000)=0x100000000000000, 0x12)

03:35:53 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x24, 0xc59, 0xc}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)="05184f8d1d90c9b6ae3d51d70d8888c25cce5ca1f1bbaf64f7a74185d288201b72603a1603", &(0x7f00000000c0), 0x1081, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, r0}, 0x4d)

03:35:53 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0xee00, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r3)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setgid(r5)

03:35:53 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff)

03:35:53 executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0xda, 0xd1, 0x40, 0x403, 0xbca4, 0x1b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0xe7, 0x7a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

03:35:53 executing program 3:
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="000000000000000003737c00000700000008"], 0x1c}}, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="240000004a005f0014f9f407000909000a0080", 0x13)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1164.803061][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
03:35:53 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x3f)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

[ 1165.040766][T21908] usb 1-1: new high-speed USB device number 49 using dummy_hcd
03:35:54 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)

[ 1165.448561][T21908] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
[ 1165.458799][T21908] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1165.688121][T21908] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=1b.91
[ 1165.697377][T21908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1165.705453][T21908] usb 1-1: Product: syz
[ 1165.710413][T21908] usb 1-1: Manufacturer: syz
[ 1165.715090][T21908] usb 1-1: SerialNumber: syz
[ 1165.830013][T21908] usb 1-1: config 0 descriptor??
[ 1165.873050][T21908] usb 1-1: Ignoring serial port reserved for JTAG
[ 1166.078250][T21908] usb 1-1: USB disconnect, device number 49
[ 1166.877081][T21908] usb 1-1: new high-speed USB device number 50 using dummy_hcd
03:35:56 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000400)='\x00\x00\x00\x01\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95j=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\x91\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')

03:35:56 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2}, 0x10)

03:35:56 executing program 3:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)

03:35:56 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:35:56 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000003c0))
lseek(r1, 0x1000000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8001)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4040090)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00')
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getitimer(0x1, &(0x7f00000000c0))
getpid()
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
uselib(&(0x7f0000000180)='./bus\x00')

[ 1167.277681][T21908] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
[ 1167.287946][T21908] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1167.494354][T21908] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=1b.91
[ 1167.503625][T21908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.511966][T21908] usb 1-1: Product: syz
[ 1167.516217][T21908] usb 1-1: Manufacturer: syz
[ 1167.521005][T21908] usb 1-1: SerialNumber: syz
[ 1167.546053][T21908] usb 1-1: config 0 descriptor??
[ 1167.574789][   T29] audit: type=1804 audit(1597808156.460:81): pid=30073 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir769019117/syzkaller.vIRuTH/266/bus" dev="sda1" ino=16381 res=1
03:35:56 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)

[ 1167.680641][T30073] IPVS: ftp: loaded support on port[0] = 21
[ 1167.746590][T21908] usb 1-1: Ignoring serial port reserved for JTAG
03:35:56 executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0xda, 0xd1, 0x40, 0x403, 0xbca4, 0x1b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0xe7, 0x7a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

[ 1167.831999][T21908] usb 1-1: USB disconnect, device number 50
03:35:56 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="cc050000130001fffffffffffff000000200000a01000000a30a010300000000810216000900010073797a31000000001c030000160a0102000000000000000005000006ec00038008000140000000000c00054000000000000004059800038068000380140001007465616d5f736c6176655f3000000000140001006970365f767469300000000000000000140001006970365f767469300000000000000000140001007866726d30000000000000000000d8b1194f7f687c488125801296610000140001006e657464657673696d3005fd000000000b000380140001007663616e300000000000000000006c6f000000000000000000000000000000d0010380080002400000000340000380140001006c6f000000000000001400010062737461647630000000000000000000140001006d6163766c616e3100000000000000000800014000000000a4000001007369743000000000000000000000000014000100766c616e300000000000000000000000140001006970766c616e31000000000000000000140001007866726d30000000000000000001000014000100626f6e645f736c6176655f31000000001400010076657468315f746f5f626f6e64000000140001006c6f000000000000000000000000000014000100726f736530000000000000b92f0845a5cba5f2407fffffff08000240000000042c0003801400010073797a5f74756e000000000000000000140001007665746831000000000000000000000040000380140001006d61637609006e3000000000000000001400010076657468300000000000000000000000140001006d6963766c616e300080000000008ea44dda57e2aeec8bdcad3351a2000008000240000000025400038014000100626f6e643000000000000000001400010076657468315f746f5f6272696467650014"], 0x5cc}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:35:57 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)

[ 1168.280077][T30099] netlink: 704 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1168.293490][T30099] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1168.305081][T30099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:35:57 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000})

[ 1168.487169][ T3224] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1168.524011][T30099] netlink: 704 bytes leftover after parsing attributes in process `syz-executor.4'.
03:35:57 executing program 3:
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1168.533830][T30099] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1168.545744][T30099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:35:57 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xac}}, 0x0)

03:35:57 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000480)="b9", 0x1)
splice(r0, 0x0, r3, 0x0, 0x80008001, 0x6)

03:35:57 executing program 3:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f0000000100)="314d0ed7", 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8)

[ 1168.903818][ T3224] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
[ 1168.914138][ T3224] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1169.007598][   T29] audit: type=1804 audit(1597808157.890:82): pid=30102 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir769019117/syzkaller.vIRuTH/266/bus" dev="sda1" ino=16381 res=1
03:35:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0xfffffffd, 0xa4)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)

03:35:58 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000151300000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="880000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00000d0001006d61746368616c6c0000000054000200500002004c000100090001006373756d00000000200002"], 0x88}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0)

[ 1169.188036][ T3224] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=1b.91
[ 1169.197882][ T3224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.206030][ T3224] usb 1-1: Product: syz
[ 1169.210405][ T3224] usb 1-1: Manufacturer: syz
[ 1169.215083][ T3224] usb 1-1: SerialNumber: syz
[ 1169.345058][ T3224] usb 1-1: config 0 descriptor??
[ 1169.395965][ T3224] usb 1-1: Ignoring serial port reserved for JTAG
[ 1169.611265][ T3224] usb 1-1: USB disconnect, device number 51
[ 1169.646438][T30129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.735843][T30138] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.746051][T30138] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.833310][T30074] IPVS: ftp: loaded support on port[0] = 21
[ 1169.885656][T30138] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.895359][T30138] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1169.920341][T30129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1170.365678][ T8905] tipc: TX() has been purged, node left!
03:35:59 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000003c0))
lseek(r1, 0x1000000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8001)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4040090)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00')
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getitimer(0x1, &(0x7f00000000c0))
getpid()
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
uselib(&(0x7f0000000180)='./bus\x00')

03:35:59 executing program 4:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df0200000000e80001dd0000040d000d00ea11", 0x22}], 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

03:35:59 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe42)

03:35:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)

03:35:59 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="96", 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

03:35:59 executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0xda, 0xd1, 0x40, 0x403, 0xbca4, 0x1b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0xe7, 0x7a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

[ 1171.166061][T30176] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[ 1171.174513][T30176] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.4'.
03:36:00 executing program 1:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000200007021dfffd946f610500810000e8fe0208010001080008000e000400ff7e", 0x24}], 0x1}, 0x0)

03:36:00 executing program 2:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)={[{@xino_off='xino=off'}], [], 0x22})

[ 1171.370512][T26231] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1171.768222][T26231] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
[ 1171.778403][T26231] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1171.903641][T30188] overlayfs: unrecognized mount option """ or missing value
03:36:00 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0001110409f50084fbffa05d900000ff000000000000394405ff09dfa7ffffff45fdf7ffff060000010426771e"]})

[ 1171.963673][T30192] overlayfs: unrecognized mount option """ or missing value
03:36:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c000038000280050009000400000014000300fe"], 0x70}}, 0x0)

[ 1172.041713][T26231] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=1b.91
[ 1172.051089][T26231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.059329][T26231] usb 1-1: Product: syz
[ 1172.063571][T26231] usb 1-1: Manufacturer: syz
[ 1172.068315][T26231] usb 1-1: SerialNumber: syz
[ 1172.146388][T26231] usb 1-1: config 0 descriptor??
03:36:01 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x7, 0x0)

03:36:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x4})

[ 1172.212479][T26231] usb 1-1: Ignoring serial port reserved for JTAG
[ 1172.475969][T26231] usb 1-1: USB disconnect, device number 52
[ 1172.524767][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1172.534417][T30202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1173.594167][   T29] audit: type=1804 audit(1597808162.480:83): pid=30229 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir769019117/syzkaller.vIRuTH/267/bus" dev="sda1" ino=16088 res=1
[ 1173.685157][T30227] IPVS: ftp: loaded support on port[0] = 21
03:36:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000003c0))
lseek(r1, 0x1000000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8001)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4040090)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00')
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getitimer(0x1, &(0x7f00000000c0))
getpid()
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
uselib(&(0x7f0000000180)='./bus\x00')

03:36:03 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendto$phonet(r0, 0x0, 0xfffffddb, 0x0, 0x0, 0x0)

03:36:03 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000016c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

03:36:03 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047452, 0x0)

03:36:03 executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0xda, 0xd1, 0x40, 0x403, 0xbca4, 0x1b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0xe7, 0x7a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

03:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x7, 0x0)

03:36:03 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x7, 0x0)

03:36:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x3, 0xd37}]}, 0x60}}, 0x0)

03:36:03 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

[ 1174.567110][ T9512] usb 1-1: new high-speed USB device number 53 using dummy_hcd
03:36:03 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x28, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, 0xa4}}, 0x0)

[ 1174.960502][ T9512] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
[ 1174.971184][ T9512] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
03:36:04 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc004240a, 0x0)

[ 1175.178777][ T9512] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=1b.91
[ 1175.188323][ T9512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.196392][ T9512] usb 1-1: Product: syz
[ 1175.201474][ T9512] usb 1-1: Manufacturer: syz
[ 1175.206161][ T9512] usb 1-1: SerialNumber: syz
03:36:04 executing program 3:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x7, 0x0)

[ 1175.411372][ T9512] usb 1-1: config 0 descriptor??
[ 1175.452917][ T9512] usb 1-1: Ignoring serial port reserved for JTAG
[ 1175.710135][T26238] usb 1-1: USB disconnect, device number 53
[ 1176.201550][   T29] audit: type=1804 audit(1597808165.090:84): pid=30302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir769019117/syzkaller.vIRuTH/268/bus" dev="sda1" ino=16057 res=1
[ 1176.300704][T30302] IPVS: ftp: loaded support on port[0] = 21
03:36:05 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000003c0))
lseek(r1, 0x1000000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8001)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4040090)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00')
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getitimer(0x1, &(0x7f00000000c0))
getpid()
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
uselib(&(0x7f0000000180)='./bus\x00')

03:36:05 executing program 2:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x9, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x2208c084)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000a80)={0x990000, 0x1514, 0x7f, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x990a7e, 0x0, [], @p_u16=0x0}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000002c0)=0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x3, 0x0)

03:36:05 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

03:36:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0)

03:36:05 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000))

03:36:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000080000001000000006609000000000000000033c4587476fff0b600000000092a221ce47549bc00000000000a000000000000000019b1179268"])
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1177.226383][T30340] IPVS: ftp: loaded support on port[0] = 21
03:36:06 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

03:36:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0)

03:36:06 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = dup(r0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)

[ 1177.803777][T30343] IPVS: ftp: loaded support on port[0] = 21
03:36:07 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x7}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001680), 0x4)

03:36:07 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

03:36:07 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = dup(r0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)

[ 1178.439299][T25648] tipc: TX() has been purged, node left!
[ 1178.757680][   T29] audit: type=1804 audit(1597808167.640:85): pid=30409 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir769019117/syzkaller.vIRuTH/269/bus" dev="sda1" ino=16124 res=1
[ 1178.928999][T30409] IPVS: ftp: loaded support on port[0] = 21
03:36:08 executing program 2:
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca)
recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000005c0)=@l2, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/201}], 0x0, &(0x7f0000000740)=""/83}}, {{&(0x7f00000007c0)=@alg, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/221}, {&(0x7f0000000940)=""/130}]}}], 0x1, 0x2040, 0x0)

03:36:08 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

03:36:08 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{0x0, 0x5d}], 0x1}, 0x0)

03:36:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

03:36:08 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = dup(r0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)

03:36:08 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = dup(r0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)

03:36:08 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{0x0, 0x5d}], 0x1}, 0x0)

03:36:09 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00')
chroot(&(0x7f0000000000)='./file0/../file0/file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

03:36:09 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

03:36:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x401)

03:36:09 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x20000000005, 0x4)
sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@ipx={0x4, 0x0, 0x0, "c5726baca52a"}, 0x80, 0x0}}], 0x2, 0x0)

03:36:09 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

03:36:09 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{0x0, 0x5d}], 0x1}, 0x0)

03:36:09 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{}, 0xfe, 0x0, 0x0, 0x0, "9de95e0a08442e2ccb462bded3768ef2085a27fa58a687fe0ce6839c2d0c636f3883f020ecfd098f192c49462cb73828d65e906bedd30c8997745e919863386c"}, 0x10}}, 0x0)

03:36:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1181.435086][T30469] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1181.533306][T30475] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:36:10 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{0x0, 0x5d}], 0x1}, 0x0)

03:36:10 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1820}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080))
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x18})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60024}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x18, r5})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60024}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0)

03:36:10 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8475010000c9c8dc1964325fa96fa42b76044d564b2bec0ba41f0100003a40c8a4810000403b00041f00050000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})

[ 1182.294835][T30483] device bond0 entered promiscuous mode
[ 1182.300519][T30483] device bond_slave_0 entered promiscuous mode
[ 1182.307510][T30483] device bond_slave_1 entered promiscuous mode
[ 1182.316110][T30483] 8021q: adding VLAN 0 to HW filter on device macvlan2
03:36:11 executing program 4:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000033c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

03:36:11 executing program 1:
syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@umask={'umask', 0x3d, 0x8cffffff}}]})

03:36:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 1182.680569][T30483] device bond0 left promiscuous mode
[ 1182.686061][T30483] device bond_slave_0 left promiscuous mode
[ 1182.693223][T30483] device bond_slave_1 left promiscuous mode
03:36:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x5a23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

03:36:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0)

03:36:11 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = epoll_create1(0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

[ 1183.231495][T30501] device bond0 entered promiscuous mode
[ 1183.237206][T30501] device bond_slave_0 entered promiscuous mode
[ 1183.244044][T30501] device bond_slave_1 entered promiscuous mode
[ 1183.252890][T30501] 8021q: adding VLAN 0 to HW filter on device macvlan2
03:36:12 executing program 3:
prctl$PR_SET_SECUREBITS(0x1c, 0xf)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x0)

[ 1183.436656][T30501] device bond0 left promiscuous mode
[ 1183.442366][T30501] device bond_slave_0 left promiscuous mode
[ 1183.449218][T30501] device bond_slave_1 left promiscuous mode
[ 1183.798119][T30513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:12 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x0, [], 0x8})

03:36:12 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001c0000000000", 0x24)

[ 1184.112733][T30514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSERIAL(r0, 0x540d, 0x0)

03:36:13 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[], 0x30)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0xa808)

03:36:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0)

[ 1184.567781][T30532] netlink: 'syz-executor.3': attribute type 28 has an invalid length.
[ 1184.612967][T30534] netlink: 'syz-executor.3': attribute type 28 has an invalid length.
03:36:13 executing program 3:
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080))
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0))
ptrace(0x10, r1)
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040))
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0})

03:36:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSERIAL(r0, 0x540d, 0x0)

03:36:13 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 1184.966021][T30542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:14 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000000)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x5}]}, 0x18}}, 0x0)

03:36:14 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan1\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x744, 0x4)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e51102591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

03:36:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSERIAL(r0, 0x540d, 0x0)

03:36:14 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:36:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0)

03:36:14 executing program 3:
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080))
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0))
ptrace(0x10, r1)
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040))
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0})

[ 1185.812964][T30561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:14 executing program 4:
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

03:36:15 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:36:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSERIAL(r0, 0x540d, 0x0)

03:36:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xc8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000003b00)="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", 0x1bd}], 0x1)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], []]}, 0x358)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

03:36:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0)

03:36:15 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 1186.954938][T30593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r5], 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x2d, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

03:36:16 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000200)={0x8000000, 0x0, 0x0, @stepwise})

03:36:16 executing program 3:
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080))
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0))
ptrace(0x10, r1)
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040))
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0})

03:36:16 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x20400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

03:36:16 executing program 1:
r0 = socket(0x80000000000000a, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14)

03:36:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0)

[ 1188.076309][T30615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:36:17 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000200)={0x8000000, 0x0, 0x0, @stepwise})

03:36:17 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

03:36:17 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000200)={0x8000000, 0x0, 0x0, @stepwise})

[ 1188.775827][T30631] sctp: [Deprecated]: syz-executor.4 (pid 30631) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1188.775827][T30631] Use struct sctp_sack_info instead
03:36:17 executing program 3:
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080))
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0))
ptrace(0x10, r1)
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040))
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0})

03:36:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x20400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

03:36:18 executing program 1:
r0 = socket(0x80000000000000a, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14)

[ 1189.221759][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1189.432218][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1189.523175][T30663] sctp: [Deprecated]: syz-executor.4 (pid 30663) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1189.523175][T30663] Use struct sctp_sack_info instead
03:36:18 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

03:36:18 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000200)={0x8000000, 0x0, 0x0, @stepwise})

03:36:18 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

[ 1189.931345][T30668] sctp: [Deprecated]: syz-executor.4 (pid 30668) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1189.931345][T30668] Use struct sctp_sack_info instead
03:36:18 executing program 0:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::]:00:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)

03:36:19 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1190.382161][T26231] libceph: connect (1)[d::]:6789 error -101
[ 1190.388430][T26231] libceph: mon0 (1)[d::]:6789 connect error
03:36:19 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x20400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

03:36:19 executing program 1:
r0 = socket(0x80000000000000a, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14)

[ 1190.423937][T30672] ceph: No mds server is up or the cluster is laggy
03:36:19 executing program 0:
syz_emit_ethernet(0x26, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0)

03:36:19 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="4801000024001d0f000000000000000000001300", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff0000000008000100726564001c0102001400010000000000000000000000000000000000040102"], 0x148}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0)

03:36:19 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

03:36:20 executing program 0:
syz_emit_ethernet(0x9f, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x69, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80302"}, {0x0, 0x1, "000000000000000000fac6"}, {}]}}}}}}, 0x0)

[ 1191.116569][T30695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1191.178717][T30701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
03:36:20 executing program 3:
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9b268c", 0x18, 0x0, 0x0, @remote, @dev, {[@dstopts={0x0, 0x1, [], [@calipso={0x7, 0x8}]}]}}}}}, 0x0)

[ 1191.380739][T30704] sctp: [Deprecated]: syz-executor.4 (pid 30704) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1191.380739][T30704] Use struct sctp_sack_info instead
[ 1191.994084][T30713] sctp: [Deprecated]: syz-executor.5 (pid 30713) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1191.994084][T30713] Use struct sctp_sack_info instead
03:36:21 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

03:36:21 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100fe24ffff000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00030005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae450f5566f91cf190201ded81503000000bdb2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583080000000000000046a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a87000000000000", 0xfc)

03:36:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x8}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "f9456f97867d62a3"}, 0x3}}]}, 0x34}}, 0x0)

03:36:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x20400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

03:36:21 executing program 1:
r0 = socket(0x80000000000000a, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14)

03:36:21 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

[ 1192.995118][T30728] sctp: [Deprecated]: syz-executor.4 (pid 30728) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1192.995118][T30728] Use struct sctp_sack_info instead
03:36:21 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0)

03:36:22 executing program 3:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x1000000010, 0x80002, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c02e0f0178000f309a0900000065002e41ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f0138360f06ed", 0x3c}], 0x6, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1193.295920][T30731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1193.381751][T30731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
03:36:22 executing program 0:
io_setup(0x5, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x6, &(0x7f00000000c0)=<r2=>0x0)
r3 = eventfd(0x0)
readv(r3, &(0x7f0000000600)=[{&(0x7f0000001b40)=""/4078, 0xfee}], 0x1)
io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

[ 1193.718792][T30744] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
03:36:22 executing program 1:
r0 = socket$nl_xfrm(0x11, 0x3, 0x6)
socket$nl_xfrm(0x11, 0x3, 0x6)
r1 = socket(0x10, 0x80002, 0x0)
dup2(r1, r0)

03:36:23 executing program 3:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)
fcntl$setownex(r2, 0xf, &(0x7f0000000080))
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

03:36:23 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6)
sendfile(r1, r0, 0x0, 0x1c01)

[ 1194.433579][   T29] audit: type=1800 audit(1597808183.320:86): pid=30761 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15778 res=0
[ 1194.682367][   T29] audit: type=1800 audit(1597808183.570:87): pid=30761 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15778 res=0
[ 1195.146022][T30775] sctp: [Deprecated]: syz-executor.5 (pid 30775) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1195.146022][T30775] Use struct sctp_sack_info instead
03:36:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)

03:36:24 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x6000000})

03:36:24 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x65}, [@call={0xf}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)

03:36:24 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_settings={0x9, 0x8, @te1=0x0}})
ioctl$sock_netdev_private(r0, 0x8b26, &(0x7f0000000000))

03:36:24 executing program 3:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)
fcntl$setownex(r2, 0xf, &(0x7f0000000080))
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

03:36:24 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6)
sendfile(r1, r0, 0x0, 0x1c01)

[ 1196.021648][T30781] EXT4-fs warning (device sda1): ext4_group_add:1659: No reserved GDT blocks, can't resize
[ 1196.053268][   T29] audit: type=1800 audit(1597808184.940:88): pid=30784 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16218 res=0
03:36:25 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x6000000})

03:36:25 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_settings={0x9, 0x8, @te1=0x0}})
ioctl$sock_netdev_private(r0, 0x8b26, &(0x7f0000000000))

03:36:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6)
sendfile(r1, r0, 0x0, 0x1c01)

03:36:25 executing program 3:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)
fcntl$setownex(r2, 0xf, &(0x7f0000000080))
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

03:36:25 executing program 4:
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCMGET(r0, 0x5417, 0x0)

[ 1196.662436][T30793] EXT4-fs warning (device sda1): ext4_group_add:1659: No reserved GDT blocks, can't resize
[ 1196.841983][   T29] audit: type=1800 audit(1597808185.730:89): pid=30798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16214 res=0
03:36:25 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_settings={0x9, 0x8, @te1=0x0}})
ioctl$sock_netdev_private(r0, 0x8b26, &(0x7f0000000000))

[ 1197.683335][T30810] sctp: [Deprecated]: syz-executor.5 (pid 30810) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1197.683335][T30810] Use struct sctp_sack_info instead
03:36:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6)
sendfile(r1, r0, 0x0, 0x1c01)

03:36:27 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x6000000})

03:36:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0)

03:36:27 executing program 3:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)
fcntl$setownex(r2, 0xf, &(0x7f0000000080))
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffa)

03:36:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_settings={0x9, 0x8, @te1=0x0}})
ioctl$sock_netdev_private(r0, 0x8b26, &(0x7f0000000000))

03:36:27 executing program 5:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3804, &(0x7f0000000240))

[ 1198.614264][T30819] EXT4-fs warning (device sda1): ext4_group_add:1659: No reserved GDT blocks, can't resize
[ 1198.691357][   T29] audit: type=1800 audit(1597808187.580:90): pid=30823 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16232 res=0
03:36:27 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r0, 0x409, 0x12)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r0, 0x0)

03:36:27 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x6000000})

03:36:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0x5}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0)

03:36:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=unix,'})

03:36:28 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff5c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x200000040, 0x0)

[ 1199.309357][T30829] EXT4-fs warning (device sda1): ext4_group_add:1659: No reserved GDT blocks, can't resize
03:36:28 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r0, 0x409, 0x12)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r0, 0x0)

[ 1199.428417][T30833] 9pnet: p9_fd_create_unix (30833): problem connecting socket: éq‰Y’3aK: -111
03:36:28 executing program 0:
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x83ce, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x90, 0x8}, 0x380d, 0x6, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x19)
getpid()
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0)
keyctl$setperm(0x5, r1, 0x202002)
keyctl$assume_authority(0x10, r1)
personality(0x100005)
fchdir(r0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100101, 0x0, @perf_bp={0x0, 0x2}, 0x4f000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x33e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
semctl$GETVAL(0x0, 0x2, 0xc, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x4c00, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 1199.468862][T30835] 9pnet: p9_fd_create_unix (30835): problem connecting socket: éq‰Y’3aK: -111
03:36:28 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
close(r0)

03:36:28 executing program 1:
unshare(0x2a000400)
r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240f00, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r0}, 0x14)

03:36:28 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r0, 0x409, 0x12)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r0, 0x0)

03:36:29 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
close(r0)

03:36:29 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xfec00}], 0x30, 0x0, 0x0)

03:36:29 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xa, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x3b}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)

03:36:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0)

03:36:29 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r0, 0x409, 0x12)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r0, 0x0)

03:36:29 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
close(r0)

03:36:29 executing program 3:
r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

03:36:30 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
close(r0)

03:36:30 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:36:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

03:36:30 executing program 3:
r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

03:36:30 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:30 executing program 4:
open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x2000100000015, &(0x7f0000000040), 0x4)

03:36:31 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xfec00}], 0x30, 0x0, 0x0)

03:36:31 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x178)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$alg(0x26, 0x5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, 0x0)

03:36:31 executing program 3:
r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

03:36:31 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x800, 0x4)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0)

03:36:31 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)

03:36:31 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

[ 1202.870788][T30921] mmap: syz-executor.0 (30921) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
03:36:31 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)

03:36:31 executing program 3:
r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

03:36:32 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x800, 0x4)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0)

03:36:32 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:32 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:32 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)

[ 1203.765260][T30936] not chained 20000 origins
[ 1203.769849][T30936] CPU: 1 PID: 30936 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0
[ 1203.778531][T30936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1203.788589][T30936] Call Trace:
[ 1203.791923][T30936]  dump_stack+0x21c/0x280
[ 1203.796290][T30936]  kmsan_internal_chain_origin+0x6f/0x130
[ 1203.802034][T30936]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1203.807853][T30936]  ? kmsan_get_metadata+0x116/0x180
[ 1203.813070][T30936]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1203.818896][T30936]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1203.825035][T30936]  ? __wake_up+0x1ff/0x250
[ 1203.829482][T30936]  ? kmsan_get_metadata+0x116/0x180
[ 1203.834695][T30936]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1203.840519][T30936]  ? kmsan_get_metadata+0x116/0x180
[ 1203.845745][T30936]  ? kmsan_set_origin_checked+0x95/0xf0
[ 1203.851313][T30936]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 1203.857430][T30936]  ? _copy_from_user+0x201/0x310
[ 1203.862390][T30936]  ? kmsan_get_metadata+0x116/0x180
[ 1203.867612][T30936]  __msan_chain_origin+0x50/0x90
[ 1203.872580][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1203.877749][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1203.882714][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1203.887295][T30936]  ? kmsan_get_metadata+0x116/0x180
[ 1203.892511][T30936]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1203.898337][T30936]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[ 1203.904503][T30936]  ? get_old_timespec32+0x2ac/0x350
[ 1203.909726][T30936]  __sys_recvmmsg+0x346/0x610
[ 1203.914439][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1203.920557][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1203.926748][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1203.931985][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1203.936861][T30936]  do_SYSENTER_32+0x73/0x90
[ 1203.941391][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1203.947728][T30936] RIP: 0023:0xf7fce549
[ 1203.951789][T30936] Code: Bad RIP value.
[ 1203.955860][T30936] RSP: 002b:00000000f55c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[ 1203.964296][T30936] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002ec0
[ 1203.972273][T30936] RDX: 000000000000029e RSI: 000000000000001a RDI: 00000000200001c0
[ 1203.980266][T30936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1203.988248][T30936] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1203.996224][T30936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1204.004221][T30936] Uninit was stored to memory at:
[ 1204.009276][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.015020][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.019970][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.025087][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.030029][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.034538][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.042177][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.048268][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.054432][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.059654][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.064514][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.069026][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.075342][T30936] 
[ 1204.077666][T30936] Uninit was stored to memory at:
[ 1204.082700][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.088423][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.093375][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.098493][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.103458][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.107973][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.112664][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.118746][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.124922][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.130137][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.134995][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.139526][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.145851][T30936] 
[ 1204.148179][T30936] Uninit was stored to memory at:
[ 1204.153221][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.158958][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.163909][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.169036][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.173982][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.178492][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.183180][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.189275][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.195447][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.200670][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.205534][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.210071][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.216399][T30936] 
[ 1204.218735][T30936] Uninit was stored to memory at:
[ 1204.223777][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.229516][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.234465][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.239599][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.244547][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.249063][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.253760][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.259847][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.266020][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.271237][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.276109][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.280636][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.286960][T30936] 
[ 1204.289286][T30936] Uninit was stored to memory at:
[ 1204.294327][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.300062][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.305013][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.310136][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.315079][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.319599][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.324298][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.330377][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.336536][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.341744][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.346608][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.351121][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.357438][T30936] 
[ 1204.359775][T30936] Uninit was stored to memory at:
[ 1204.364810][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.370554][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.375500][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.380638][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.385584][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.390096][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.394783][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.400860][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.407038][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.412241][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.417098][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.421616][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.427933][T30936] 
[ 1204.430282][T30936] Uninit was stored to memory at:
[ 1204.435316][T30936]  kmsan_internal_chain_origin+0xad/0x130
[ 1204.441040][T30936]  __msan_chain_origin+0x50/0x90
[ 1204.445985][T30936]  __get_compat_msghdr+0x6db/0x9d0
[ 1204.451102][T30936]  get_compat_msghdr+0x108/0x2b0
[ 1204.456047][T30936]  do_recvmmsg+0xdbb/0x22c0
[ 1204.460556][T30936]  __sys_recvmmsg+0x346/0x610
[ 1204.465270][T30936]  __se_compat_sys_recvmmsg_time32+0xfb/0x120
[ 1204.471346][T30936]  __ia32_compat_sys_recvmmsg_time32+0x62/0x80
[ 1204.477524][T30936]  __do_fast_syscall_32+0x2af/0x480
[ 1204.482732][T30936]  do_fast_syscall_32+0x6b/0xd0
[ 1204.487597][T30936]  do_SYSENTER_32+0x73/0x90
[ 1204.492107][T30936]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1204.498424][T30936] 
[ 1204.500751][T30936] Local variable ----msg_sys@do_recvmmsg created at:
[ 1204.507448][T30936]  do_recvmmsg+0xbf/0x22c0
[ 1204.511871][T30936]  do_recvmmsg+0xbf/0x22c0
03:36:34 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xfec00}], 0x30, 0x0, 0x0)

03:36:34 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x800, 0x4)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0)

03:36:34 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)

03:36:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ftruncate(r1, 0x40)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080), 0x4)

03:36:34 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:34 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
exit_group(0x0)
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

03:36:35 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x2}]}}}]}, 0x44}}, 0x0)

03:36:35 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x800, 0x4)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0)

03:36:35 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5)
recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400})

03:36:35 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @local, {[], @echo_request}}}}}, 0x0)

03:36:35 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x330, 0x2f0, 0x0, 0xffffffff, 0x2f0, 0xd0, 0x3e4, 0x3e4, 0xffffffff, 0x3e4, 0x3e4, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @private, @icmp_id, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "4683a98dca8749a3222b90db80bb13d0cd5fd68150bd09186db700e55b07"}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @broadcast, @icmp_id}}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'gre0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @private}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c)

03:36:36 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xfec00}], 0x30, 0x0, 0x0)

03:36:36 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x21, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, 0xe8)

03:36:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000040000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0)

03:36:36 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0)

03:36:36 executing program 3:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f1ff00000a000100626173696300000038000200340002"], 0x68}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:36:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x330, 0x2f0, 0x0, 0xffffffff, 0x2f0, 0xd0, 0x3e4, 0x3e4, 0xffffffff, 0x3e4, 0x3e4, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @private, @icmp_id, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "4683a98dca8749a3222b90db80bb13d0cd5fd68150bd09186db700e55b07"}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @broadcast, @icmp_id}}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'gre0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @private}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c)

[ 1207.575698][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1207.631942][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1207.702944][T31008] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
03:36:36 executing program 1:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000100), &(0x7f0000000000)=0x14)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1207.773994][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
03:36:36 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x579858647cd1cb83}})

03:36:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x330, 0x2f0, 0x0, 0xffffffff, 0x2f0, 0xd0, 0x3e4, 0x3e4, 0xffffffff, 0x3e4, 0x3e4, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @private, @icmp_id, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "4683a98dca8749a3222b90db80bb13d0cd5fd68150bd09186db700e55b07"}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @broadcast, @icmp_id}}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'gre0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @private}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c)

[ 1207.819373][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:36:36 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000240)=""/152, 0x98}], 0x1, &(0x7f0000002680)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000027c0)=""/101, 0x65}], 0x1}}], 0x2, 0x42, 0x0)

03:36:37 executing program 2:
io_setup(0x6, &(0x7f0000000240)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
io_submit(r0, 0x1, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

[ 1208.299906][T31020] schedule_timeout: wrong timeout value fffdd0c26c641895
[ 1208.307781][T31020] CPU: 1 PID: 31020 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0
[ 1208.316515][T31020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1208.326804][T31020] Call Trace:
[ 1208.330201][T31020]  dump_stack+0x21c/0x280
[ 1208.334667][T31020]  schedule_timeout+0x309/0x610
[ 1208.339631][T31020]  ? _raw_spin_unlock_bh+0x4b/0x60
[ 1208.344847][T31020]  ? release_sock+0x26a/0x2d0
[ 1208.349618][T31020]  vsock_stream_connect+0x67f/0x13e0
[ 1208.355009][T31020]  ? init_wait_entry+0x190/0x190
[ 1208.360174][T31020]  ? __vsock_bind+0x1870/0x1870
[ 1208.365144][T31020]  __sys_connect+0x7a3/0x8a0
[ 1208.369843][T31020]  ? put_old_timespec32+0x231/0x2d0
[ 1208.375141][T31020]  ? kmsan_get_metadata+0x116/0x180
[ 1208.380433][T31020]  ? kmsan_get_metadata+0x116/0x180
[ 1208.385724][T31020]  ? kmsan_get_metadata+0x116/0x180
[ 1208.391038][T31020]  __se_sys_connect+0x8d/0xb0
[ 1208.395833][T31020]  __ia32_sys_connect+0x4a/0x70
[ 1208.400783][T31020]  __do_fast_syscall_32+0x2af/0x480
[ 1208.406090][T31020]  do_fast_syscall_32+0x6b/0xd0
[ 1208.411044][T31020]  do_SYSENTER_32+0x73/0x90
[ 1208.415665][T31020]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1208.422060][T31020] RIP: 0023:0xf7fce549
[ 1208.426184][T31020] Code: Bad RIP value.
[ 1208.430315][T31020] RSP: 002b:00000000f55c80cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a
[ 1208.438815][T31020] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040
03:36:37 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x330, 0x2f0, 0x0, 0xffffffff, 0x2f0, 0xd0, 0x3e4, 0x3e4, 0xffffffff, 0x3e4, 0x3e4, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @private, @icmp_id, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "4683a98dca8749a3222b90db80bb13d0cd5fd68150bd09186db700e55b07"}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @broadcast, @icmp_id}}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'gre0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @private}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c)

[ 1208.446851][T31020] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[ 1208.454893][T31020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1208.462929][T31020] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1208.470968][T31020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1208.580846][T31024] schedule_timeout: wrong timeout value fffdd0c26c641895
[ 1208.588240][T31024] CPU: 1 PID: 31024 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0
[ 1208.596975][T31024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1208.607077][T31024] Call Trace:
[ 1208.610479][T31024]  dump_stack+0x21c/0x280
[ 1208.614913][T31024]  schedule_timeout+0x309/0x610
[ 1208.619860][T31024]  ? _raw_spin_unlock_bh+0x4b/0x60
[ 1208.625054][T31024]  ? release_sock+0x26a/0x2d0
[ 1208.629823][T31024]  vsock_stream_connect+0x67f/0x13e0
[ 1208.635227][T31024]  ? init_wait_entry+0x190/0x190
[ 1208.640271][T31024]  ? __vsock_bind+0x1870/0x1870
[ 1208.645217][T31024]  __sys_connect+0x7a3/0x8a0
[ 1208.649907][T31024]  ? put_old_timespec32+0x231/0x2d0
[ 1208.655188][T31024]  ? kmsan_get_metadata+0x116/0x180
[ 1208.660467][T31024]  ? kmsan_get_metadata+0x116/0x180
[ 1208.665750][T31024]  ? kmsan_get_metadata+0x116/0x180
[ 1208.671045][T31024]  __se_sys_connect+0x8d/0xb0
[ 1208.675827][T31024]  __ia32_sys_connect+0x4a/0x70
[ 1208.680789][T31024]  __do_fast_syscall_32+0x2af/0x480
[ 1208.686118][T31024]  do_fast_syscall_32+0x6b/0xd0
[ 1208.691075][T31024]  do_SYSENTER_32+0x73/0x90
[ 1208.695681][T31024]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1208.702068][T31024] RIP: 0023:0xf7fce549
[ 1208.706180][T31024] Code: Bad RIP value.
[ 1208.710297][T31024] RSP: 002b:00000000f55a70cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a
[ 1208.718786][T31024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040
[ 1208.726815][T31024] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[ 1208.734842][T31024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1208.742872][T31024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1208.750901][T31024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:36:38 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
keyctl$get_persistent(0x16, 0x0, 0x0)

03:36:38 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x579858647cd1cb83}})

03:36:38 executing program 1:
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

03:36:38 executing program 4:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_netdev_private(r1, 0x8991, &(0x7f0000000040)="a082bb11b43a")

03:36:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050abb"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000002540)='/dev/input/event#\x00', 0x40, 0x0)

03:36:38 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0, 0x0)
setreuid(0xee00, 0x0)
clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

[ 1209.653326][T31040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:38 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000))

[ 1209.841900][T31058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:36:38 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x579858647cd1cb83}})

03:36:38 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 1210.027360][   T28] usb 3-1: new high-speed USB device number 32 using dummy_hcd
03:36:38 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)

[ 1210.267660][   T28] usb 3-1: Using ep0 maxpacket: 16
[ 1210.388548][   T28] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[ 1210.397160][   T28] usb 3-1: config 0 has no interface number 0
[ 1210.403402][   T28] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1210.414699][   T28] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1210.424821][   T28] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
03:36:39 executing program 4:
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
r2 = socket(0x2, 0x803, 0xff)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r3 = dup(r2)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[ 1210.434122][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:36:39 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x579858647cd1cb83}})

03:36:39 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10)
close(r0)

03:36:39 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)

[ 1210.742629][   T28] usb 3-1: config 0 descriptor??
[ 1210.948244][   T29] audit: type=1804 audit(1597808199.840:91): pid=31073 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir050125763/syzkaller.Iyvv4Z/640/bus" dev="sda1" ino=16309 res=1
[ 1211.006658][T31078] device lo entered promiscuous mode
[ 1211.011017][   T28] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input63
[ 1211.043066][T31078] device lo left promiscuous mode
[ 1211.101532][   T29] audit: type=1804 audit(1597808199.940:92): pid=31081 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir050125763/syzkaller.Iyvv4Z/640/bus" dev="sda1" ino=16309 res=1
[ 1211.111285][T31078] device lo entered promiscuous mode
[ 1211.134295][T31088] device lo left promiscuous mode
[ 1211.211255][   T29] audit: type=1804 audit(1597808200.090:93): pid=31075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir050125763/syzkaller.Iyvv4Z/640/bus" dev="sda1" ino=16309 res=1
[ 1211.236532][   T29] audit: type=1804 audit(1597808200.100:94): pid=31091 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir050125763/syzkaller.Iyvv4Z/640/bus" dev="sda1" ino=16309 res=1
[ 1211.298775][   T28] usb 3-1: USB disconnect, device number 32
03:36:40 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1)
read$usbmon(r0, &(0x7f0000000180)=""/208, 0xd0)

03:36:40 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)

[ 1211.451131][   T28] gtco 3-1:0.219: gtco driver disconnected
[ 1211.689384][T31101] syz-executor.0 (31101): /proc/31100/oom_adj is deprecated, please use /proc/31100/oom_score_adj instead.
[ 1212.077836][   T28] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1212.375080][   T28] usb 3-1: Using ep0 maxpacket: 16
[ 1212.515294][   T28] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[ 1212.523768][   T28] usb 3-1: config 0 has no interface number 0
[ 1212.530335][   T28] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1212.541683][   T28] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1212.551831][   T28] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[ 1212.561109][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1212.592671][   T28] usb 3-1: config 0 descriptor??
03:36:41 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050abb"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000002540)='/dev/input/event#\x00', 0x40, 0x0)

03:36:41 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}})

03:36:41 executing program 3:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x0, 0x2}, 0x8)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:36:41 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

03:36:41 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)

03:36:41 executing program 5:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x0, 0x0)

[ 1212.951289][   T28] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 129
[ 1212.959938][   T28] gtco: probe of 3-1:0.219 failed with error -5
[ 1213.077816][   T28] usb 3-1: USB disconnect, device number 33
03:36:42 executing program 1:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket(0x23, 0x805, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xb0762d817f0000, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0}])

03:36:42 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d0, 0x210, 0x104, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@rand_addr, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vcan0\x00', 'team_slave_0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x41c)

03:36:42 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

03:36:42 executing program 3:
r0 = gettid()
setpriority(0x1, r0, 0x0)

03:36:42 executing program 3:
r0 = inotify_init1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r2, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, <r5=>0x0})
kcmp(r5, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

[ 1213.778134][T21908] usb 3-1: new high-speed USB device number 34 using dummy_hcd
03:36:42 executing program 4:
r0 = socket(0x2b, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)

[ 1214.030657][T21908] usb 3-1: Using ep0 maxpacket: 16
[ 1214.178515][T21908] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[ 1214.187016][T21908] usb 3-1: config 0 has no interface number 0
[ 1214.193291][T21908] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1214.204999][T21908] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1214.215199][T21908] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[ 1214.224543][T21908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.318429][T21908] usb 3-1: config 0 descriptor??
[ 1214.620739][T21908] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input65
[ 1214.843290][ T9512] usb 3-1: USB disconnect, device number 34
[ 1214.907498][ T9512] gtco 3-1:0.219: gtco driver disconnected
03:36:44 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x24}, {0x2d}, {0x6}]})

03:36:44 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r0, 0x402, 0x698b4796e327f9c8)
exit(0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1})

03:36:44 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000000))

03:36:44 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050abb"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000002540)='/dev/input/event#\x00', 0x40, 0x0)

03:36:44 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000100)=0x9, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503c800da053e0001c480a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x1000000, 0x0, 0x40ed)

03:36:44 executing program 3:
syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp864,quota,resize=0xfffffffffffffff7'])

03:36:44 executing program 3:
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002800310f00"/20, @ANYRES32=r2, @ANYBLOB="24003e66000000000000f832"], 0x24}}, 0x0)

03:36:44 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000000))

[ 1215.951041][ T9512] usb 3-1: new high-speed USB device number 35 using dummy_hcd
03:36:44 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000000))

03:36:45 executing program 3:
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, "538fb1245559aba72722e0a6d5800d44"}, 0x18, r0)

[ 1216.126029][   T29] audit: type=1326 audit(1597808205.010:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31177 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fdc549 code=0x0
[ 1216.226033][ T9512] usb 3-1: Using ep0 maxpacket: 16
[ 1216.352581][ T9512] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[ 1216.361027][ T9512] usb 3-1: config 0 has no interface number 0
[ 1216.367516][ T9512] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1216.378950][ T9512] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1216.389127][ T9512] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[ 1216.398418][ T9512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:36:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x3c}}, 0x0)

03:36:45 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000000))

[ 1216.649620][ T9512] usb 3-1: config 0 descriptor??
[ 1216.912993][ T9512] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input66
[ 1216.976297][T31217] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1217.136645][T26231] usb 3-1: USB disconnect, device number 35
[ 1217.229108][T26231] gtco 3-1:0.219: gtco driver disconnected
03:36:46 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050abb"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000002540)='/dev/input/event#\x00', 0x40, 0x0)

03:36:46 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup2(r1, r0)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="f012ed024750303226a2bfce4f5148ee73a6c7756860d302fe0c1be76c1a16895e538412951adad5811fbe1e3da9cd266c2d77f76d68a5053fe7852914afddbb5f596c61a30a604ab796f6aa294eba9c542c311f1b5b", 0x56}], 0x1)

03:36:46 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0)

03:36:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ppoll(&(0x7f0000000080)=[{}, {r0, 0x1}], 0x2, 0x0, 0x0, 0x0)
r1 = dup(r0)
shutdown(r1, 0x0)

03:36:46 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8)

03:36:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)

03:36:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)

03:36:47 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x24c, 0xe0, 0xe0, 0x0, 0xe0, 0x0, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @broadcast, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0x2a02}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, 'caif0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8)

03:36:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10)

03:36:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
read(r1, 0x0, 0x0)

[ 1218.537318][ T9512] usb 3-1: new high-speed USB device number 36 using dummy_hcd
03:36:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)

03:36:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 1218.777413][ T9512] usb 3-1: Using ep0 maxpacket: 16
[ 1218.898882][ T9512] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[ 1218.907422][ T9512] usb 3-1: config 0 has no interface number 0
[ 1218.913701][ T9512] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1218.925001][ T9512] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1218.935208][ T9512] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
[ 1218.944712][ T9512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.171152][ T9512] usb 3-1: config 0 descriptor??
[ 1219.430010][ T9512] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input67
[ 1219.665471][ T9512] usb 3-1: USB disconnect, device number 36
[ 1219.704204][ T9512] gtco 3-1:0.219: gtco driver disconnected
03:36:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10)

03:36:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
read(r1, 0x0, 0x0)

03:36:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)

03:36:49 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

03:36:49 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a3200000000080041000a697700140033"], 0x38}, 0x1, 0xa800}, 0x0)

03:36:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x27)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x27)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r0)

03:36:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
read(r1, 0x0, 0x0)

03:36:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070a00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:36:49 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, 0x0, &(0x7f0000000040)=0x4)

03:36:49 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000000840)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5", 0xffffff4a, 0x20008044, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c)
read$FUSE(r0, &(0x7f0000000e00), 0x1000)

03:36:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10)

03:36:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x32, 0x0, 0x0, {0x0, @sctp_ip4_spec={@broadcast, @multicast1}, {0x0, @remote}, @usr_ip4_spec={@loopback, @remote}, {0x0, @random="5906000000f7"}}}})

[ 1221.222146][T31311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1221.324279][T31319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:36:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
read(r1, 0x0, 0x0)

03:36:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070a00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:36:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10)

03:36:50 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0xa)
bind(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x0, @remote}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0)

[ 1221.940786][T31330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:36:51 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240fffffff9b35374968febcdd516bcffeff402139d81b5"], 0xcc}}, 0x0)

03:36:51 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100007000000060000e400000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a300000000004000480040004800800034000000006"], 0xb8}}, 0x0)

03:36:51 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000080))

03:36:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070a00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:36:51 executing program 0:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0x5, 0x8}]}, 0x30}}, 0x0)

[ 1222.648430][T31347] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1222.736026][T31351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:36:51 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xff, 0x0)

03:36:51 executing program 3:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x2)

03:36:51 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x521}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
umount2(0x0, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

03:36:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070a00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0)

03:36:52 executing program 2:
r0 = openat$full(0xffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x604002, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

[ 1223.916980][T31362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1223.935953][T31362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1223.944115][T31362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1224.024715][T31366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
03:36:52 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x3}, 0x40)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]})
bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0xfffffddc, &(0x7f0000000080)}, 0x18e)

03:36:53 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xff, 0x0)

[ 1224.902188][T31388] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
03:36:53 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000013000))

03:36:53 executing program 3:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004340)=ANY=[], 0x1558)
close(r1)

03:36:53 executing program 4:
r0 = socket(0x1, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3aa82d4f3c6c31a9cce9bf062fbf5800", @ANYRES32=0x0, @ANYBLOB="2500000000000000000000004500001400000000092f"]})

03:36:53 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xa5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:36:53 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xff, 0x0)

03:36:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x521}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
umount2(0x0, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

03:36:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x8}]}}}]}, 0x3c}}, 0x0)

03:36:54 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xff, 0x0)

03:36:54 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xa5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:36:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc}}]}, 0x54}}, 0x0)

[ 1225.809118][T31400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1225.978740][T31400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1225.987282][T31400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1226.185580][T31405] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
03:36:55 executing program 4:
unshare(0x400)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

03:36:55 executing program 3:
rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000240))

03:36:56 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000000040), 0x14123f2dc6a8be1, 0x0)

03:36:56 executing program 1:
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000fb5ffc)='afs\x00', 0x0, &(0x7f0000000240)='\x17\x86\x16T\xdd\xa4Ga\x1c:\xc5T\xe7\x1e&R\xa33\xebm\xd5\x032\xd4\xb5u\xa7&\xcf\x0f\x92y\xb3\x89\xaf\x9b\xec7\x03\x1a\xb3\x93_\xe2\xf4q\x809\xa6qa\xe6(}\n\x03\xc0Q\xf2\x04&\x7fC\x95\xc4z\x01TK\xe1\x0e\x8fD\x956V\xb5\xd4%\xc2G`\xceR\xb5\xd9\x8es\xf9\xf7%\xa4\xb0\xdc_{\x0f\xe7\"\x7f[\xfa4)\xe4\x9a\xbel\xb4\xa7I\xf8T\x96\xb2cw\xe6b\n\x80<\xecZ\xdb\xb0 \x94\xd77\xf5\xaf\x14\xb5$O\x92<.o_\xef\xed\xe0\xd5\x06\x8f\xcc\xf0\xc6\xab\x8c]&\x06\x90W\xf3c\x9d\xd1N\x8fp\xf3\xcd\xbf\x05\x8f\xd5\xbd\xbd\xed\xc86\xf4\xfbL.\xb8\xc0\x95z\xb7\x9c\xb7\xffk\x13,v:\x0f\xc4\xc7\xd0(\xb20\xe8\xe5\xc9\xaa\xc2\x1dL6\x9e\x81\xa9\x13\x87kb\xd59\xc7c\x1b\x97,\x10\x00'/237)

03:36:56 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xa5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:36:56 executing program 4:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000580)='asymmetric\x00', 0x0, &(0x7f0000000080)="3082", 0x71, r0)

03:36:56 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="4800000014010000010000000000000000000000000000000000000000000000000000000000000000263c1b4c"], 0x48}, 0x0)

03:36:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x521}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
umount2(0x0, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

03:36:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0)='batadv\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r1, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

03:36:56 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1227.562064][T31432] afs: Unknown parameter '†TݤGa:ÅTç&R£3ëmÕ2Ôµu§&Ï’y³‰¯›ì7³“_âôq€9¦qaæ(}
[ 1227.562064][T31432] ÀQò&C•Äz
TKá�D•6VµÔ%ÂG`ÎRµÙŽsù÷%¤°Ü_{ç"[ú4)äš¾l´§IøT–²cwæb
[ 1227.562064][T31432] €<ìZÛ° ”×7õ¯µ$O’<.o_ïíàÕ�ÌðÆ«Œ]&�Wóc�ÑN�póÍ¿�Õ½½íÈ6ôûL.¸À•z·œ·ÿk'
[ 1227.657828][T31434] afs: Unknown parameter '†TݤGa:ÅTç&R£3ëmÕ2Ôµu§&Ï’y³‰¯›ì7³“_âôq€9¦qaæ(}
[ 1227.657828][T31434] ÀQò&C•Äz
TKá�D•6VµÔ%ÂG`ÎRµÙŽsù÷%¤°Ü_{ç"[ú4)äš¾l´§IøT–²cwæb
[ 1227.657828][T31434] €<ìZÛ° ”×7õ¯µ$O’<.o_ïíàÕ�ÌðÆ«Œ]&�Wóc�ÑN�póÍ¿�Õ½½íÈ6ôûL.¸À•z·œ·ÿk'
03:36:56 executing program 1:
perf_event_open(&(0x7f0000000300)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0898, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa2, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1227.771663][T31433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1227.967843][T31433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1227.988298][T31433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:36:57 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xa5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:36:57 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x2c, 0xb5, 0x8, 0x6cd, 0x101, 0x179b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x62, 0x99, 0x39}}]}}]}}, 0x0)

03:36:57 executing program 4:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x5, 0x0, 0x0, "020000010865390405030500000000010900", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a73b8268129e5fa4316a5d8c69"}}}}}}}, 0x0)

[ 1229.183135][T26231] usb 4-1: new high-speed USB device number 64 using dummy_hcd
03:36:58 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mknod(&(0x7f00000001c0)='./bus/file1\x00', 0xf4fd82361b7216c1, 0x0)

03:36:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x3c}}, 0x0)

03:36:58 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="101bb29ab231c28ff9c12f9ca297a38274deb731070d71106b02eb6d4eefd9c3488c28dbec296836265e8395050721d57e0a54dc5e218e710382690f59eefd949a0a1f01f30a90ce7584c3ad", 0x4c}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="1b072d561dea5bcaddc3c70d210a07755c185d858f0e38aec41816849282f581f7518b44ad00a72f5b820a6c9f1d0feffbf62cfb49a013faeeaead0c760b07789e745b50", 0x44}, {&(0x7f0000000300)="d3648fa65b8ab8bf2a793eaf229cfb03f321a116772add7c041d214f33532c1d103f742d5fa34478a1058dedc41f3499564f218ae56d4a5c66c2b9f6314c01b4bfe8709d6d0fecaf052abaec0486861ef3cc0847f41bd60a90f290d824bc0991f0a2aaa8d608b7c0c3ef6c22ffb98695aca089aea051cacce00c022d8d872515df25826ec30a4a4e3afe6a03362419194c153b653dfb724742e1796c093fa7641c7dbfe4ba27c8ad19f5759b7388c7c619b82d97a964f5daad1729b2ba2a143fe4b100f33efc5f385f5fcda2df87df79548b0c5f69a5c58c7c5413", 0xdb}, {&(0x7f0000000400)="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", 0xb6c}, {&(0x7f0000001400)="3196e7bb88931ea923194e80e0d2d3e0ae409fef65781d0e902d966975ee9d1b70a7c8cf02a4bd7c00ac44f968b25a44ea513a3649c7e6a8a862807741ced40ca798077089cb300a5c5679896ef23b1fd10f6b1a6f36071c2495d36a2eab6c220a0037ced90f0a9133371f5a5eb9258bb8e7d4ec2866d205fdf9701aac6ef7f9a403934f6223147a01ef9279fba393ec01293ad4803453d53dbaed5f2a8e98c43c46d7654d7e00e57276274fba3bd6", 0xaf}], 0x6, 0x0, 0x0)

03:36:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x521}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
umount2(0x0, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

03:36:58 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x45, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000140)="03042a015c0060004003002cfff5", 0xe, 0x0, 0x0, 0x0)

[ 1229.447359][T26231] usb 4-1: Using ep0 maxpacket: 8
[ 1229.575671][T31468] qrtr: Invalid version 16
[ 1229.591239][T26231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=17.9b
[ 1229.600634][T26231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.801479][T26231] usb 4-1: config 0 descriptor??
[ 1229.945344][T26231] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected
[ 1229.984163][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1230.238354][T26231] usb 4-1: USB disconnect, device number 64
[ 1230.242293][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1230.245738][T26231] keyspan 4-1:0.0: device disconnected
[ 1230.263201][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:36:59 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="101bb29ab231c28ff9c12f9ca297a38274deb731070d71106b02eb6d4eefd9c3488c28dbec296836265e8395050721d57e0a54dc5e218e710382690f59eefd949a0a1f01f30a90ce7584c3ad", 0x4c}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="1b072d561dea5bcaddc3c70d210a07755c185d858f0e38aec41816849282f581f7518b44ad00a72f5b820a6c9f1d0feffbf62cfb49a013faeeaead0c760b07789e745b50", 0x44}, {&(0x7f0000000300)="d3648fa65b8ab8bf2a793eaf229cfb03f321a116772add7c041d214f33532c1d103f742d5fa34478a1058dedc41f3499564f218ae56d4a5c66c2b9f6314c01b4bfe8709d6d0fecaf052abaec0486861ef3cc0847f41bd60a90f290d824bc0991f0a2aaa8d608b7c0c3ef6c22ffb98695aca089aea051cacce00c022d8d872515df25826ec30a4a4e3afe6a03362419194c153b653dfb724742e1796c093fa7641c7dbfe4ba27c8ad19f5759b7388c7c619b82d97a964f5daad1729b2ba2a143fe4b100f33efc5f385f5fcda2df87df79548b0c5f69a5c58c7c5413", 0xdb}, {&(0x7f0000000400)="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", 0xb6c}, {&(0x7f0000001400)="3196e7bb88931ea923194e80e0d2d3e0ae409fef65781d0e902d966975ee9d1b70a7c8cf02a4bd7c00ac44f968b25a44ea513a3649c7e6a8a862807741ced40ca798077089cb300a5c5679896ef23b1fd10f6b1a6f36071c2495d36a2eab6c220a0037ced90f0a9133371f5a5eb9258bb8e7d4ec2866d205fdf9701aac6ef7f9a403934f6223147a01ef9279fba393ec01293ad4803453d53dbaed5f2a8e98c43c46d7654d7e00e57276274fba3bd6", 0xaf}], 0x6, 0x0, 0x0)

03:36:59 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
ftruncate(r2, 0x40)
ftruncate(r1, 0x40)
getsockopt$bt_hci(r0, 0x29, 0x18, 0x0, &(0x7f0000000200))

03:36:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:36:59 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="101bb29ab231c28ff9c12f9ca297a38274deb731070d71106b02eb6d4eefd9c3488c28dbec296836265e8395050721d57e0a54dc5e218e710382690f59eefd949a0a1f01f30a90ce7584c3ad", 0x4c}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="1b072d561dea5bcaddc3c70d210a07755c185d858f0e38aec41816849282f581f7518b44ad00a72f5b820a6c9f1d0feffbf62cfb49a013faeeaead0c760b07789e745b50", 0x44}, {&(0x7f0000000300)="d3648fa65b8ab8bf2a793eaf229cfb03f321a116772add7c041d214f33532c1d103f742d5fa34478a1058dedc41f3499564f218ae56d4a5c66c2b9f6314c01b4bfe8709d6d0fecaf052abaec0486861ef3cc0847f41bd60a90f290d824bc0991f0a2aaa8d608b7c0c3ef6c22ffb98695aca089aea051cacce00c022d8d872515df25826ec30a4a4e3afe6a03362419194c153b653dfb724742e1796c093fa7641c7dbfe4ba27c8ad19f5759b7388c7c619b82d97a964f5daad1729b2ba2a143fe4b100f33efc5f385f5fcda2df87df79548b0c5f69a5c58c7c5413", 0xdb}, {&(0x7f0000000400)="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", 0xb6c}, {&(0x7f0000001400)="3196e7bb88931ea923194e80e0d2d3e0ae409fef65781d0e902d966975ee9d1b70a7c8cf02a4bd7c00ac44f968b25a44ea513a3649c7e6a8a862807741ced40ca798077089cb300a5c5679896ef23b1fd10f6b1a6f36071c2495d36a2eab6c220a0037ced90f0a9133371f5a5eb9258bb8e7d4ec2866d205fdf9701aac6ef7f9a403934f6223147a01ef9279fba393ec01293ad4803453d53dbaed5f2a8e98c43c46d7654d7e00e57276274fba3bd6", 0xaf}], 0x6, 0x0, 0x0)

[ 1231.028017][T26231] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1231.267714][T31497] qrtr: Invalid version 16
[ 1231.276505][T31491] pit: kvm: requested 108952 ns i8254 timer period limited to 200000 ns
[ 1231.286225][T26231] usb 4-1: Using ep0 maxpacket: 8
[ 1231.418571][T26231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=17.9b
[ 1231.428043][T26231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.471433][T31491] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns
03:37:00 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="101bb29ab231c28ff9c12f9ca297a38274deb731070d71106b02eb6d4eefd9c3488c28dbec296836265e8395050721d57e0a54dc5e218e710382690f59eefd949a0a1f01f30a90ce7584c3ad", 0x4c}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="1b072d561dea5bcaddc3c70d210a07755c185d858f0e38aec41816849282f581f7518b44ad00a72f5b820a6c9f1d0feffbf62cfb49a013faeeaead0c760b07789e745b50", 0x44}, {&(0x7f0000000300)="d3648fa65b8ab8bf2a793eaf229cfb03f321a116772add7c041d214f33532c1d103f742d5fa34478a1058dedc41f3499564f218ae56d4a5c66c2b9f6314c01b4bfe8709d6d0fecaf052abaec0486861ef3cc0847f41bd60a90f290d824bc0991f0a2aaa8d608b7c0c3ef6c22ffb98695aca089aea051cacce00c022d8d872515df25826ec30a4a4e3afe6a03362419194c153b653dfb724742e1796c093fa7641c7dbfe4ba27c8ad19f5759b7388c7c619b82d97a964f5daad1729b2ba2a143fe4b100f33efc5f385f5fcda2df87df79548b0c5f69a5c58c7c5413", 0xdb}, {&(0x7f0000000400)="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", 0xb6c}, {&(0x7f0000001400)="3196e7bb88931ea923194e80e0d2d3e0ae409fef65781d0e902d966975ee9d1b70a7c8cf02a4bd7c00ac44f968b25a44ea513a3649c7e6a8a862807741ced40ca798077089cb300a5c5679896ef23b1fd10f6b1a6f36071c2495d36a2eab6c220a0037ced90f0a9133371f5a5eb9258bb8e7d4ec2866d205fdf9701aac6ef7f9a403934f6223147a01ef9279fba393ec01293ad4803453d53dbaed5f2a8e98c43c46d7654d7e00e57276274fba3bd6", 0xaf}], 0x6, 0x0, 0x0)

[ 1231.552222][T26231] usb 4-1: config 0 descriptor??
[ 1231.579545][T31491] pit: kvm: requested 84647 ns i8254 timer period limited to 200000 ns
[ 1231.620114][T26231] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected
[ 1231.808119][T26231] usb 4-1: USB disconnect, device number 65
[ 1231.808448][T31491] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns
[ 1231.815253][T26231] keyspan 4-1:0.0: device disconnected
[ 1231.910428][T31491] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns
[ 1231.984223][T31491] pit: kvm: requested 82971 ns i8254 timer period limited to 200000 ns
03:37:00 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x2c, 0xb5, 0x8, 0x6cd, 0x101, 0x179b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x62, 0x99, 0x39}}]}}]}}, 0x0)

03:37:00 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
io_setup(0x4, &(0x7f0000000500)=<r1=>0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = eventfd(0x0)
close(r3)
io_submit(r1, 0x2, &(0x7f0000001a00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}])

[ 1232.244354][T31519] qrtr: Invalid version 16
[ 1232.787082][ T9087] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1233.027349][ T9087] usb 4-1: Using ep0 maxpacket: 8
[ 1233.148289][ T9087] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=17.9b
[ 1233.158224][ T9087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.208402][ T9087] usb 4-1: config 0 descriptor??
[ 1233.252350][ T9087] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected
03:37:02 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=' 4', 0x2}, {0x0, 0xa}], 0x2)

03:37:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000009, 0x13, r1, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4)

03:37:02 executing program 1:
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000000), 0x8)

03:37:02 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x2, "fffe56e75428938d4092f520c15e55eb57e898f86787996fe226f7772a602089"})

03:37:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100))
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1233.469059][ T9511] usb 4-1: USB disconnect, device number 66
[ 1233.476072][ T9511] keyspan 4-1:0.0: device disconnected
03:37:02 executing program 2:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socketpair(0x23, 0x5, 0x0, &(0x7f0000000040))
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

03:37:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x3, &(0x7f0000000080)='kB/', 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:37:02 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
sendfile(r0, r3, 0x0, 0x8000fffffffe)

03:37:03 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x11, 0x3, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002ac0)={r2, 0x1, 0x6, @broadcast}, 0x10)
r3 = socket(0x11, 0x3, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10)

03:37:03 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x2c, 0xb5, 0x8, 0x6cd, 0x101, 0x179b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x62, 0x99, 0x39}}]}}]}}, 0x0)

03:37:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1b000000180007841dfffd946f61050002008100fd038b05440408", 0x1b}], 0x1}, 0x0)

[ 1234.585998][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1234.665012][T31569] device lo entered promiscuous mode
[ 1234.666574][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1234.737945][T31568] device lo left promiscuous mode
[ 1234.761243][T31569] device lo entered promiscuous mode
[ 1234.796421][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1234.798611][T31568] device lo left promiscuous mode
[ 1234.880395][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1234.965521][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
03:37:03 executing program 2:
unshare(0x20600)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000001680)={0xa, 0x0, 0x0, @mcast1}, 0x20)

[ 1235.028984][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1235.050416][ T9087] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1235.143583][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1235.207215][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1235.296304][T31565] kvm [31561]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
[ 1235.297285][ T9087] usb 4-1: Using ep0 maxpacket: 8
[ 1235.451211][ T9087] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=17.9b
[ 1235.460556][ T9087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1235.521238][ T9087] usb 4-1: config 0 descriptor??
[ 1235.568404][ T9087] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected
[ 1235.831538][ T9087] usb 4-1: USB disconnect, device number 67
[ 1235.838883][ T9087] keyspan 4-1:0.0: device disconnected
03:37:05 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=' 4', 0x2}, {0x0, 0xa}], 0x2)

03:37:05 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800098002000000", 0x24)

03:37:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
sendfile(r0, r3, 0x0, 0x8000fffffffe)

03:37:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x3, &(0x7f0000000080)='kB/', 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:37:05 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x22c, 0x188, 0xffffffff, 0xa4, 0x188, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @port, @icmp_id}}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'batadv0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @remote, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380)

03:37:05 executing program 2:
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000)

03:37:05 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x2c, 0xb5, 0x8, 0x6cd, 0x101, 0x179b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x62, 0x99, 0x39}}]}}]}}, 0x0)

03:37:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x3, &(0x7f0000000080)='kB/', 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:37:05 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800098002000000", 0x24)

03:37:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
sendfile(r0, r3, 0x0, 0x8000fffffffe)

[ 1237.201539][T31620] kvm [31617]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop
03:37:06 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800098002000000", 0x24)

03:37:06 executing program 2:
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000)

[ 1237.327275][ T9512] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1237.587116][ T9512] usb 4-1: Using ep0 maxpacket: 8
[ 1237.708171][ T9512] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=17.9b
[ 1237.717511][ T9512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.863201][ T9512] usb 4-1: config 0 descriptor??
[ 1237.919761][ T9512] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected
[ 1238.125324][ T9511] usb 4-1: USB disconnect, device number 68
[ 1238.132456][ T9511] keyspan 4-1:0.0: device disconnected
03:37:07 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=' 4', 0x2}, {0x0, 0xa}], 0x2)

03:37:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x3, &(0x7f0000000080)='kB/', 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:37:07 executing program 2:
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000)

03:37:07 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800098002000000", 0x24)

03:37:07 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
sendfile(r0, r3, 0x0, 0x8000fffffffe)

03:37:08 executing program 2:
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000)

03:37:08 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

03:37:08 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6, &(0x7f00000003c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c)

03:37:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0)

03:37:08 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]})
gettid()

03:37:08 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

03:37:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x5c}}, 0x0)

[ 1240.262069][T31682] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1240.303664][T31681] input: syz1 as /devices/virtual/input/input68
[ 1240.391203][T31693] input: syz1 as /devices/virtual/input/input69
03:37:10 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=' 4', 0x2}, {0x0, 0xa}], 0x2)

03:37:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}}, 0x0)

03:37:10 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000880)='batadv0\x04\x1e\x18\xe7I\xc8\x1ak\xe9\x14\x91\xc1\fo\xdd@\xa4\xaaS\xbd\xc1I*\x03]!i\x9eJW\xee$\x7f\xddC\xbcV\x9f\xcf\x8c\x19\xaa\xf3\x96\xc5\xf0\xf4\xf7\x9f\xf3*mb\xa3\xa99(\xd8f\xe1\xe4d3\x1b\x8dPp%)P\xbb\xb9z\xdd\xb8\xee\x9aWB\xcb\x10\xbc\xe0<\x90&.\xb0$r\xe6\x02\aM\tW\xe6\b\xbd\xeab\xe4]S\xc7W\x9a\xde\xe2\xc7\xfe\xa4[\x95\xb5\xba^\xca\xd8\x8ckGn\xa6\xce\x13\xf0\xee\x00'/147, r0}, 0x10)

03:37:10 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

03:37:10 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

03:37:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x20000000000000a, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, 0x0, 0x1, {{0x8, 0x1, r1}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0)

[ 1241.595123][T31715] input: syz1 as /devices/virtual/input/input70
03:37:10 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000880)='batadv0\x04\x1e\x18\xe7I\xc8\x1ak\xe9\x14\x91\xc1\fo\xdd@\xa4\xaaS\xbd\xc1I*\x03]!i\x9eJW\xee$\x7f\xddC\xbcV\x9f\xcf\x8c\x19\xaa\xf3\x96\xc5\xf0\xf4\xf7\x9f\xf3*mb\xa3\xa99(\xd8f\xe1\xe4d3\x1b\x8dPp%)P\xbb\xb9z\xdd\xb8\xee\x9aWB\xcb\x10\xbc\xe0<\x90&.\xb0$r\xe6\x02\aM\tW\xe6\b\xbd\xeab\xe4]S\xc7W\x9a\xde\xe2\xc7\xfe\xa4[\x95\xb5\xba^\xca\xd8\x8ckGn\xa6\xce\x13\xf0\xee\x00'/147, r0}, 0x10)

03:37:10 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000027bd7000ffdb"], 0x118}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:37:10 executing program 1:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

03:37:10 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

03:37:11 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000880)='batadv0\x04\x1e\x18\xe7I\xc8\x1ak\xe9\x14\x91\xc1\fo\xdd@\xa4\xaaS\xbd\xc1I*\x03]!i\x9eJW\xee$\x7f\xddC\xbcV\x9f\xcf\x8c\x19\xaa\xf3\x96\xc5\xf0\xf4\xf7\x9f\xf3*mb\xa3\xa99(\xd8f\xe1\xe4d3\x1b\x8dPp%)P\xbb\xb9z\xdd\xb8\xee\x9aWB\xcb\x10\xbc\xe0<\x90&.\xb0$r\xe6\x02\aM\tW\xe6\b\xbd\xeab\xe4]S\xc7W\x9a\xde\xe2\xc7\xfe\xa4[\x95\xb5\xba^\xca\xd8\x8ckGn\xa6\xce\x13\xf0\xee\x00'/147, r0}, 0x10)

[ 1242.335091][T31737] IPVS: ftp: loaded support on port[0] = 21
03:37:11 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

[ 1242.389259][T31738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1242.452473][T31739] input: syz1 as /devices/virtual/input/input71
[ 1243.122208][T31738] IPVS: ftp: loaded support on port[0] = 21
[ 1243.264689][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1243.343028][ T8905] tipc: TX() has been purged, node left!
03:37:13 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

03:37:13 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000027bd7000ffdb"], 0x118}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:37:13 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000880)='batadv0\x04\x1e\x18\xe7I\xc8\x1ak\xe9\x14\x91\xc1\fo\xdd@\xa4\xaaS\xbd\xc1I*\x03]!i\x9eJW\xee$\x7f\xddC\xbcV\x9f\xcf\x8c\x19\xaa\xf3\x96\xc5\xf0\xf4\xf7\x9f\xf3*mb\xa3\xa99(\xd8f\xe1\xe4d3\x1b\x8dPp%)P\xbb\xb9z\xdd\xb8\xee\x9aWB\xcb\x10\xbc\xe0<\x90&.\xb0$r\xe6\x02\aM\tW\xe6\b\xbd\xeab\xe4]S\xc7W\x9a\xde\xe2\xc7\xfe\xa4[\x95\xb5\xba^\xca\xd8\x8ckGn\xa6\xce\x13\xf0\xee\x00'/147, r0}, 0x10)

03:37:13 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

03:37:13 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup3(r1, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

[ 1244.507521][T31790] input: syz1 as /devices/virtual/input/input72
03:37:13 executing program 1:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

03:37:13 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000027bd7000ffdb"], 0x118}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:37:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5428, 0x0)

03:37:14 executing program 2:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

[ 1245.143410][T31805] IPVS: ftp: loaded support on port[0] = 21
03:37:14 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4)

[ 1245.240828][T31806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1245.451192][T31817] IPVS: ftp: loaded support on port[0] = 21
03:37:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5428, 0x0)

03:37:14 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000027bd7000ffdb"], 0x118}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:37:15 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4)

03:37:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5428, 0x0)

03:37:15 executing program 4:
unshare(0x8000000)
r0 = mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x5, 0x8})
mq_timedreceive(r0, &(0x7f0000000240)=""/54, 0x36, 0x0, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
mq_timedreceive(r0, &(0x7f0000000180)=""/188, 0xbc, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1246.569508][T31818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:37:15 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4)

03:37:17 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup3(r1, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

03:37:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5428, 0x0)

03:37:17 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4)

03:37:17 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000140)=@ll, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5, 0x1, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000d87a01"}}, 0x48}}, 0x0)

03:37:17 executing program 1:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

03:37:17 executing program 2:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

[ 1248.717761][T31866] IPVS: ftp: loaded support on port[0] = 21
03:37:17 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0)

[ 1248.864276][T31865] IPVS: ftp: loaded support on port[0] = 21
[ 1248.893014][T31870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1248.924601][T31869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:37:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x18}}, 0x0)

03:37:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x18}}, 0x0)

03:37:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x18}}, 0x0)

03:37:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x18}}, 0x0)

03:37:19 executing program 2:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

[ 1250.855903][T31932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:37:20 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup3(r1, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

03:37:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x7c}}, 0x0)

03:37:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
sendmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0xc, 0x117, 0x4}], 0xc}}], 0x1, 0x0)

[ 1251.855372][ T8905] tipc: TX() has been purged, node left!
03:37:20 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000140)=@ll, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5, 0x1, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000d87a01"}}, 0x48}}, 0x0)

03:37:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)

03:37:20 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xe00)
getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000000))

03:37:20 executing program 1:
unshare(0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

03:37:21 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0xf401}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f", 0xd2}, {0x0}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000)

03:37:21 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

03:37:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ioctl$KDFONTOP_COPY(r0, 0x5609, 0x0)

[ 1252.718385][T31964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:37:21 executing program 2:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'sha3-224\x00'}})

03:37:22 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

03:37:22 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup3(r1, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

03:37:22 executing program 0:
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x3)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20)

03:37:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x79)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
fstatfs(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0)
getresuid(&(0x7f0000000340), &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000004c0)='./bus/file1\x00', 0x7, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x1}, {&(0x7f00000006c0)="98b1cafa86fc2039d9869302cd65e3808e21d083400d221d684de1ebddf4ffc2bf5545cfe1a2aaf502092754627f773f809936382e14d3bbfb6029370fb497724c23c1138b346b70fcd65b28547cd5281ba941f52be5ae4deb35a143b2e2b285dfb5b741c2ce7253456edc87106d32795045c6c3023a7efa379ccf1216b12edb0f38f3b6fde94ce2fb646c3668a043f0b4351399c11d5deaa41b15baa873b44db5ef218ad9b3d2d0d772ee2395a828e8490ad6dd1b2a791f63722dac934c48162a428cb247f4f5ac2a46aed86838ade3e8646bc9a391c13b23e480c2efac35599d5c38ce723c3b2f21b8838ef752eaefa8425ca03ee07d57ef27e3cc3a454ab00a19d0c8e7489ff049e8a2e70bb6c00fca0f593db5dc06ac80f98c18cfe52914e9899fd32dfcf9f6863a54bf7e24b7cbd622766101b8bd818db68515bd7f369b01aad2dfbf20af6e9a3af361e5f9daa5d3c521cc3d164d9347dbf0b584a54c74f64cad5c7dd14a752b1207d154cacf4a2759dedf6e445622b823d29ba52a679bdbaee258c8367c4b3255936c5213aa36a37c431095c07575c0b7d495c44c758edda33c15eaaced07dccf5104cfac5f777b5bb707187469101b6cece36bb37b5543ee09defdc5a37565a90f5c50c89c54bd3dc7dcda5edaa7954167b3083399eb80e3b0946d5e77e0e3bed70b790a484b78e40c3f8ec2657940406d0b5a1c11e000d5565a14cd4cf19a4c5b1aca5d1e761f2e85d46c13da0b56530759124b1f97eec2b644daf0b83e83d6c63aae8e54d7d47803cc0561d1a333a9f5ce4141c1f57f619589dcd275993116891381c5ea725c08ca900fd980eb742643bd71441a72569dbfa8c95e50271adadebe1a6825db96c6cfed6a9fefb3c20cfee4c6538d8f9f6c28bf81183a592bdf77351b1c6ae83411e7106d9bf278ab5c8da221ea85f65a6490ce440130724c1cdf29119a7491381e9868fb99f9d93c7d1204e781323e2d339d79d58ac7ae7ff7f4fd509d2ccc9b09b20c197bc0da1234bb260d7fa4ac8db0f3c5c52641d60c0178cf534b244e20947c72b2cb491bfbf979807f2d57fe3a9a6fe5f361933deb2f6403b483045aead7b372858eecaf64c8f9ef67137449b8abe0ccc862bf0451042c6f91bf2e07fb5a8c59d59c2bdb220398b6e7e3e7f2330c4775084191f35bb637ec212c316938db02d469592965c115e3c359cc75f48b2cd0b1d9afcacad4170d4e733153e482afda7585cf0ad120a6f3ada4437d0f64359afce9649675ed17cb7d097e1f63b116cd2a773f9ac70fb1f435b451b76b9307f1a6311c098cb29ebd729cfb8f58bb7b31cde59294774e3dd164cf5e0e6bdde57b163a460e24ec444f66ceb7cc59980b120bbe2cac7fd151939927b839087a7d627a4396c7f330a6a10d39b7b54729d0c189853b9c018de1963d1bc9da01f25da9661ea0d225eb4dfe482cdea5d35af1a1875a5c71aea9d813cfb630d84849f4b6b0382804515874244ab8046831868088bb2ba3095546b8b834a22baaaeeaaceefab74d7c0f9af90f11c0302f60d7404cd6386dbad233c9c29208320c313f8f3517a2b54bc4b11c2fae217742952311003dc5b3ba211edb701f9993c942a738f4b5663d0d8da7e7e1a13bf91b518768019f5ebb07c91fe2e50dbeca749ec5479faafcedd8ccde98c576fa9ec414735d980180b2087eb3f65b2fb7b66ee6f67b23fa2b35b9ae522cfbebcdf539a431acd3e6b62af9d131eb2915ba5b466bc5c0ca9424f885d85f4986afb592a06e19618ed015350e7250be48c2f7bfae0facb99f068ab6ade91d6d0aa8d7905a12208ac6a5ff17790fa3fd51e6c95f1dd206f76b7712220bf1a69dd5636de3fc7451fb00cf2cf8031686149a32c95cb0f5e27a454ee16c791557be870b80c679cb42671ea0c50068780913798e3f182f69fa46263f37cbaba60298cc77150c8cf708f202bba58f65b08dab0b96c195c0fb4004dec99f85b70c254a4b02dec89bc59c3492ca5192193091409ec98523eb4f5ecede0ae0f0ae628057cf0639ef34ad79c71c090426529ae1c25c1e4270935040440e71b04a7ddd95c045cf610b9bf196d1f1a8ca3607da5546da9f2e4b049edacba9bd4a4da0e7e8fc683393d9bef88293eb42d3bebf9589547f3b016cfd34760a08c0ed1fc2c1110e31e5be8718698bdd8784981f2efb26eed2da06e5fb37f89ca100eb0e3c6654f264209d95b8b5de180329a3bea1dc423a36fd1ca6eb77f2b4754365f4ec34bc2722d3e97fa3dac6a303cb897e6e07f6eefba3d55ac86b29ecce3d40982653c6085ca66de5eb895b9cce819ca979547f156882a8ee55d6ebbea33ae3a9e1bd25b2f5c49a29c7477cc8bf096ca9dafdc5dd7eee2d897786728b2e4a17cea2b329a1525ff9b483c290aba416789bc2e22b43ead7384621733cafdebebe50eb04b611707d958505b6624181d3246b6b9bb806dfdf632a4d432a8a8757e5d8c4afc237e715984a9d8c06db6b08795217bfcace0a26fe08778340223ee82fac8a9e2d4fca79d9c68171910e0c8873f59d75b76c3de99b2c6d0ee5aed8b3ba52ce812822daa0d03f8a2ce4cc82582be4df6d517d071e7be4017e76a9ad272129970026c9e9ec8fbd1504d981848b7973663cf205e91993978f509465aa8e8237678c750196d2332f6de8f6ef91cd54baa7c95118ee25058ab7f181c613e0a3a79a20f25479d665a563a6d1eb8ed033e7c067d2bfe4be204b1faac1c216a076e6be31bb4ce9feb5a655baed902cf34a7f47abc7a32f9277281e7d09b6ebdbe22342c57bf8bb00e4c53d2a653e6a844d230178afc2a83213568145ba400b2059dc7891e60408bea8feefea78bc54d8e9fe0855ef60006d398499fb", 0x800}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e6572", @ANYRESDEC=r1])
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
inotify_init1(0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000140)=0x20)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, 0x0)

[ 1254.177701][T31990] hub 9-0:1.0: USB hub found
[ 1254.183608][T31990] hub 9-0:1.0: 8 ports detected
[ 1254.245087][T31989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1254.317995][T31989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1254.329666][T31989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:37:23 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000140)=@ll, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5, 0x1, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000d87a01"}}, 0x48}}, 0x0)

03:37:23 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

03:37:23 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x80184132, 0x0)

03:37:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x79)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
fstatfs(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0)
getresuid(&(0x7f0000000340), &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000004c0)='./bus/file1\x00', 0x7, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x1}, {&(0x7f00000006c0)="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", 0x800}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e6572", @ANYRESDEC=r1])
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
inotify_init1(0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000140)=0x20)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, 0x0)

[ 1255.075983][T31994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1255.169311][T31994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1255.181663][T31994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:37:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

03:37:24 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)

03:37:24 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000140)=@ll, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5, 0x1, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000d87a01"}}, 0x48}}, 0x0)

03:37:24 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e000a000d0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

03:37:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x79)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
fstatfs(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0)
getresuid(&(0x7f0000000340), &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000004c0)='./bus/file1\x00', 0x7, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x1}, {&(0x7f00000006c0)="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", 0x800}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e6572", @ANYRESDEC=r1])
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
inotify_init1(0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000140)=0x20)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, 0x0)

[ 1256.091589][T32020] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.100675][T32020] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.181013][T32021] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.312996][T32020] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.321474][T32020] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.358669][T32029] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
03:37:25 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)

03:37:25 executing program 4:
syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f00000000c0)="d4e2b2bbe94144f1f272c3ecb8754156c15f8f004a5195a38d7933f32baf4b5aa8294f1d2db225abacf2394e7420455554c59aeafd2625bf2bf7fb3a52a2bc6b6ae6970bf6b743f040852c018d82ea9f479e095280abfb96f9be71d0ab570de246d888f67e905552eca0be449ac201244470df3ad56ee2b0917d01ff90c2c673230d85fb4f8268f057c2b1ec69bf95b613de", 0x92}], 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x20000000000002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="240000001e0007", 0x7}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfcfa)
splice(r0, 0x0, r2, 0x0, 0xa360, 0x0)

03:37:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0)

03:37:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x79)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
fstatfs(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0)
getresuid(&(0x7f0000000340), &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000004c0)='./bus/file1\x00', 0x7, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x1}, {&(0x7f00000006c0)="98b1cafa86fc2039d9869302cd65e3808e21d083400d221d684de1ebddf4ffc2bf5545cfe1a2aaf502092754627f773f809936382e14d3bbfb6029370fb497724c23c1138b346b70fcd65b28547cd5281ba941f52be5ae4deb35a143b2e2b285dfb5b741c2ce7253456edc87106d32795045c6c3023a7efa379ccf1216b12edb0f38f3b6fde94ce2fb646c3668a043f0b4351399c11d5deaa41b15baa873b44db5ef218ad9b3d2d0d772ee2395a828e8490ad6dd1b2a791f63722dac934c48162a428cb247f4f5ac2a46aed86838ade3e8646bc9a391c13b23e480c2efac35599d5c38ce723c3b2f21b8838ef752eaefa8425ca03ee07d57ef27e3cc3a454ab00a19d0c8e7489ff049e8a2e70bb6c00fca0f593db5dc06ac80f98c18cfe52914e9899fd32dfcf9f6863a54bf7e24b7cbd622766101b8bd818db68515bd7f369b01aad2dfbf20af6e9a3af361e5f9daa5d3c521cc3d164d9347dbf0b584a54c74f64cad5c7dd14a752b1207d154cacf4a2759dedf6e445622b823d29ba52a679bdbaee258c8367c4b3255936c5213aa36a37c431095c07575c0b7d495c44c758edda33c15eaaced07dccf5104cfac5f777b5bb707187469101b6cece36bb37b5543ee09defdc5a37565a90f5c50c89c54bd3dc7dcda5edaa7954167b3083399eb80e3b0946d5e77e0e3bed70b790a484b78e40c3f8ec2657940406d0b5a1c11e000d5565a14cd4cf19a4c5b1aca5d1e761f2e85d46c13da0b56530759124b1f97eec2b644daf0b83e83d6c63aae8e54d7d47803cc0561d1a333a9f5ce4141c1f57f619589dcd275993116891381c5ea725c08ca900fd980eb742643bd71441a72569dbfa8c95e50271adadebe1a6825db96c6cfed6a9fefb3c20cfee4c6538d8f9f6c28bf81183a592bdf77351b1c6ae83411e7106d9bf278ab5c8da221ea85f65a6490ce440130724c1cdf29119a7491381e9868fb99f9d93c7d1204e781323e2d339d79d58ac7ae7ff7f4fd509d2ccc9b09b20c197bc0da1234bb260d7fa4ac8db0f3c5c52641d60c0178cf534b244e20947c72b2cb491bfbf979807f2d57fe3a9a6fe5f361933deb2f6403b483045aead7b372858eecaf64c8f9ef67137449b8abe0ccc862bf0451042c6f91bf2e07fb5a8c59d59c2bdb220398b6e7e3e7f2330c4775084191f35bb637ec212c316938db02d469592965c115e3c359cc75f48b2cd0b1d9afcacad4170d4e733153e482afda7585cf0ad120a6f3ada4437d0f64359afce9649675ed17cb7d097e1f63b116cd2a773f9ac70fb1f435b451b76b9307f1a6311c098cb29ebd729cfb8f58bb7b31cde59294774e3dd164cf5e0e6bdde57b163a460e24ec444f66ceb7cc59980b120bbe2cac7fd151939927b839087a7d627a4396c7f330a6a10d39b7b54729d0c189853b9c018de1963d1bc9da01f25da9661ea0d225eb4dfe482cdea5d35af1a1875a5c71aea9d813cfb630d84849f4b6b0382804515874244ab8046831868088bb2ba3095546b8b834a22baaaeeaaceefab74d7c0f9af90f11c0302f60d7404cd6386dbad233c9c29208320c313f8f3517a2b54bc4b11c2fae217742952311003dc5b3ba211edb701f9993c942a738f4b5663d0d8da7e7e1a13bf91b518768019f5ebb07c91fe2e50dbeca749ec5479faafcedd8ccde98c576fa9ec414735d980180b2087eb3f65b2fb7b66ee6f67b23fa2b35b9ae522cfbebcdf539a431acd3e6b62af9d131eb2915ba5b466bc5c0ca9424f885d85f4986afb592a06e19618ed015350e7250be48c2f7bfae0facb99f068ab6ade91d6d0aa8d7905a12208ac6a5ff17790fa3fd51e6c95f1dd206f76b7712220bf1a69dd5636de3fc7451fb00cf2cf8031686149a32c95cb0f5e27a454ee16c791557be870b80c679cb42671ea0c50068780913798e3f182f69fa46263f37cbaba60298cc77150c8cf708f202bba58f65b08dab0b96c195c0fb4004dec99f85b70c254a4b02dec89bc59c3492ca5192193091409ec98523eb4f5ecede0ae0f0ae628057cf0639ef34ad79c71c090426529ae1c25c1e4270935040440e71b04a7ddd95c045cf610b9bf196d1f1a8ca3607da5546da9f2e4b049edacba9bd4a4da0e7e8fc683393d9bef88293eb42d3bebf9589547f3b016cfd34760a08c0ed1fc2c1110e31e5be8718698bdd8784981f2efb26eed2da06e5fb37f89ca100eb0e3c6654f264209d95b8b5de180329a3bea1dc423a36fd1ca6eb77f2b4754365f4ec34bc2722d3e97fa3dac6a303cb897e6e07f6eefba3d55ac86b29ecce3d40982653c6085ca66de5eb895b9cce819ca979547f156882a8ee55d6ebbea33ae3a9e1bd25b2f5c49a29c7477cc8bf096ca9dafdc5dd7eee2d897786728b2e4a17cea2b329a1525ff9b483c290aba416789bc2e22b43ead7384621733cafdebebe50eb04b611707d958505b6624181d3246b6b9bb806dfdf632a4d432a8a8757e5d8c4afc237e715984a9d8c06db6b08795217bfcace0a26fe08778340223ee82fac8a9e2d4fca79d9c68171910e0c8873f59d75b76c3de99b2c6d0ee5aed8b3ba52ce812822daa0d03f8a2ce4cc82582be4df6d517d071e7be4017e76a9ad272129970026c9e9ec8fbd1504d981848b7973663cf205e91993978f509465aa8e8237678c750196d2332f6de8f6ef91cd54baa7c95118ee25058ab7f181c613e0a3a79a20f25479d665a563a6d1eb8ed033e7c067d2bfe4be204b1faac1c216a076e6be31bb4ce9feb5a655baed902cf34a7f47abc7a32f9277281e7d09b6ebdbe22342c57bf8bb00e4c53d2a653e6a844d230178afc2a83213568145ba400b2059dc7891e60408bea8feefea78bc54d8e9fe0855ef60006d398499fb", 0x800}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e6572", @ANYRESDEC=r1])
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
inotify_init1(0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000140)=0x20)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, 0x0)

03:37:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e000a000d0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

03:37:25 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x7f)
sendto$inet(r0, &(0x7f0000000140)='_', 0x1, 0x488d0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)

[ 1256.885485][T32041] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.894091][T32041] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1256.998154][T32050] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
03:37:26 executing program 0:
unshare(0x20000600)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004020000", 0x58}], 0x1)

03:37:26 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)

03:37:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$FUSE(r0, &(0x7f0000000280), 0xfffffed3)

03:37:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e000a000d0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

03:37:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x4, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1257.677599][T32063] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1257.896807][T32073] kvm [32068]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x40000000f
03:37:26 executing program 2:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

[ 1257.976105][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000051 data 0x400000049
03:37:26 executing program 0:
unshare(0x20000600)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004020000", 0x58}], 0x1)

03:37:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e000a000d0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

[ 1258.056779][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001b data 0x4000000a3
[ 1258.129529][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000016 data 0x400000037
[ 1258.149414][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000066 data 0x40000002d
[ 1258.160748][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000009 data 0x4000000ed
03:37:27 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)

[ 1258.172238][T32073] kvm [32068]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000086 data 0x400000013
03:37:27 executing program 4:
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x0)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

03:37:27 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}}}, 0x24}}, 0x0)

[ 1259.087300][T32101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1259.295852][T32107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
03:37:28 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000082505a142d800010203010902400001010000000904000000020600c0052406000005240000000d240f01000000000000030000052414"], 0x0)

03:37:28 executing program 0:
unshare(0x20000600)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004020000", 0x58}], 0x1)

03:37:28 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x9, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0)

03:37:28 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000000)={'bridge0\x00', 0x0})

03:37:28 executing program 3:
r0 = socket(0x2c, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)

[ 1260.084747][T32123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1260.094127][T32123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:37:29 executing program 0:
unshare(0x20000600)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004020000", 0x58}], 0x1)

03:37:29 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
lseek(r0, 0x10, 0x0)
getdents(r0, 0x0, 0x6000000)

03:37:29 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

[ 1260.259087][T32124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1260.268571][T32124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:37:29 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')

03:37:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0xf01, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

03:37:29 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'geneve1\x00', @ifru_settings={0x9, 0xfffffffc, @fr=0x0}})
ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000))

03:37:29 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
lseek(r0, 0x10, 0x0)
getdents(r0, 0x0, 0x6000000)

[ 1261.737681][T21908] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1261.977236][T21908] usb 6-1: Using ep0 maxpacket: 8
[ 1262.118771][T21908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.297673][T21908] usb 6-1: New USB device found, idVendor=0525, idProduct=42a1, bcdDevice= 0.d8
[ 1262.306875][T21908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.315157][T21908] usb 6-1: Product: syz
[ 1262.319634][T21908] usb 6-1: Manufacturer: syz
[ 1262.324366][T21908] usb 6-1: SerialNumber: syz
[ 1262.642587][T21908] cdc_ether: probe of 6-1:1.0 failed with error -22
[ 1262.673270][T21908] usb 6-1: USB disconnect, device number 23
[ 1263.397131][T26231] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1263.667936][T26231] usb 6-1: Using ep0 maxpacket: 8
[ 1263.807464][T26231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1263.987508][T26231] usb 6-1: New USB device found, idVendor=0525, idProduct=42a1, bcdDevice= 0.d8
[ 1263.996713][T26231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.005009][T26231] usb 6-1: Product: syz
[ 1264.009488][T26231] usb 6-1: Manufacturer: syz
[ 1264.014215][T26231] usb 6-1: SerialNumber: syz
03:37:33 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:33 executing program 0:
unshare(0x6000400)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket(0x15, 0x80005, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)

03:37:33 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
lseek(r0, 0x10, 0x0)
getdents(r0, 0x0, 0x6000000)

03:37:33 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')

03:37:33 executing program 1:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xcc, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @NFCTH_STATUS={0x8}]}, 0xcc}}, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[], 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:37:33 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'geneve1\x00', @ifru_settings={0x9, 0xfffffffc, @fr=0x0}})
ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000))

[ 1264.300525][T26231] cdc_ether: probe of 6-1:1.0 failed with error -22
[ 1264.444397][T26231] usb 6-1: USB disconnect, device number 24
[ 1264.554869][   T29] audit: type=1804 audit(1597808253.440:96): pid=32178 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir646745548/syzkaller.6K1JGX/786/bus" dev="sda1" ino=16362 res=1
[ 1264.683818][   T29] audit: type=1804 audit(1597808253.510:97): pid=32184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir646745548/syzkaller.6K1JGX/786/bus" dev="sda1" ino=16362 res=1
03:37:33 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'geneve1\x00', @ifru_settings={0x9, 0xfffffffc, @fr=0x0}})
ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000))

03:37:33 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')

03:37:33 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
lseek(r0, 0x10, 0x0)
getdents(r0, 0x0, 0x6000000)

03:37:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_to_team\x00'})

03:37:33 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x20, @multicast, 'veth0_to_hsr\x00'}}, 0x1e)
dup2(r1, r2)

03:37:34 executing program 3:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d)
write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600800000000600000200080002000600ca3f8bca000000003800000000ff00f7ffffffffffff1f000200000020000000b500000001000000000000000000ffffffffffffff"], 0x78)
close(r0)
uselib(&(0x7f0000000080)='./file0\x00')

[ 1265.897731][T32204] IPVS: ftp: loaded support on port[0] = 21
[ 1266.140312][T32229] IPVS: ftp: loaded support on port[0] = 21
03:37:35 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:35 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x6, "d313"}]}}, 0x0}, 0x0)

03:37:35 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'geneve1\x00', @ifru_settings={0x9, 0xfffffffc, @fr=0x0}})
ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000))

03:37:35 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040702000109021b000100000000090400000157eb4b00090586a3"], 0x0)

03:37:35 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')

03:37:35 executing program 3:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fd02080100010800080006000400ff7e", 0x24}], 0x1}, 0x0)

03:37:35 executing program 3:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:35 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

[ 1266.647246][ T9511] usb 1-1: new high-speed USB device number 54 using dummy_hcd
03:37:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x14)

[ 1266.687541][ T9512] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1266.894571][T32268] IPVS: ftp: loaded support on port[0] = 21
[ 1266.997929][ T9512] usb 2-1: Using ep0 maxpacket: 32
[ 1267.007180][ T9511] usb 1-1: Using ep0 maxpacket: 32
[ 1267.116576][T32269] IPVS: ftp: loaded support on port[0] = 21
[ 1267.132390][ T9512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1267.143478][ T9512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1267.235016][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1267.246307][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1267.256419][ T9511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1267.269583][ T9511] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40
[ 1267.278818][ T9511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.482315][ T9512] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01
[ 1267.491584][ T9512] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0
[ 1267.499928][ T9512] usb 2-1: Product: syz
[ 1267.504239][ T9512] usb 2-1: Manufacturer: syz
03:37:36 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x14, &(0x7f00000001c0)={r2}, &(0x7f0000000140)=0x8)

[ 1267.586614][ T9511] usb 1-1: config 0 descriptor??
[ 1267.684314][ T9512] usb 2-1: config 0 descriptor??
[ 1267.957513][ T9512] usb 2-1: USB disconnect, device number 46
[ 1268.092910][T25657] tipc: TX() has been purged, node left!
[ 1268.108984][ T9511] wacom 0003:056A:00D5.0025: unknown main item tag 0x0
[ 1268.117199][ T9511] wacom 0003:056A:00D5.0025: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[ 1268.129446][ T9511] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D5.0025/input/input74
03:37:37 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:37 executing program 3:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

[ 1268.530318][ T9511] wacom 0003:056A:00D5.0025: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.0-1/input0
[ 1268.681554][ T9511] usb 1-1: USB disconnect, device number 54
[ 1268.717404][   T28] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1268.987194][   T28] usb 2-1: Using ep0 maxpacket: 32
[ 1269.053017][T32359] IPVS: ftp: loaded support on port[0] = 21
[ 1269.108516][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1269.120140][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1269.409197][T32366] IPVS: ftp: loaded support on port[0] = 21
[ 1269.873705][ T9511] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1269.908166][   T28] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01
[ 1269.917490][   T28] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0
[ 1270.084799][   T28] usb 2-1: config 0 descriptor??
[ 1270.185595][   T28] usb 2-1: can't set config #0, error -71
[ 1270.237312][   T28] usb 2-1: USB disconnect, device number 47
[ 1270.969795][T32416] IPVS: ftp: loaded support on port[0] = 21
03:37:40 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040702000109021b000100000000090400000157eb4b00090586a3"], 0x0)

03:37:40 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:40 executing program 2:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r1, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x24, &(0x7f0000000080), 0xc)

03:37:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x6, "d313"}]}}, 0x0}, 0x0)

03:37:40 executing program 3:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:40 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

[ 1271.548179][T25657] tipc: TX() has been purged, node left!
[ 1271.565345][T25657] tipc: TX() has been purged, node left!
[ 1271.687831][T32448] IPVS: ftp: loaded support on port[0] = 21
[ 1271.776637][T32452] IPVS: ftp: loaded support on port[0] = 21
[ 1271.897397][   T28] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1272.041583][ T9511] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1272.197708][   T28] usb 1-1: Using ep0 maxpacket: 32
[ 1272.329143][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1272.340307][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1272.350465][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1272.363500][   T28] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40
[ 1272.372746][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
03:37:41 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0xd)

[ 1272.447980][ T9511] usb 2-1: Using ep0 maxpacket: 32
[ 1272.568646][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1272.580222][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1272.594203][   T28] usb 1-1: config 0 descriptor??
[ 1272.888519][ T9511] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01
[ 1272.898949][ T9511] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0
[ 1272.907272][ T9511] usb 2-1: Product: syz
[ 1272.911567][ T9511] usb 2-1: Manufacturer: syz
[ 1273.021235][ T9511] usb 2-1: config 0 descriptor??
[ 1273.075214][   T28] wacom 0003:056A:00D5.0026: unknown main item tag 0x0
[ 1273.083102][   T28] wacom 0003:056A:00D5.0026: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[ 1273.095388][   T28] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D5.0026/input/input78
[ 1273.283314][ T9511] usb 2-1: USB disconnect, device number 48
03:37:42 executing program 2:
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000208000406b1d010140000102030109029200030100000009040000000101", @ANYRESHEX], 0x0)

[ 1273.543417][   T28] wacom 0003:056A:00D5.0026: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.0-1/input0
03:37:42 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)

[ 1273.698495][   T28] usb 1-1: USB disconnect, device number 56
[ 1273.994187][T32540] IPVS: ftp: loaded support on port[0] = 21
03:37:43 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040702000109021b000100000000090400000157eb4b00090586a3"], 0x0)

03:37:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x6, "d313"}]}}, 0x0}, 0x0)

03:37:43 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPGRP(r0, 0x5407, &(0x7f0000000080))

[ 1274.597366][T21908] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1274.970102][T21908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1274.980742][T21908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1275.108096][   T28] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1275.368017][   T28] usb 2-1: Using ep0 maxpacket: 32
[ 1275.457499][ T9511] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1275.472362][T21908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1275.481820][T21908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1275.490327][T21908] usb 3-1: Product: syz
[ 1275.494704][T21908] usb 3-1: Manufacturer: syz
[ 1275.498560][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1275.499627][T21908] usb 3-1: SerialNumber: syz
[ 1275.510466][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1275.740034][   T28] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01
[ 1275.749684][   T28] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0
[ 1275.757967][   T28] usb 2-1: Product: syz
[ 1275.758148][ T9511] usb 1-1: Using ep0 maxpacket: 32
[ 1275.762260][   T28] usb 2-1: Manufacturer: syz
[ 1275.873599][   T28] usb 2-1: config 0 descriptor??
[ 1275.891254][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1275.902555][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1275.912687][ T9511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1275.925733][ T9511] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40
[ 1275.934971][ T9511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.120512][ T9511] usb 1-1: config 0 descriptor??
[ 1276.148442][T21908] usb 3-1: Audio class v2/v3 interfaces need an interface association
[ 1276.158787][T21908] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[ 1276.170283][   T28] usb 2-1: USB disconnect, device number 49
[ 1276.228705][T21908] usb 3-1: USB disconnect, device number 37
[ 1276.604348][ T9511] wacom 0003:056A:00D5.0027: unknown main item tag 0x0
[ 1276.612268][ T9511] wacom 0003:056A:00D5.0027: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[ 1276.624995][ T9511] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D5.0027/input/input82
[ 1276.849397][ T9511] wacom 0003:056A:00D5.0027: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.0-1/input0
[ 1276.947279][T26231] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1276.981561][ T9511] usb 1-1: USB disconnect, device number 57
[ 1277.330351][T26231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.341949][T26231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1277.521031][T26231] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1277.530484][T26231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.538914][T26231] usb 3-1: Product: syz
[ 1277.543220][T26231] usb 3-1: Manufacturer: syz
[ 1277.548084][T26231] usb 3-1: SerialNumber: syz
[ 1277.558084][T25657] tipc: TX() has been purged, node left!
[ 1277.581336][T25657] tipc: TX() has been purged, node left!
[ 1277.714358][T26231] usb 3-1: can't set config #1, error -71
[ 1277.723434][T26231] usb 3-1: USB disconnect, device number 38
03:37:47 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x0)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = dup2(r3, r2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25070000000500380005002df100000000080023005b37a9f3057a7d344f7629344678cdc713d30405f76b232d0dc3186016ff5d65c2236061bbd4c7f28d92e261617b1d6c8f0afa62deefd041c1e9a16ebf427d2f9f8c7c44ecd6485fb6bf265f83d85847d2aa007ead959ad243b129a3d9ed956657dd7814fc1133dc23bc42bd507d1a3175015331a0dfb24a047f6dee72089ca1c6acfdc3af4b7def97bab249e8f7b132b7481f5534aee1179d9827c8f4762498a1601ccf985e9a713615cb989041a62731f9c7df6b0a9d8cc087f69e3d491f53", @ANYRES32=0x0, @ANYBLOB="050000000000000000003c00060000008712df3910f100c2e746182d39220418278bf3e320fdfbd3ed943af69bc6b3234fe3ea97bc26c903ef966743303f3e3a1cdf9937082ed6d07d59edd94650745f370f436bc680a5855244824c8efa84f1810a0aa569030f71fe1ba850f0dc2044a64d4ced5409c473f462d9bbcdd4c7e7653271870c708127cbccc98425e0988b533abc09c68e9da74873e47eccf9ddfa71cc1464343b016ef0088c62af1da708eef8a59c1a198e96b51c"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d5)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f00000017c0), 0x3da, 0x14a, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000180))
bind$can_raw(r4, 0x0, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000100))
connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58)

03:37:47 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3304)

03:37:47 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3e83c20cd06020201040702000109021b000100000000090400000157eb4b00090586a3"], 0x0)

03:37:47 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)

03:37:47 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x6, "d313"}]}}, 0x0}, 0x0)

03:37:47 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x101)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x6, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

03:37:47 executing program 4:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0)

03:37:47 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b157748180a2ed6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff010000000000000000000000000001080007000000000024000600140004"], 0xb8}}, 0x0)

[ 1278.558372][T21908] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1278.650154][ T9512] usb 2-1: new high-speed USB device number 50 using dummy_hcd
03:37:47 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="e1050000000000", 0x7}, {&(0x7f0000000340)="8e53e343286558", 0x7}], 0x2)

[ 1278.797381][T21908] usb 1-1: Using ep0 maxpacket: 32
[ 1278.867698][ T3093] block nbd4: Attempted send on invalid socket
[ 1278.873963][ T3093] print_req_error: 9 callbacks suppressed
[ 1278.874032][ T3093] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1278.889105][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1278.902208][ T9512] usb 2-1: Using ep0 maxpacket: 32
[ 1278.912952][T32650] MINIX-fs: unable to read superblock
[ 1278.938093][T21908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1278.949245][T21908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1278.959305][T21908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1278.972310][T21908] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40
03:37:47 executing program 4:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0)

[ 1278.981552][T21908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.994376][T21908] usb 1-1: config 0 descriptor??
[ 1278.994659][ T3092] block nbd4: Attempted send on invalid socket
[ 1279.006170][ T3092] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1279.023798][T32654] MINIX-fs: unable to read superblock
[ 1279.062552][ T9512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1279.074034][ T9512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1279.228885][ T9512] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice= 4.01
[ 1279.238344][ T9512] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=0
[ 1279.253611][ T9512] usb 2-1: Product: syz
[ 1279.258080][ T9512] usb 2-1: Manufacturer: syz
03:37:48 executing program 3:
r0 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xe, 0x0, "5ebe3a837bc02f99aab0ace0508eb7b7f26d9ce27f971d4bc964308ee92e6f6a"})

[ 1279.408357][ T9512] usb 2-1: config 0 descriptor??
[ 1279.484636][T21908] wacom 0003:056A:00D5.0028: unknown main item tag 0x0
[ 1279.492640][T21908] wacom 0003:056A:00D5.0028: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[ 1279.504834][T21908] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D5.0028/input/input86
[ 1279.647701][ T3093] block nbd4: Attempted send on invalid socket
[ 1279.654010][ T3093] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1279.668305][T32668] MINIX-fs: unable to read superblock
[ 1279.673626][ T9512] usb 2-1: USB disconnect, device number 50
[ 1279.696153][T21908] wacom 0003:056A:00D5.0028: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.0-1/input0
[ 1279.757720][T21908] usb 1-1: USB disconnect, device number 58
03:37:48 executing program 4:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0)

[ 1280.775300][ T3093] block nbd4: Attempted send on invalid socket
[ 1280.781848][ T3093] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1280.816103][T32704] MINIX-fs: unable to read superblock
[ 1281.275018][T32708] IPVS: ftp: loaded support on port[0] = 21
03:37:51 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="e1050000000000", 0x7}, {&(0x7f0000000340)="8e53e343286558", 0x7}], 0x2)

03:37:51 executing program 3:
r0 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xe, 0x0, "5ebe3a837bc02f99aab0ace0508eb7b7f26d9ce27f971d4bc964308ee92e6f6a"})

03:37:51 executing program 4:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0)

03:37:51 executing program 0:
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x0)
r1 = socket(0x10, 0x400000000080803, 0x0)
write(r1, &(0x7f0000000240)="1b0000001a0125f00485bc04fef7001d0a0b49ff70880000800328", 0x1b)
getsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
socket(0x2, 0x803, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f00000001c0)=0x44)
socket(0x1d, 0x803, 0x2)
socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8189}, 0x20040800)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000010000104b1dd9492497abc06000000e5", @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x48, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x194, 0x10, 0x401, 0x80, 0x0, {0x0, 0x0, 0x0, r6, 0x2000}, [@IFLA_LINKINFO={0x16c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x15c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf8, 0x9f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}]}, @IFLA_VLAN_EGRESS_QOS={0x94, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x99b, 0x3f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3e0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff34, 0x724}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xd2c}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf42c, 0x83}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x44, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x95bb, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x807}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1008}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x194}}, 0x0)

03:37:51 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3}, 0x8)

[ 1282.244898][T25657] tipc: TX() has been purged, node left!
03:37:51 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='bpf\x00', 0x0, &(0x7f0000003000)=ANY=[@ANYBLOB=',obj_user=/-),context=root,fscontext='])

[ 1282.388449][T32741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=32741 comm=syz-executor.0
[ 1282.403128][ T3092] block nbd4: Attempted send on invalid socket
[ 1282.409734][ T3092] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1282.489832][T32739] MINIX-fs: unable to read superblock
[ 1282.552571][T32741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:37:51 executing program 3:
r0 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xe, 0x0, "5ebe3a837bc02f99aab0ace0508eb7b7f26d9ce27f971d4bc964308ee92e6f6a"})

03:37:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01db53000000000000000100000004000180100002800c00018008000180"], 0x28}}, 0x0)

03:37:51 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="e1050000000000", 0x7}, {&(0x7f0000000340)="8e53e343286558", 0x7}], 0x2)

03:37:51 executing program 1:
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000005c0)=[&(0x7f0000000080)='=de\xfdh\xc2\x03\x10\r#\x00'])

[ 1282.928178][T32745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=32745 comm=syz-executor.0
[ 1283.045499][T32763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:37:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x1, 0x0, 0x80000004}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

03:37:52 executing program 3:
r0 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xe, 0x0, "5ebe3a837bc02f99aab0ace0508eb7b7f26d9ce27f971d4bc964308ee92e6f6a"})

03:37:52 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = dup(r0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
write$P9_RLINK(r1, &(0x7f0000000080)={0x7}, 0x7)

03:37:52 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffff7f7}]})
readahead(r0, 0x0, 0x0)

03:37:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x1, 0x0, 0x80000004}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[ 1284.067436][  T320] input: syz1 as /devices/virtual/input/input89
[ 1284.135892][  T320] input: syz1 as /devices/virtual/input/input90
03:37:53 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6gre0\x00', 0x10)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0)

03:37:53 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = dup(r0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
write$P9_RLINK(r1, &(0x7f0000000080)={0x7}, 0x7)

[ 1284.876298][  T341] input: syz1 as /devices/virtual/input/input91
03:37:54 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b", 0xa, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)=""/229, 0xe5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)

03:37:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x1, 0x0, 0x80000004}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

03:37:54 executing program 3:
setgroups(0xfffffffffffffd97, 0x0)

03:37:54 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = dup(r0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
write$P9_RLINK(r1, &(0x7f0000000080)={0x7}, 0x7)

03:37:54 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="e1050000000000", 0x7}, {&(0x7f0000000340)="8e53e343286558", 0x7}], 0x2)

[ 1285.952576][  T354] SELinux: security_context_str_to_sid() failed for (dev bpf, type bpf) errno=-22
[ 1285.984126][  T354] SELinux: security_context_str_to_sid() failed for (dev bpf, type bpf) errno=-22
03:37:54 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x8}}, 0x50)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[ 1286.202060][  T370] input: syz1 as /devices/virtual/input/input92
03:37:55 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x6)

03:37:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x1, 0x0, 0x80000004}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

03:37:55 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = dup(r0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
write$P9_RLINK(r1, &(0x7f0000000080)={0x7}, 0x7)

03:37:55 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x8}}, 0x50)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[ 1287.002236][  T387] input: syz1 as /devices/virtual/input/input93
03:37:56 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x18, r0, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4, 0x8}]}, 0x18}}, 0x0)

03:37:56 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x8}}, 0x50)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

03:37:57 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b", 0xa, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)=""/229, 0xe5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)

03:37:57 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0, 0x0)

03:37:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffffffff}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x58}}, 0x0)

03:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@dev, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010100}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:37:57 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x6)

03:37:57 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x8}}, 0x50)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[ 1288.680938][  T423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1288.811597][  T431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:37:58 executing program 0:
clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)

03:37:58 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000000)="0005ab080000002e", 0x8)

03:37:58 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0, 0x0)

03:37:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r1, &(0x7f0000000740)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, &(0x7f0000000080))

[ 1289.355134][ T9086] kworker/dying (9086) used greatest stack depth: 2600 bytes left
03:37:58 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x6)

03:37:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7})
ioctl(r0, 0x8b32, &(0x7f0000000040))

03:37:59 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b", 0xa, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)=""/229, 0xe5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)

03:37:59 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000000)="0005ab080000002e", 0x8)

03:37:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r1, &(0x7f0000000740)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, &(0x7f0000000080))

03:37:59 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0, 0x0)

03:37:59 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7}, 0x7)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000000))

03:37:59 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x6)

03:38:00 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0, 0x0)

03:38:00 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000000)="0005ab080000002e", 0x8)

03:38:00 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="020181000fff0a000000ff45ac0480ffffffa500e931190000000000000680170003a6ffffff0a00000087770072003007006300000000000000008048da55aa", 0x40, 0x1c0}])

03:38:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r1, &(0x7f0000000740)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, &(0x7f0000000080))

03:38:00 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0xffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000430007031dfffd946fa2830020020a0009000000001d85680c1ba3a20400ff7e280000002600ffff", 0x2c}], 0x10000000000000e0}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffecd)

03:38:01 executing program 3:
syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="040000090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000003c0)="dfc1ea0eb8491c1b98ba", 0xa, 0x1d}], 0x8000, &(0x7f0000000600))

[ 1292.500380][  T552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=552 comm=syz-executor.4
[ 1292.514335][  T552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:38:02 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b", 0xa, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)=""/229, 0xe5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)

03:38:02 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000000)="0005ab080000002e", 0x8)

03:38:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r1, &(0x7f0000000740)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, &(0x7f0000000080))

03:38:02 executing program 0:
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x8)

03:38:02 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010100}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x4)

03:38:02 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, 0x0)

03:38:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7f499eb2ce77ac35})
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xffffffffffffffff, 0x0, 0xb00000000000000)
r3 = dup3(r0, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)={0x0, 0x3f00})

03:38:03 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x80045104, 0x0)

03:38:03 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000))

03:38:03 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000100)="ff02040000eeff00000000000000000000000000000202053101fafee53466db1000000000000000290000003e000000", 0x30)

[ 1294.472445][   T29] audit: type=1326 audit(1597808283.350:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=591 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f36549 code=0x0
[ 1294.600225][  T594] tap0: tun_chr_ioctl cmd 2147767506
03:38:03 executing program 3:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

03:38:03 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0)

[ 1295.255585][   T29] audit: type=1326 audit(1597808284.140:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=591 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f36549 code=0x0
03:38:04 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000080)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000040), 0x4)

03:38:04 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001e"], 0x24}}, 0x0)

03:38:04 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0)

03:38:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvfrom$netrom(r1, &(0x7f0000000000)=""/30, 0x1e, 0x0, 0x0, 0x0)

03:38:04 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
flistxattr(r0, &(0x7f0000000140)=""/4, 0x4)

03:38:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0)
epoll_create1(0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
write$sndseq(r0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

03:38:05 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0)

03:38:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d282"], 0x34)
sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "39980cfd42119cc4e1020300"/25}, 0x24)

03:38:05 executing program 3:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:05 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8)

03:38:05 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc)
mlock(&(0x7f0000400000/0x4000)=nil, 0x4000)
mbind(&(0x7f00003f4000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2)

03:38:05 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x7)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9c, &(0x7f0000000100), &(0x7f0000000080)=0x4)

03:38:05 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0)

03:38:05 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xe0829, 0x0)

[ 1296.977914][   T28] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1297.237459][   T28] usb 4-1: Using ep0 maxpacket: 16
[ 1297.389884][   T28] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1297.399077][   T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1297.409963][   T28] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
03:38:06 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x2)
getsockopt(r0, 0x0, 0xd2, 0x0, 0x0)

03:38:06 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
timerfd_create(0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb59f6aa90fbec56b78a52078c1eed0f3"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

[ 1297.648534][   T28] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1297.658903][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.667218][   T28] usb 4-1: Product: syz
[ 1297.671512][   T28] usb 4-1: Manufacturer: syz
[ 1297.676243][   T28] usb 4-1: SerialNumber: syz
[ 1297.803572][   T28] usb 4-1: config 0 descriptor??
03:38:06 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8)

[ 1297.877698][   T28] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[ 1298.054591][ T9087] usb 4-1: USB disconnect, device number 69
[ 1298.260650][  T681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1298.858671][   T28] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1299.116324][   T28] usb 4-1: Using ep0 maxpacket: 16
[ 1299.238041][   T28] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1299.247272][   T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1299.258317][   T28] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 1299.438736][   T28] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1299.448268][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.456410][   T28] usb 4-1: Product: syz
[ 1299.460916][   T28] usb 4-1: Manufacturer: syz
[ 1299.465644][   T28] usb 4-1: SerialNumber: syz
[ 1299.553251][   T28] usb 4-1: config 0 descriptor??
[ 1299.584168][ T8718] kworker/dying (8718) used greatest stack depth: 2296 bytes left
[ 1299.641946][   T28] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[ 1299.781069][T21908] usb 4-1: USB disconnect, device number 70
03:38:08 executing program 5:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:08 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x7)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9c, &(0x7f0000000100), &(0x7f0000000080)=0x4)

03:38:08 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @empty, @broadcast, @broadcast]}]}}}}}}}, 0x0)

03:38:08 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8)

03:38:08 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
timerfd_create(0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb59f6aa90fbec56b78a52078c1eed0f3"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

03:38:08 executing program 3:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

[ 1300.074000][  T715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:38:09 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900050200000000000000001d01"], 0x64}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0)

03:38:09 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
timerfd_create(0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb59f6aa90fbec56b78a52078c1eed0f3"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

[ 1300.409198][T21908] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1300.424700][  T727] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1300.554522][  T729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:38:09 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x7)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9c, &(0x7f0000000100), &(0x7f0000000080)=0x4)

03:38:09 executing program 1:
gettid()
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
rt_sigsuspend(&(0x7f0000000040)={[0x2]}, 0x8)

03:38:10 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8)

[ 1301.346129][T21908] usb 4-1: Using ep0 maxpacket: 16
[ 1301.467550][T21908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1301.476681][T21908] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1301.487536][T21908] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
03:38:10 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
timerfd_create(0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb59f6aa90fbec56b78a52078c1eed0f3"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

[ 1301.688570][T21908] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1301.698290][T21908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.706461][T21908] usb 4-1: Product: syz
[ 1301.710950][T21908] usb 4-1: Manufacturer: syz
[ 1301.715743][T21908] usb 4-1: SerialNumber: syz
[ 1301.785618][T21908] usb 4-1: config 0 descriptor??
[ 1301.836686][T21908] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[ 1301.925523][  T751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1302.095962][   T28] usb 4-1: USB disconnect, device number 71
[ 1302.718177][   T28] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1303.077303][   T28] usb 6-1: Using ep0 maxpacket: 16
[ 1303.227949][   T28] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1303.237049][   T28] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1303.247893][   T28] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 1303.417690][   T28] usb 6-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1303.426880][   T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1303.435316][   T28] usb 6-1: Product: syz
[ 1303.439835][   T28] usb 6-1: Manufacturer: syz
[ 1303.444568][   T28] usb 6-1: SerialNumber: syz
[ 1303.458389][   T28] usb 6-1: config 0 descriptor??
[ 1303.505210][   T28] ti_usb_3410_5052 6-1:0.0: required endpoints missing
[ 1303.713565][T21908] usb 6-1: USB disconnect, device number 25
03:38:13 executing program 5:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:13 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x7)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9c, &(0x7f0000000100), &(0x7f0000000080)=0x4)

03:38:13 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
userfaultfd(0x0)
r1 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

03:38:13 executing program 3:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:13 executing program 0:
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc605a0002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1}, 0x0)

03:38:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31}, 0x24}}, 0x0)

[ 1304.394435][  T789] validate_nla: 7 callbacks suppressed
[ 1304.394470][  T789] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[ 1304.443412][  T793] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
03:38:13 executing program 2:
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
sync()

03:38:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x61a, 0x0, 0x0, 0x0, 0x0, "610b479b7c6431d95904b628a5abb8c4262a00"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x4}], 0x1)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x3604, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"})

03:38:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

[ 1304.687448][   T28] usb 4-1: new high-speed USB device number 72 using dummy_hcd
03:38:13 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

[ 1304.957306][   T28] usb 4-1: Using ep0 maxpacket: 16
[ 1305.081837][   T28] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1305.091168][   T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1305.101951][   T28] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
03:38:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x61a, 0x0, 0x0, 0x0, 0x0, "610b479b7c6431d95904b628a5abb8c4262a00"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x4}], 0x1)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x3604, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"})

03:38:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

[ 1305.388390][   T28] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1305.397769][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.405897][   T28] usb 4-1: Product: syz
[ 1305.410426][   T28] usb 4-1: Manufacturer: syz
[ 1305.415154][   T28] usb 4-1: SerialNumber: syz
[ 1305.555352][   T28] usb 4-1: config 0 descriptor??
[ 1305.604862][   T28] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[ 1305.843551][   T28] usb 4-1: USB disconnect, device number 72
[ 1306.158814][T26046] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1306.397441][T26046] usb 6-1: Using ep0 maxpacket: 16
[ 1306.517440][T26046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1306.526479][T26046] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1306.537335][T26046] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 1306.708238][T26046] usb 6-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1306.717915][T26046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.726008][T26046] usb 6-1: Product: syz
[ 1306.730481][T26046] usb 6-1: Manufacturer: syz
[ 1306.735238][T26046] usb 6-1: SerialNumber: syz
[ 1306.744442][T26046] usb 6-1: config 0 descriptor??
[ 1306.793574][T26046] ti_usb_3410_5052 6-1:0.0: required endpoints missing
[ 1307.028045][T21908] usb 6-1: USB disconnect, device number 26
03:38:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:16 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

03:38:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x61a, 0x0, 0x0, 0x0, 0x0, "610b479b7c6431d95904b628a5abb8c4262a00"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x4}], 0x1)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x3604, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"})

03:38:16 executing program 3:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x45, 0xb, 0x57, 0x10, 0x110a, 0x1131, 0x49e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xad, 0xf4, 0xee, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x1, 0xb, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x6}}, {}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x6, 0x0, 0x0)

03:38:16 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

03:38:16 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

03:38:16 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

03:38:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x61a, 0x0, 0x0, 0x0, 0x0, "610b479b7c6431d95904b628a5abb8c4262a00"})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x4}], 0x1)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x3604, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"})

[ 1307.950642][ T9512] usb 4-1: new high-speed USB device number 73 using dummy_hcd
03:38:17 executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00'}, {@multicast1}}, 0x44)

03:38:17 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

03:38:17 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

[ 1308.197313][ T9512] usb 4-1: Using ep0 maxpacket: 16
[ 1308.318205][ T9512] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1308.327573][ T9512] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1308.338411][ T9512] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
03:38:17 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

[ 1308.436436][  T856] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:0
[ 1308.455861][  T857] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:0
[ 1308.532344][ T9512] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1308.542304][ T9512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.550636][ T9512] usb 4-1: Product: syz
[ 1308.554936][ T9512] usb 4-1: Manufacturer: syz
[ 1308.559827][ T9512] usb 4-1: SerialNumber: syz
[ 1308.713703][ T9512] usb 4-1: config 0 descriptor??
[ 1308.763119][ T9512] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[ 1308.994896][ T9512] usb 4-1: USB disconnect, device number 73
[ 1309.447782][T21908] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1309.687194][T21908] usb 6-1: Using ep0 maxpacket: 16
[ 1309.807486][T21908] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1309.816541][T21908] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1309.834125][T21908] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 1309.999652][T21908] usb 6-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=49.e9
[ 1310.008958][T21908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.017318][T21908] usb 6-1: Product: syz
[ 1310.021617][T21908] usb 6-1: Manufacturer: syz
[ 1310.026347][T21908] usb 6-1: SerialNumber: syz
[ 1310.035941][T21908] usb 6-1: config 0 descriptor??
[ 1310.081932][T21908] ti_usb_3410_5052 6-1:0.0: required endpoints missing
[ 1310.295423][T26233] usb 6-1: USB disconnect, device number 27
03:38:19 executing program 3:
clock_settime(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffd})

03:38:19 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

03:38:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="240000001a0007031dfffd946f6105000a0000006720020077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0)

03:38:19 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2fc0}}]}]}}]}, 0x88}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0)

03:38:19 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

[ 1310.899397][  T896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1310.943037][  T896] policy can only be matched on NF_INET_PRE_ROUTING
[ 1310.943057][  T896] unable to load match
[ 1310.985886][  T896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1311.023670][  T908] policy can only be matched on NF_INET_PRE_ROUTING
[ 1311.023699][  T908] unable to load match
03:38:20 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x9}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

03:38:20 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="040028000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffe, 0x600, 0x4})

03:38:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4ca23e00, &(0x7f0000000080)=[{&(0x7f0000000840)="2300000034000511d25a80648c63940d0424fc60040018000a001100022f004837153e", 0x23}], 0x1}, 0x0)

03:38:20 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:38:20 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="040028000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffe, 0x600, 0x4})

03:38:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047440, 0x0)

03:38:20 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

03:38:20 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="040028000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffe, 0x600, 0x4})

03:38:21 executing program 5:
clock_nanosleep(0x3cb483effefe2173, 0x0, 0x0, 0x0)

03:38:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0)

03:38:22 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="040028000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffe, 0x600, 0x4})

03:38:22 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

03:38:22 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/251, 0xfb)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

03:38:22 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214)

03:38:22 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010102, @empty}, 0xc)

03:38:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x4004851}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

03:38:22 executing program 5:
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:38:23 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
getpeername$tipc(r0, &(0x7f0000000200)=@id, &(0x7f0000000080)=0xffffffffffffffc6)

03:38:23 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000004104000600200000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0)

03:38:23 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214)

03:38:23 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
getpeername$tipc(r0, &(0x7f0000000200)=@id, &(0x7f0000000080)=0xffffffffffffffc6)

03:38:23 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

03:38:23 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214)

[ 1315.010017][  T984] IPVS: ftp: loaded support on port[0] = 21
[ 1315.269690][  T986] IPVS: ftp: loaded support on port[0] = 21
03:38:26 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b1b5b42", 0x8}], 0x1)

03:38:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9})

03:38:26 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)

03:38:26 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
getpeername$tipc(r0, &(0x7f0000000200)=@id, &(0x7f0000000080)=0xffffffffffffffc6)

03:38:26 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214)

03:38:26 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

03:38:26 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
getpeername$tipc(r0, &(0x7f0000000200)=@id, &(0x7f0000000080)=0xffffffffffffffc6)

03:38:26 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b1b5b42", 0x8}], 0x1)

[ 1317.832025][ T1043] =====================================================
[ 1317.832124][ T1043] BUG: KMSAN: uninit-value in vga16fb_imageblit+0x125e/0x20c0
[ 1317.832155][ T1043] CPU: 1 PID: 1043 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0
[ 1317.832169][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1317.832179][ T1043] Call Trace:
[ 1317.832213][ T1043]  dump_stack+0x21c/0x280
[ 1317.832251][ T1043]  kmsan_report+0xf7/0x1e0
[ 1317.832287][ T1043]  __msan_warning+0x58/0xa0
[ 1317.832321][ T1043]  vga16fb_imageblit+0x125e/0x20c0
[ 1317.832371][ T1043]  ? vga16fb_copyarea+0x2000/0x2000
[ 1317.832395][ T1043]  bit_putcs+0x3039/0x3390
[ 1317.832526][ T1043]  ? fb_get_color_depth+0x291/0x440
[ 1317.832556][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.832585][ T1043]  fbcon_putcs+0x121c/0x1250
[ 1317.832611][ T1043]  ? bit_clear+0x830/0x830
[ 1317.832660][ T1043]  ? fbcon_scrolldelta+0x2ad0/0x2ad0
[ 1317.832733][ T1043]  do_update_region+0x996/0xc10
[ 1317.832794][ T1043]  redraw_screen+0x17a4/0x2980
[ 1317.832833][ T1043]  ? mutex_unlock+0x38/0x90
[ 1317.832877][ T1043]  vc_do_resize+0x36a8/0x38f0
[ 1317.832977][ T1043]  vc_resize+0xc3/0xe0
[ 1317.833010][ T1043]  vt_ioctl+0x6651/0x67c0
[ 1317.833060][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.833090][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.833120][ T1043]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1317.833178][ T1043]  ? cred_has_capability+0x67f/0x7a0
[ 1317.833216][ T1043]  ? __msan_metadata_ptr_for_load_1+0x3/0x20
[ 1317.833275][ T1043]  ? cap_capable+0x3bc/0x410
[ 1317.833309][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.833339][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.833369][ T1043]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1317.833419][ T1043]  ? security_capable+0x1dd/0x230
[ 1317.833449][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.833479][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.833511][ T1043]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[ 1317.833591][ T1043]  ? capable+0x160/0x210
[ 1317.833623][ T1043]  vt_compat_ioctl+0x59b/0x1040
[ 1317.833667][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.833705][ T1043]  ? vc_SAK+0x2c0/0x2c0
[ 1317.833756][ T1043]  tty_compat_ioctl+0x74b/0x1660
[ 1317.833811][ T1043]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1317.833842][ T1043]  ? security_file_ioctl+0x1bd/0x210
[ 1317.833867][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.833896][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.833922][ T1043]  ? tty_poll+0x4d0/0x4d0
[ 1317.833977][ T1043]  __se_compat_sys_ioctl+0x55f/0x1100
[ 1317.834026][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.834057][ T1043]  __ia32_compat_sys_ioctl+0x4a/0x70
[ 1317.834088][ T1043]  __do_fast_syscall_32+0x2af/0x480
[ 1317.834129][ T1043]  do_fast_syscall_32+0x6b/0xd0
[ 1317.834159][ T1043]  do_SYSENTER_32+0x73/0x90
[ 1317.834191][ T1043]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1317.834212][ T1043] RIP: 0023:0xf7f36549
[ 1317.834223][ T1043] Code: Bad RIP value.
[ 1317.834242][ T1043] RSP: 002b:00000000f55300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1317.834267][ T1043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000560a
[ 1317.834282][ T1043] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000
[ 1317.834297][ T1043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1317.834311][ T1043] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1317.834326][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1317.834355][ T1043] 
[ 1317.834363][ T1043] Uninit was stored to memory at:
[ 1317.834390][ T1043]  kmsan_internal_chain_origin+0xad/0x130
[ 1317.834412][ T1043]  __msan_chain_origin+0x50/0x90
[ 1317.834433][ T1043]  bit_putcs+0x2709/0x3390
[ 1317.834453][ T1043]  fbcon_putcs+0x121c/0x1250
[ 1317.834477][ T1043]  do_update_region+0x996/0xc10
[ 1317.834499][ T1043]  redraw_screen+0x17a4/0x2980
[ 1317.834522][ T1043]  vc_do_resize+0x36a8/0x38f0
[ 1317.834543][ T1043]  vc_resize+0xc3/0xe0
[ 1317.834563][ T1043]  vt_ioctl+0x6651/0x67c0
[ 1317.834582][ T1043]  vt_compat_ioctl+0x59b/0x1040
[ 1317.834602][ T1043]  tty_compat_ioctl+0x74b/0x1660
[ 1317.834624][ T1043]  __se_compat_sys_ioctl+0x55f/0x1100
[ 1317.834644][ T1043]  __ia32_compat_sys_ioctl+0x4a/0x70
[ 1317.834666][ T1043]  __do_fast_syscall_32+0x2af/0x480
[ 1317.834694][ T1043]  do_fast_syscall_32+0x6b/0xd0
[ 1317.834719][ T1043]  do_SYSENTER_32+0x73/0x90
[ 1317.834749][ T1043]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1317.834755][ T1043] 
[ 1317.834764][ T1043] Uninit was created at:
[ 1317.834786][ T1043]  kmsan_internal_poison_shadow+0x66/0xd0
[ 1317.834808][ T1043]  kmsan_slab_alloc+0x8a/0xe0
[ 1317.834841][ T1043]  __kmalloc+0x312/0x410
[ 1317.834862][ T1043]  fbcon_set_font+0x5ad/0xfb0
[ 1317.834885][ T1043]  con_font_op+0x1e59/0x2290
[ 1317.834904][ T1043]  vt_ioctl+0x99e/0x67c0
[ 1317.834925][ T1043]  vt_compat_ioctl+0x59b/0x1040
[ 1317.834945][ T1043]  tty_compat_ioctl+0x74b/0x1660
[ 1317.834966][ T1043]  __se_compat_sys_ioctl+0x55f/0x1100
[ 1317.834985][ T1043]  __ia32_compat_sys_ioctl+0x4a/0x70
[ 1317.835008][ T1043]  __do_fast_syscall_32+0x2af/0x480
[ 1317.835032][ T1043]  do_fast_syscall_32+0x6b/0xd0
[ 1317.835055][ T1043]  do_SYSENTER_32+0x73/0x90
[ 1317.835086][ T1043]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1317.835095][ T1043] =====================================================
[ 1317.835104][ T1043] Disabling lock debugging due to kernel taint
[ 1317.835120][ T1043] Kernel panic - not syncing: panic_on_warn set ...
[ 1317.835148][ T1043] CPU: 1 PID: 1043 Comm: syz-executor.4 Tainted: G    B             5.8.0-rc5-syzkaller #0
[ 1317.835160][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1317.835168][ T1043] Call Trace:
[ 1317.835197][ T1043]  dump_stack+0x21c/0x280
[ 1317.835243][ T1043]  panic+0x4d7/0xef7
[ 1317.835294][ T1043]  ? add_taint+0x17c/0x210
[ 1317.835330][ T1043]  kmsan_report+0x1df/0x1e0
[ 1317.835363][ T1043]  __msan_warning+0x58/0xa0
[ 1317.835395][ T1043]  vga16fb_imageblit+0x125e/0x20c0
[ 1317.835445][ T1043]  ? vga16fb_copyarea+0x2000/0x2000
[ 1317.835467][ T1043]  bit_putcs+0x3039/0x3390
[ 1317.835568][ T1043]  ? fb_get_color_depth+0x291/0x440
[ 1317.835595][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.835626][ T1043]  fbcon_putcs+0x121c/0x1250
[ 1317.835651][ T1043]  ? bit_clear+0x830/0x830
[ 1317.835705][ T1043]  ? fbcon_scrolldelta+0x2ad0/0x2ad0
[ 1317.835733][ T1043]  do_update_region+0x996/0xc10
[ 1317.835792][ T1043]  redraw_screen+0x17a4/0x2980
[ 1317.835831][ T1043]  ? mutex_unlock+0x38/0x90
[ 1317.835874][ T1043]  vc_do_resize+0x36a8/0x38f0
[ 1317.835966][ T1043]  vc_resize+0xc3/0xe0
[ 1317.835998][ T1043]  vt_ioctl+0x6651/0x67c0
[ 1317.836047][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836075][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.836103][ T1043]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1317.836129][ T1043]  ? cred_has_capability+0x67f/0x7a0
[ 1317.836166][ T1043]  ? __msan_metadata_ptr_for_load_1+0x3/0x20
[ 1317.836197][ T1043]  ? cap_capable+0x3bc/0x410
[ 1317.836228][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836255][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.836282][ T1043]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1317.836307][ T1043]  ? security_capable+0x1dd/0x230
[ 1317.836334][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836361][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.836388][ T1043]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[ 1317.836413][ T1043]  ? capable+0x160/0x210
[ 1317.836440][ T1043]  vt_compat_ioctl+0x59b/0x1040
[ 1317.836477][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836504][ T1043]  ? vc_SAK+0x2c0/0x2c0
[ 1317.836527][ T1043]  tty_compat_ioctl+0x74b/0x1660
[ 1317.836576][ T1043]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1317.836599][ T1043]  ? security_file_ioctl+0x1bd/0x210
[ 1317.836624][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836651][ T1043]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1317.836675][ T1043]  ? tty_poll+0x4d0/0x4d0
[ 1317.836716][ T1043]  __se_compat_sys_ioctl+0x55f/0x1100
[ 1317.836764][ T1043]  ? kmsan_get_metadata+0x116/0x180
[ 1317.836794][ T1043]  __ia32_compat_sys_ioctl+0x4a/0x70
[ 1317.836822][ T1043]  __do_fast_syscall_32+0x2af/0x480
[ 1317.836866][ T1043]  do_fast_syscall_32+0x6b/0xd0
[ 1317.836897][ T1043]  do_SYSENTER_32+0x73/0x90
[ 1317.836928][ T1043]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 1317.836945][ T1043] RIP: 0023:0xf7f36549
[ 1317.836953][ T1043] Code: Bad RIP value.
[ 1317.836967][ T1043] RSP: 002b:00000000f55300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1317.836989][ T1043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000560a
[ 1317.837004][ T1043] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000
[ 1317.837018][ T1043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1317.837033][ T1043] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1317.837047][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1317.838128][ T1043] Kernel Offset: disabled
[ 1318.683108][ T1043] Rebooting in 86400 seconds..