tl$KVM_RUN(r1, 0xae80, 0x0) 06:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}, {0x0}, {0x0}, {&(0x7f0000002cc0)=""/250, 0xfa}], 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x6000000000000000, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00'}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffd8, 0x0) 06:11:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:00 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000002bc0)=""/200, 0xc8}, {&(0x7f0000002cc0)=""/250, 0xfa}], 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x6000000000000000, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:11:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffd8, 0x0) 06:11:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00']}, 0x278) 06:11:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffd8, 0x0) 06:11:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="80200000000000e149388fb9b5cb8f18006600000600907864010102a3"]}) 06:11:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffd8, 0x0) 06:11:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x400454d9, &(0x7f0000000040)={'netdevsim0\x00'}) 06:11:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) [ 2410.930730][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.937123][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:11:09 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) 06:11:09 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000180)="8a5cb64d511bbba631e4739a8f4fbead14c9bda02d39e865aa5de28c60a398d8c2df6ee771b3f70ced85196dac93921b386b9e314c2b", 0x36}, {&(0x7f00000001c0)="cae84a9dfa1cc8cf0f508e754901b17d27f29a07b7d7978acaa7c449217d60a460375c56d4f092021629efbb345ab5bd7f29c063a59f6b777923da98ed3ec039c3bff4ea53fabf0ca59fa9905d5372fb19b306dd086471dfd9e5688b94bce9a25297487548f8eb3468bfbe3c74281a46354c1da11fd356251aa3a53c4420dc818ac7e8d8577002fa0d969785a725484efdac581e324e6f85baca9133b13b3d787d3e770fa6a2192820c44d53e60a274d2f113253d4d58424fa8c43874c31012c95ed1526602aa86d4f722af2ae5e", 0xce}, {&(0x7f00000002c0)="fb6a5cd076fb4884302d3d236b27471842ed9a13ba0241904d33890ecd5af51a190a134dc69d5905ad", 0x29}, {&(0x7f0000000300)="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", 0xc20}], 0x4}, 0x0) 06:11:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffd8, 0x0) 06:11:09 executing program 4: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b00)={0x11, 0x3, &(0x7f0000004940)=@framed, &(0x7f0000004980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:11:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000002240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x19, 0x3, [{0x0, 0x4, "9d3b01"}, {0x0, 0xe, "18e3142234233afd25de93a1"}]}]}}}], 0x50}}], 0x1, 0x0) 06:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffd8, 0x0) 06:11:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:09 executing program 0: socketpair(0x28, 0x0, 0x60e, &(0x7f00000001c0)) 06:11:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffd8, 0x0) 06:11:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}]}}) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000002bc0)=""/200, 0xc8}, {&(0x7f0000002cc0)=""/250, 0xfa}], 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x6000000000000000, 0x81, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x9000000000000000, 0x0, 0x0, 0x8, 0x6], 0x1000, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r0, 0x80047437, 0x0) 06:11:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:11:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:11:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCVHANGUP(r0, 0x5405, 0x0) 06:11:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x89a0, &(0x7f0000000180)) 06:11:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:11:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCVHANGUP(r0, 0x5405, 0x0) 06:11:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') write$UHID_CREATE(r0, 0x0, 0x0) 06:11:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004840)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xa}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 06:11:37 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 06:11:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) wait4(r3, &(0x7f0000000240), 0x1, &(0x7f0000000300)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 06:11:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/exec\x00') write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) keyctl$join(0x1, 0x0) 06:11:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:37 executing program 0: syz_emit_ethernet(0x4f, &(0x7f0000000180)={@empty, @local, @val, {@ipv4}}, 0x0) 06:11:37 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 06:11:37 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder0\x00'}) 06:11:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, 0x0, &(0x7f0000000000)) 06:11:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:37 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000005c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) 06:11:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000005c0)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) 06:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:46 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 06:11:46 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @random="69144c06b9ab", @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x0, 0x6, "3aee05", 0x44, 0x2f, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}, 0x0) 06:11:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 06:11:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:46 executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2$watch_queue(&(0x7f0000001340), 0x80) socket$can_j1939(0x1d, 0x2, 0x7) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pselect6(0x40, &(0x7f0000001640), &(0x7f0000001680)={0x6}, 0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740), 0x8}) 06:11:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 06:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000000)=@raw=[@call, @exit, @map_fd], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:11:54 executing program 1: add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 06:11:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:54 executing program 0: mknod(&(0x7f0000000040)='./file1\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x7001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 06:11:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:54 executing program 1: socket$isdn_base(0x22, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) 06:11:54 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) 06:11:54 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x339241, 0x0) 06:11:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:11:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) open(&(0x7f0000000100)='./bus\x00', 0x10000, 0x48) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3) sendmmsg(r6, &(0x7f0000004d80)=[{{0x0, 0xfd0c, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x7c00, 0x40080fe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) 06:12:02 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, "09184dc23e790b293169052c0dbbbc8cc924f511fc190f975adb7db5f4dc28954a0d3d9e4eca27f4ace3113732a22cbbbfec9d65545fe5cee750b9f2d847329c"}, 0x48, 0xfffffffffffffffd) 06:12:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:12:02 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 06:12:02 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x208000, 0x0) getsockname$qrtr(r0, 0x0, 0x0) 06:12:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:12:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TCFLSH(r0, 0x540b, 0x2) 06:12:03 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000200)) 06:12:03 executing program 1: select(0x40, &(0x7f0000000700), 0x0, &(0x7f0000000780)={0x7}, 0x0) 06:12:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x25fae, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1c00e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}}, 0x0) 06:12:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) [ 2464.774249][T15073] device ip_vti0 entered promiscuous mode [ 2464.780982][T15073] device vlan2 entered promiscuous mode [ 2464.793200][T15073] device ip_vti0 left promiscuous mode [ 2472.371348][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.377739][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:12:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "366d9f86150d63f8a028aef096c261806fbf165dc73eaf5e2cca2899489337307307412d403a84065aef1d9119bb2bb29538e94a1d3c40cd38597096b887d6f1"}, 0x48, r0) 06:12:11 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 06:12:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x25fae, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1c00e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}}, 0x0) 06:12:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x5}, 0x48) 06:12:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) [ 2472.872693][T15083] device ip_vti0 entered promiscuous mode [ 2472.883334][T15083] device vlan2 entered promiscuous mode [ 2472.906910][T15083] device ip_vti0 left promiscuous mode 06:12:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 06:12:11 executing program 1: write$snapshot(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x0, 0x4, &(0x7f0000001840)=@raw=[@cb_func, @map_idx], &(0x7f0000001880)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x8, 0x10, 0x0}, 0x80) 06:12:11 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:'], 0x9) 06:12:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:20 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:12:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x50080, 0x0) 06:12:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:20 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000200), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a40)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:12:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 06:12:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a208b"], 0x9) 06:12:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 06:12:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268}]}) 06:12:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x880) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 06:12:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, 0x0, 0x62) 06:12:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268}]}) 06:12:27 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) syz_clone3(&(0x7f0000002d40)={0x112000000, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40), {}, &(0x7f0000002b80)=""/236, 0xec, &(0x7f0000002c80)=""/122, &(0x7f0000002d00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) 06:12:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b2}]}) 06:12:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:27 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1b, 0x0, 0x0) 06:12:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268}]}) 06:12:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 06:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b2}]}) 06:12:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268}]}) 06:12:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 06:12:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2489.973577][T15193] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:12:37 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 06:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b2}]}) 06:12:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:37 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:12:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 06:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000013c0)={'sit0\x00', 0x0}) 06:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={0x0}}, 0x0) 06:12:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:37 executing program 0: getgroups(0x2, &(0x7f0000000240)=[0x0, 0x0]) 06:12:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 06:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b2}]}) [ 2498.961942][T15202] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:12:46 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, 0x0, 0x0) 06:12:46 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:12:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:46 executing program 4: getresgid(&(0x7f00000000c0), 0x0, 0x0) 06:12:46 executing program 1: socket$inet6(0xa, 0x1, 0x8001) 06:12:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, 0x0, 0x0) 06:12:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002240)={'ip6_vti0\x00', 0x0}) 06:12:46 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 06:12:46 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 06:12:46 executing program 0: syz_clone3(&(0x7f00000043c0)={0x120006000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:12:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) [ 2508.230220][T15250] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:12:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26d}]}) 06:12:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:52 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000000)) 06:12:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0x7, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getaddr={0x18}, 0x18}}, 0x0) 06:12:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:52 executing program 0: socketpair(0x1e, 0x0, 0x1ff, &(0x7f0000000080)) 06:12:52 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:12:52 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, 0x0, @d}, 0xfffff, 0xfffffffffffffffc) 06:12:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:12:52 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 06:12:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 06:12:52 executing program 4: syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) 06:12:59 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x7, &(0x7f0000000ac0)=@framed={{}, [@cb_func, @btf_id]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:12:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005300)={0x2020}, 0x2020) 06:12:59 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x14, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:12:59 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000040) 06:12:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:00 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 06:13:00 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 06:13:00 executing program 4: add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 06:13:00 executing program 1: mount$fuseblk(&(0x7f0000006740), &(0x7f0000006780)='./file0\x00', &(0x7f00000067c0), 0x0, &(0x7f0000006800)) 06:13:00 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x103e00, 0x0) 06:13:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) 06:13:08 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) 06:13:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)=0x2e) 06:13:08 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x218200, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 06:13:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={0x0}) 06:13:08 executing program 1: mount$fuseblk(0x0, &(0x7f0000006780)='./file0\x00', &(0x7f00000067c0), 0x0, 0x0) 06:13:08 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x218200, 0x0) 06:13:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) 06:13:08 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0) 06:13:08 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha1_mb\x00'}}) clock_gettime(0x10, 0x0) 06:13:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2530.411206][T15367] could not allocate digest TFM handle sha1_mb [ 2533.820008][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2533.826495][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:13:16 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x400}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) 06:13:16 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000001740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0045b0f, 0x0) 06:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:16 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x248000, 0x0) 06:13:16 executing program 0: add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "6bd19ed52d9af01ea7f5582a0be1e7f60693e89915ac18423c2aeed221cc23e0ab4ed69e9383352fa4fcfc104080a4969a2102fb9ae7c9bba07bd2645e9eb795"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='logon\x00', 0x0) request_key(&(0x7f0000000e40)='rxrpc_s\x00', &(0x7f0000000e80)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) 06:13:16 executing program 1: add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "594efa982c24be5ca220602999a2fa3954a5fec58e8f274ea9b9afa5cca1f7e75271b2b939e6d2be6d5a556fc31d5e71c8dbbefefc8a3170a4c3ae6a3b09c3a2"}, 0x48, 0xffffffffffffffff) 06:13:16 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "6bd19ed52d9af01ea7f5582a0be1e7f60693e89915ac18423c2aeed221cc23e0ab4ed69e9383352fa4fcfc104080a4969a2102fb9ae7c9bba07bd2645e9eb795"}, 0x48, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xee01, 0x0) 06:13:17 executing program 1: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 06:13:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:17 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 06:13:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 2538.623055][T13344] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2538.888150][T13344] usb 5-1: Using ep0 maxpacket: 8 [ 2539.028594][T13344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2539.039068][T13344] usb 5-1: config 0 has no interfaces? [ 2539.044674][T13344] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2539.054440][T13344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.072102][T13344] usb 5-1: config 0 descriptor?? [ 2539.314914][T14687] usb 5-1: USB disconnect, device number 18 [ 2546.958172][T13344] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2547.208114][T13344] usb 4-1: Using ep0 maxpacket: 32 [ 2547.329300][T13344] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2547.518349][T13344] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2547.528718][T13344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.536890][T13344] usb 4-1: Product: syz [ 2547.542110][T13344] usb 4-1: Manufacturer: syz [ 2547.546851][T13344] usb 4-1: SerialNumber: syz [ 2547.569898][T15414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 06:13:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x401c5820, &(0x7f0000000200)={0x0}) 06:13:26 executing program 0: pselect6(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) 06:13:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) process_madvise(r0, &(0x7f0000002580)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 06:13:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0189436, &(0x7f0000000200)={0x0}) [ 2547.683146][T13344] usb 4-1: USB disconnect, device number 18 06:13:26 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x60f58f7cbe92c91e, 0x0) 06:13:26 executing program 4: mount$fuseblk(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 06:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x0, 0x0}) 06:13:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000600), 0x10, 0x0) lseek(r0, 0x0, 0x0) 06:13:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x6}) 06:13:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000600), 0x10, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)={0x0, 0x1, [{0x0, 0x1}]}) 06:13:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TCXONC(r0, 0x5437, 0x0) 06:13:34 executing program 1: r0 = socket(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000002580)=ANY=[@ANYBLOB="c00c0000", @ANYBLOB="200027bd", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008"], 0xcc0}}, 0x0) 06:13:34 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000300)=""/73) 06:13:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2556.131695][T15459] netlink: 3180 bytes leftover after parsing attributes in process `syz-executor.1'. 06:13:34 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000140)) 06:13:34 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 06:13:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) [ 2556.208170][T15459] netlink: 3180 bytes leftover after parsing attributes in process `syz-executor.1'. 06:13:34 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = getpgid(0x0) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='z', 0x1}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 06:13:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:41 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9c7d}, &(0x7f0000000080), &(0x7f00000000c0)) 06:13:41 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x2, r0, 0x0, 0x0) 06:13:41 executing program 4: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:13:41 executing program 0: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 06:13:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:41 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={{}, {0x0, 0x80000000}}, 0x0) 06:13:41 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 06:13:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="1b", 0x1}, {0x0}, {&(0x7f0000000100)='>', 0x1}], 0x3}, 0x0) 06:13:42 executing program 4: madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 06:13:42 executing program 1: syz_emit_ethernet(0x400e, &(0x7f0000000000)={@random="e1479ef21d21", @local}, 0x0) 06:13:42 executing program 0: mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:13:54 executing program 3: syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="e1479ef21d21649fe2b8583e86dd60d3e3a6001917fdc728ca15da671ee978e902e70000000000000000000000ff"], 0x0) 06:13:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) msync(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) 06:13:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x1}], 0x10}, 0x0) 06:13:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 06:13:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 06:13:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 06:13:54 executing program 0: madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 06:13:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) 06:13:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 06:13:54 executing program 0: r0 = socket(0x2, 0x8001, 0x0) close(r0) socket$inet(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="830286ffffffffff"], 0x10) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000001440)="f70af650de089493d4aebdb5bc2cac939d873f9b61e51ac5d7a1c44c3000000000e173bf9220e2a7990ec5baa25754d60abacb29d90ff8ec67890c44876e8c8d995b0da24c37429d56086d0dfd3e298fc8cce8c3473ec977fa8dc823345237a93a9d6a7da02c5bbf4a974805e0d2408a48e778187daa6f5b863c9b17c66427c886ed85", 0x83}, {&(0x7f0000000140)="469a6a4196177c06b306499bff6c77", 0xf}, {&(0x7f0000000000)="11b22ad903d173c0baa3b9f79cd2db178169ce823fe22108d9502173abfdc24a244ce15ae4a63f54974e4a88deedda01d0fb45", 0x33}, {&(0x7f0000000180)="f49039d84004b5c2722c49103843c61f70ff397c05b751279b0b7b2c358bca435743328f1b3fdd2d23a73e2a9b5c8fd2e7e64b0d011943e7f45604dbed95e21df9fc9de99b298c17129a9d8e860315c1c1990a9aab2c485ed412ace6df7006264983af935beef4fd73400dbe017f4f2f4b7378afd6ca2b53379b714ffe7dda2c1a1e078590cdc93735622c8a94daedfb818f96c9da8765a0355442a3fff09e69e6ef2206a7eae5f1bfdaa72f867b94e9ec486ebb41c8", 0xb6}, {&(0x7f0000001540)="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", 0x44e}], 0x5) 06:14:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f00000007c0)="547181b093e8ecef9fbf9c2521fee65007fec1de85224533f2665ece8c3b5c9717eaf12ff2a16810b4ec464cbfb19c3b3ea6b5dac7260f8a201abe3bc0824958f673fb577a29112399549f1b3741ed297566457b72fd68304397f3a55fb1f4ebead8e68b213cc9a4b451dcda84435402b74b1d7bd52914112216da1a9b74021cf02d2469456598539cba89ba7fe600cfd5", 0x91, 0x0, 0x0, 0x0) 06:14:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto(r0, &(0x7f00000007c0)="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", 0x171, 0x0, 0x0, 0x0) 06:14:00 executing program 0: msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) 06:14:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:00 executing program 1: select(0x40, &(0x7f00000006c0)={0x7}, 0x0, 0x0, &(0x7f0000000780)) 06:14:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmsg(r1, &(0x7f0000002880)={&(0x7f00000028c0)=ANY=[], 0xffa, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000027c0)=""/139, 0x8b}, 0x0) 06:14:01 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000001700), 0x0, 0x0) 06:14:01 executing program 4: add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, "a253358076292fc065c2f671dd0427bf83d1d3eb84463afb3ca3b6aaaab43837ade549c29d8989cee7e3bd2c6a4a2e509a0dfa10f6eb64c577d7c15cf9493db9"}, 0x48, 0xfffffffffffffffa) 06:14:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)) 06:14:01 executing program 1: pipe2$watch_queue(0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/packet\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 06:14:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.789134][T15555] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:14:09 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:14:09 executing program 4: add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, "a253358076292fc065c2f671dd0427bf83d1d3eb84463afb3ca3b6aaaab43837ade549c29d8989cee7e3bd2c6a4a2e509a0dfa10f6eb64c577d7c15cf9493db9"}, 0x48, 0xfffffffffffffffa) 06:14:09 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000002040)={0x121c, 0x0, 0x0, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x86, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @void, @val, @val="ddb2e535e5932005f2437cc7cb62a558"}}, @chsw_timing={0x68, 0x4, {0x1}}, @tim={0x5, 0x3, {0x0, 0x0, 0x4}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x8}}, @tim={0x5, 0x4c, {0xa5, 0x71, 0x5, "f72f100e56b8883ede3548b72f0909c0ee0ca379725a1bd164964e9ffcd8c39252a640c3186a560e8ad4bcbb255e93b3e77ab6c9e517c34d5e01efa1a81304edebd1ef4a2349c82c48"}}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0xd, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "fa8ca855ea3e"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x66, 0xfa, "5d3e311c7bbdaae864f5e14e04abea04c0a10aa18521ec6dca1159733eeacab4c4b7ed61853d873031c5c3399c85508c7c197292f781827d11ca8f495732ee66ac93903485e35681d9d5893eb04ed2bdd749b16af93d35dbd00e1e6b832b908cfd14"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "09ca"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3f}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x9f, 0xfc, "d24288ee6b8a0b9a7d0a5a8681e271a726818075853f04547ac57631c867a3dac633d6124d40235e4fba8696262a07a17c2450d58d32538ffdae9ea5bb8bf44f8579a450b302a655a28427b4da151e9de003b98bfe97bbde49f5edb8ff7ad7692c76b015ac3d700e663dcd70fde3baf33ab5ef027abebc6a97b634e6ab850585dd17cf2296f59409ebbfac72e01d983738131fd10f68895778de61"}, @NL80211_ATTR_FILS_ERP_REALM={0x4c, 0xfa, "df7594cc9d1569118c0d8982f27e0f63179e69571c78f9bd69176b050507527c0700f79c765b703abfff1dc326b18eea407d9c8d270fe89ab4a2b33f820cc0c380d222ec00cb6d84"}]]}, 0x121c}}, 0x0) 06:14:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:09 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:14:09 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 06:14:09 executing program 1: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 06:14:09 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000004940), 0x0, 0x0) 06:14:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/packet\x00') sendmmsg(r0, 0x0, 0x0, 0x0) 06:14:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2591.168220][T10012] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2591.418176][T10012] usb 5-1: Using ep0 maxpacket: 16 [ 2591.618304][T10012] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2591.788808][T10012] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2591.798282][T10012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.806449][T10012] usb 5-1: Product: syz [ 2591.811407][T10012] usb 5-1: Manufacturer: syz [ 2591.816124][T10012] usb 5-1: SerialNumber: syz [ 2591.859421][T10012] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2592.067047][T13344] usb 5-1: USB disconnect, device number 19 [ 2595.250249][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.256715][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:14:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 06:14:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:15 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1080, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="bda6c7fff0ffffff18000000000000000000001400000000"], &(0x7f0000000100)='syzkaller\x00', 0x779a, 0x2d, &(0x7f0000000140)=""/45, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x3f, 0x6}, 0x10, 0x2ca35, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f0000003500)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007680), 0x0, 0x0, 0x4e, &(0x7f0000007700)=""/78, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000077c0)={0x0, 0x0, 0x5, 0xbe}, 0x10}, 0x80) ioctl$TUNSETIFF(r1, 0x5450, 0x0) 06:14:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@raw=[@func, @btf_id], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:14:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:15 executing program 4: socketpair(0xa, 0x6, 0x0, &(0x7f0000000100)) 06:14:15 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001340)) 06:14:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[], 0x108}, 0x0) 06:14:15 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) 06:14:15 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) 06:14:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x80) 06:14:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:28 executing program 3: syz_io_uring_setup(0x3a15, &(0x7f0000000700)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 06:14:28 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = dup(r0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) 06:14:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:28 executing program 1: pselect6(0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001700)={0x0, 0x989680}, 0x0) 06:14:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x1000, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 06:14:28 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x2]) 06:14:28 executing program 4: pipe2$watch_queue(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) 06:14:28 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0x1050c0, 0x0) 06:14:28 executing program 1: ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) 06:14:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2610.043064][T15693] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:14:35 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0, 0x0) 06:14:35 executing program 4: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) 06:14:35 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 06:14:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000580)={&(0x7f00000002c0), 0xfd4a, &(0x7f0000000400)={&(0x7f0000000640)={0x64, 0x5, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}}, 0x0) 06:14:35 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xe}, {0x6}]}) 06:14:35 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 06:14:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7}, {0x6}]}) 06:14:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x405c5503, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) [ 2616.790258][T15705] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:14:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:35 executing program 1: io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 2616.939227][ T27] audit: type=1326 audit(1676960075.447:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f60549 code=0x0 [ 2617.024903][ T27] audit: type=1326 audit(1676960075.487:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf7f60549 code=0x0 06:14:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80) 06:14:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 06:14:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:43 executing program 1: bpf$PROG_LOAD(0x3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:14:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="fdaeb7f3f262e41a", 0x8}, {&(0x7f0000000c40)="de2ac36d4ede5351022602400f3940612355bb2d44e0e1c8d8a205e213e815e4bb55a503e4512d9bdb57b3f85cf9d63ef9e5d6483524bc2e85ef81afc66aa81a78d536e16cf413e1cf66b3e1ae37b855b8c93efa33882e5f6a4ac18b92a2b92ec746f7dcb45ebc969928e4922172e8dccb80d551a8efaadaaca1f10bf0559f90ecedfc818c7f57846671ab24ab4e244c931a74eeac403d0e54657a0c8ea79a032bbbf4fa73e7e071481947ccebe1cacbab56", 0xb2}, {&(0x7f0000002dc0)="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", 0xe07}], 0x3, &(0x7f0000000e00)=[{0x18, 0x0, 0x0, ' '}, {0x10}], 0x28}, 0x0) 06:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="fdaeb7f3f262e41a", 0x8}, {&(0x7f0000000c40)="de2ac36d4ede5351022602400f3940612355bb2d44e0e1c8d8a205e213e815e4bb55a503e4512d9bdb57b3f85cf9d63ef9e5d6483524bc2e85ef81afc66aa81a78d536e16cf413e1cf66b3e1ae37b855b8c93efa33882e5f6a4ac18b92a2b92ec746f7dcb45ebc969928e4922172e8dccb80d551a8efaadaac", 0x79}, {&(0x7f0000002dc0)="e24721ade340c386f1b193a59178420b57e7933f8a78c6651881fabb176b7365c304a90c9a2e69015677eadb279ea0f3fda0891b46aa2c3dd5cfc23270391541d716421d6a1f29fb33f2b6153244b685919adda9116daf0c278763fc04ef4e5cff4c7e82ddce4ea6589d0b0e029e40b8356c52f88c466b32af0743fffad98e2474d8e4bec781ac99ed3a6fbd5665b480d570e9fd511e5f61212ae4b014db88d40c6831c56e681fe03f87e3814efc0f4df5dd5fd58b88bee431ebc8c486d0a6023c1786daf5c5daa1bb736c1ae762a01702b167ba466440e77651a376fd30cad06953d2e9a67f8080d1576678b137a10ecbec16f6c924ce8cd7a8f562ea00a8048781848a4fb2b513c334dcabdc86d49b8b9b5c526c76d43094c30ca7959b47f0705cb5691a4424e6b61c6686ea7beaa5530c3bab5c5e1941b114d1e030c5a41b9571954ca8b9fac9ef7579993861e959c0aaa97141a0e12aa1d1d5414d1007e2e4c4c30c7512b013b06946cf70a4ff3c0eb2d17dc1d72995a3261d729edf26fdeb7943f455e82c859cc667864332661d5669d2ddfdbad3e2e94a8faf76f36eb12e8c64db6036398e76d4080f74812a66275e6a57c8af785820a1ab393d7c41ef2fbdb601db6d9ba6f916a71e6989b4f730d8f3dd8ded21d377fa6d52f03098c5d43137573bf62baa8f91ca79addf9dbee34a23389c872eb73926102fb7ab6a293c2b5660b755b77046066f3b59c6b406c01e1bac6ee2d428fba0ff5c802d2fc3456648fd43786629cf24aff9a41627c747f4c226153eef720a03af80fbd9282ae36161a02568edc0dbb4408cd52b388bfb07baaf9374a4db94ba21d07a5e1fcba1e2588db20526d2db347667ba901c5ec977044e853c78c895ab255d3be30ac240b8be6cab2bd8800d8d0245113fd2239d7495899e812602555ff9d7c058743d3498873cfd27b606d49f5fc2f32d78ff4c0b3676490f426016dad10dffc2de29b3a6e048251655d0f62cb0add87e34765c81b6424846a04bae3d15a2f7f8ae29d01596bb5f3a870f0ee7b7c3b7a5b06d36bd2f89759b584cd57441df5435b3a926141092a1bc676d3e1da75e2cc6f960079c00e2e87539e85c0fcaf60c00c9f11e47f8107149838f9b68bae7bf21453275ac208f61845fdd7b739aad2a6ee6911b19de69a695bfc0ca707b61b79ce7f417f9582bc5f4f5c569d1172a8c7d2fbf0d7f920a62498868107166fd574ff9ab67fd34c5038735bb95e7db0b0201808cbb7ee11e92aa222ee5fb310fd925895dcf7c631bcbc56c8994de6e320ab55a689533c13d42994b1577cef83238aab234e8dd0ac9ddde5157d7aae1add2fb105cc40f18ab88f923f3c95ca941b1fefeeddb8423a1204fabf8f7139e4f8dfe7b20f09f750c2a74cb3d1115c358d45e150492a2f39375331d70599d962eb62656dffa9a998fbfae2ace21de84b5617f9cdb07916cd8421915880fe956e5db6eb6281ebd9ddb50841c33fe042d347fc0f8f9c9112486fe931cfb8a08baab1857e61963ad045c868c2fef6e45ec478cc82ccadb3e517bf1d44df9e7daa0320d22c6231f6e5910807c653bcbd80d71f04184efdd292c01ec3671840810cee62b86133f11b0fa783d6ab005df45e180222ac9c8807da5f75d811c2d31947c2ce902506cbf311d8983b985473ed46a435d4340557050e255b2e775dfd0999f739058765316406abdce04b02c8b4e119b3eee59d9d4c95d9de700c2b89eefbae425bbc03fa59af1cfccf8cfb886f959b08e5f2219958629138d5077209c0bed84b1499c4a9d1adff0bb2b39f210b9608a5c2f26a3eb3010e39f010f40a9f2eb837740a84f81e8da91ee98e90bb5bf972e6310e512a9d5ffe622f0cfca7014a6252d2ee9c80e60cc84c185a32ae341cc7250c8c51cd7923679f7ded90464af24417d407253dfecd1f33759418c168f39cdf90682cdbf20504286b965c24b95cf1971ba32a236d63a9e4a70c60decc2f78e0770b889ec31405cfc9c472c787af20cee09bbe4e15fe74c8d1d42e79eacf633c8d1f66766185ce27d797eee1855fef6c08c024dd5035b459e3a4f85513696f6c38a03de504a066e4404bf46146759149dbf7a1458b6e8ef470a2ea8b3d0fe9409af1990bb08b5bc9439826496f42c6365e9c8b84c56c46cadd866eeef953e252e647d8527a8e4bccf0c82119cf26632856c8ceab303db99ddc2f5d99d52349d81762d84d3a589fae19991e11f540e242dde30d6b21ee12a5bed2ee1e0346d7b8443327c6b01f342b8def6fcc879708398a7a8bfb77122f62821adfbe2e86586c0191c79e54bc4140c4ce151756d74153baf2ea18b5dfba1c7a2ed64c679ca4eda69b3fcb35b5d3831676c5016a76d10e6ee8a1c36f08dc7e92b8cb67165c27fd41bd3972233dad820da162ac23edf03568ff515d5c028dc5fe2b549c725c7ef38457ce0760104477b0fbe57951f1dc17dd6ca148e4bc343d8f50a9e8bf6e77c3e6687fb92fdad457164375f3c30fce8965a1cd9c1d89139751a80c039013889a6a53f38082fab765322b837878e09cf7ea4b794c69265b3c07f390d5fae8da421df4561b310a1c39aa07a93c85737595942b5d21fc57456f2b15217da78049d8450f7c55cdb326f7bd20dcaedcdb81fc4208dd0974bf2af6df1d007b52803ccb3be4a93efc854c1f7376256edce6bdcc669689d62bfddb3acf65897100d9cd72520c2d8768b431d92966d5d786d9ef77dc432c25c80e01ebed5914f91e31abed8ab0b61ae6d6985a6c230f16596a63fbf466eb383f426123162662db9fb0bd90ad95db5352602af96c4a400df963f38a96ae7b2b7b0a04fb8411cab1a8dad2532355fb646cfa7bfe01f2182197e02d586f94a695a7a4a3a62b44bd50c3363c5b98dc182f11ebb0fb3f409991638f8f916a9f3143c637449b1a2a8096d1e85cc5a818208dfcc00aab780c64d75b9c22b649bf39e189c00e8cdc9482e63c6ec410873d271dad481088f7415e90c07dc69864c08441c2047e047e2c1fd602bf3e78342a5b4797b07c1bbf0036df91c5b893940a9fd96cb623183ed10ffa9216ced53f3ed3c42ecbabe4d3ed777eb1f32cab656f774f758b69e0bc0774d91e5e9233aaf409ec450c298fdb4d159c90267b265806bc2d2d16391a754be12d9ca1c6659dbc054fe4808335f13b3dc9a2d114788397ae81231c7c95183296b79aae519a25d669b0e15e9d2b625923352889d9413bc5196a6d49691eb6cd693e7dcfdd6f15a906d9c35526a1579de0e14ec37b954aea2964219fb1bf2683dd1bfdd28303e928a6a1640abef5970fa3e298bdf02a324961154a20fd99fc11f51445c350091eb97869cc6e1724d0429855e60af839b254c944a6c0ef72310354fea4490830fc5851073c7979b020019488c69fa718b3bd76b47df2ec841f4fe621b87c17c687ea15d0e378ffcd1fe80d857e17bc52f08c50c01b742ad6f9f55b2f0efbcb61aae1c53502ac73271198b651a4a04ae43c780d8e9b6ff308acebc8782cdce1a71b0145b8b27925bc809aaabe145a7e3d0c1792213dbfbb529b7abc4e9370536684a11f174564f5960bee1a1d818a162ddd51fc21cee34a7a7487523166d46763f1e1e00030f5a3d541b5d3b2a8e1cbd1d5f0d1461c34884cc7ba698091fc54192b263d8bd45c991e097691d67fe16d29b2645421ab6906331751b14cbd7b0123802dadce0fc61eff9c04438d04632bbf9dc54f200e601442699da35b8c22669105da73db2057cc2eb2caa4c87e23ea62d02d9c174e810483eaa0a8767113654f20e43b6384889e6480742731bddb225185c1cb9f90f205cc51a2ce49f43228438027aa0e182bfd222858962b9cd59430322f23874970a0f143216eb900d3187f0e97cf953f177ba208d3bb5a4dd56075a1baeaa26ed591648d90854cd4d33fad6bdfebc0ece9a49f3012f96e31c01bb8d5fbf08492bf55b1ad80c7286c13bdc121e74e312df87315c79a23e267d1facf7aae1f0d166a10191122e370647f57599ddb30b5c6af6a798805741c61a674e7a0d9b760a840f1a150902e2c84d17b92f02c1535704884689c3a96e9d696bc3ce899980b1778d4d5ccf542c14ce1d23168a49f128535016be05a7ee22ef7b7b18b2f3ea57ae206e2a29fd6929af137c39b86cf0021fd869b938e833124713d978891f9859472128a8675986d051de4410afe2b97fdb816e61ee9f8b444ec6bea98597c40df07ae2e257d573a74a516808893366ff0b330d0f2e7ba2558a7ebdc3c755c4d882bab8af1ef0573d6559be86fc79bde2b5e92b14c9b16035481362039ccaff73517b0ae949b42086a0d21b69a9b20f33105d6774a53d26bd8b6f7fa493f65e9a120f11001800240cf597915d0b056c1864c16a0b3cbd0f7dae2ac53713ffc7e65820205f43444178cb51cf998cfe0fcd5ade6fd9f6aadbfb69b0f58e4fc5dd428bab2f8efee7bfdbe3e0aae2ec8a9c900bb4e168ba0a7eba318c3a83239eabb570d81d91649db10ee8300e2d7c8bb12f203f0005934765674081aea27efa87a692830adfd54db40ac3594bdc52660094ba371ae9eda029cd020dd82165a2e39f8020a8073b24574d6ab7d61b51c24aca89b2650f8ca45d56e5f17e6ae24ba74f105471b819b6e2b48cdf71cb077e8d0c626903bff1920b35f08a721aa3b672cc0312af4540ad50a358cc4c657d3cab8233239d9072ac6eeddfe3d63e5ce226a73d1f71998a91ce33ee136069218d4a5011cc2f9f3bcea50163fcf2ad0bb62c5a717a0a4314908b5db0a9008235cf0e9581a113228eda275d7987de2e5895483ac3b5f848e569319d3646c3130333d8bcc9bd07a8313c0d3cfb90d755c3dd5b03320d46f496f211c5afa62517372efb16ab17719de9a563cb7536ab1bc8f395363f3b550907760fb27ff9b1b064d1528b2ed90ccd8843ea1e768627d575d31778220794e93e1ab5f7ea2623626b56ca37ef97deaeae2a4646c9e5cf890f3b19f8ebf7dd8e0cf6cd0d69622b37d7d24dc7277a0da9a04dc829c86657faeb9fd7d52e8b116a1878625d13359b22fd5c364e4e71739de4ccf29f691775d1fc42499cfc1606f565e553b93e48eb5f71c3e231da4b2fa0142de758b2abd628bfe565", 0xe40}], 0x3, &(0x7f0000000e00)=[{0x40, 0x0, 0x7ff, "20bcaa324a098cf959b3ce83b661c23269ce04c8a2d5a1d9107332168d44474c85a62281a8c5b5f0d2b92da784"}, {0x10}], 0x50}, 0x0) 06:14:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 06:14:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:14:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="a7", 0x1}, {&(0x7f0000000080)="8eaadca7e2bcee899cf1619e4dbefb92c457ad44ac642dbbd43e1c29dca537", 0x1}, {&(0x7f00000001c0)='\a', 0xff86}], 0x3, &(0x7f0000000080)}, 0x0) 06:14:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2241, 0x0) 06:14:43 executing program 4: socketpair(0x2c, 0x3, 0xa92f, &(0x7f0000000000)) 06:14:51 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000280)=@framed={{}, [@map_fd]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:14:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_clone(0x40000000, &(0x7f0000000040)="abae58b7327ceac80e9e39309ec09c16b046bba04e695d8f170e803b06b4344d7f55193c264a2f83b961b4accf5cad3024bd5acb018fa719e2314b9fa997f40dd85a6d059222ada3df7f69e8", 0x4c, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d3b52db88fa79f61b60f2547bcd2178fcde4cc18323482a261be3edc436346e9e6d874f84ee50abdc98677ba79cb503a8035b18a07cb755cc25ac2eb4b284036f7f2a692baf97c7e9abce18c64c30153a50d0e1d1e1de44170a2ff0e32486d70c2a124fbc38c669d3b9e9b08bdd9500ac77735def8ad83a9474a3462f4a632a1b5c66a0669d5443a6df84502b4aa846aa3a9b9bee6e383451d18cfef8d10389c5b09bd1113de4802fda3d2a544c406c650e0c9de1e7a45ddcd7bac52f33fef866af706c6d4284b3f19f20b3e8500f7c2da2d21c4e76b178da3d5729818533ecc13d4a1bcec22a02216462c40bb308b2abc") 06:14:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000a890b0758004afd8aca3e9"], &(0x7f0000002100)=""/140, 0x26, 0x8c, 0x1}, 0x20) 06:14:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @empty}}}], 0x20}, 0x11) 06:14:52 executing program 4: syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 06:14:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 06:14:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a7", 0x1}, {&(0x7f0000000140)='J', 0x200001c1}, {&(0x7f00000001c0)="f3", 0x1}], 0x3, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @empty}}}], 0x20}, 0x0) 06:14:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="ca", 0x1}], 0x1}, 0x40) 06:15:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000e00)=""/183, 0xb7}, {&(0x7f0000000fc0)=""/242, 0xf2}, {&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/153, 0x99}, {&(0x7f0000002340)=""/173, 0xad}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000002bc0)=""/200, 0xc8}], 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:02 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xfc05, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf02) 06:15:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:02 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="ff") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5800) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) 06:15:02 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5800) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) syz_clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 06:15:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100006d0000000000000005000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="2d2b3c8b1a6723b3d896987c414c3ee8ba495b6664c8554221da73266a9505440ea2c2c4a8b8ecf26ee6d2d721cd74285109b93e609be61f6030e249868894", 0x3f}], 0x1, 0x1, 0xc6c) 06:15:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x28) 06:15:02 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) 06:15:10 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8e501, 0x0) 06:15:10 executing program 4: r0 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x20000005}) 06:15:10 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) 06:15:10 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x28202, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 06:15:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:11 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/43) 06:15:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x1ff, 0x0, 0x0, 0x0, "f5012260f7bdc67b753a5b42d17e14c62dfd3d"}) writev(r0, &(0x7f0000001180)=[{&(0x7f0000001200)="b55a7e0545dfeb9ad1b9c0d6235cd90ea67c3cedb0e66cecb2668f1eb1686b07e8d1df0f18f3a3eaaee840727101f599ded15b000b07c1b7d7cce486a63d3814d7d85be33f9eaa5f6dd9e02019d9a18948fbe6746094427eb80b0d", 0x5b}], 0x1) 06:15:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000100)="5d2ede623ab152ff2bef4c82c60bf5c898dd801356be293b93e80af601e39f9c934e4a12567ec31e66aac24d1c6a20a9efbf849dde16394b35f87e2b001638132ef5c10b68f269c610cefbde479eb35c6a9ab1f4025721a54caf75f92dfe53697b7aa17dd0803d457c5474b2ead95e896f3387211621f17964f22ea40935e7c1be9556a8a831b403211b62c453b568ff5b822fe15b22881ee6f88282dd7515024eb0bd84cc1e941848f8e75a276e2351fe6e85ab793b9204383e45804e2a3a4673e90b9bf333a25cb3831a202fbb36897b10246685f69cec915e361e322ee4aa302c6790da8557b837a487b8692c2fd5b923f2072b172daef6a07b1aa16adc2e82c08d1d71d3fae05c2c8d508e14d2e03dbc3930c0a47451526bc2fe641fc0db1f15bc17384c5a25ab7f98a8b850f33215ebe7845a1f52b855140d6a2b56d4ba1c46ca42d4324a02e4d9d8a0a174760d4febf956377b38a1e037ebd1c0ade0f71cfa94f8d5744f49edf3aec47b9b75498d6192ff3b97e2a3d38451a33eb4c62dc29351123817f026827a2360000a51b69680b5392cd895f75e51a07c41d6d0715c76e5fae5da7d4b304c776a3a2bdaf0a6ae2cadc6850148c031d675667858145956619e1d381c563e67a003ca915e08a9c7041aa789c126795bb8125005342a1bd1b46865680d32080e3bf805f016e21536756d273bb206ca915aea5ae51e4e52a97744cb3f8f7986f09f1b44", 0x20d}], 0x1) 06:15:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:15:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1, 0x9, 0x0) [ 2656.690103][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2656.696493][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:15:23 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000400)={0x1, "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"}, 0x401, 0x800) 06:15:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c01, 0x0) 06:15:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:15:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:23 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) 06:15:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={0x0, &(0x7f0000001dc0)=""/162, 0x0, 0xa2}, 0x20) 06:15:23 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc2, &(0x7f0000000200)=""/194, 0x0, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:15:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1267, &(0x7f00000022c0)) 06:15:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') read$char_usb(r0, 0x0, 0x0) 06:15:23 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x19, &(0x7f0000000180)={0x0, 0x0, 0xfffff0d3}) 06:15:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs_stats\x00') read$char_usb(r0, 0x0, 0x0) 06:15:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3ed, 0x4}, 0x10}}, 0x0) 06:15:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1267, &(0x7f00000022c0)) 06:15:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan0\x00') read$char_usb(r0, 0x0, 0x0) 06:15:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$char_usb(r0, 0x0, 0x0) 06:15:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:15:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1267, &(0x7f00000022c0)) 06:15:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') read$rfkill(r0, 0x0, 0x0) 06:15:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1267, &(0x7f00000022c0)) 06:15:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='setgroups\x00') read$char_usb(r0, 0x0, 0x0) 06:15:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') read$char_usb(r0, 0x0, 0x0) 06:15:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/anycast6\x00') read$char_usb(r0, 0x0, 0x0) 06:15:38 executing program 1: clock_gettime(0x9e5270af8e158196, 0x0) 06:15:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') read$char_usb(r0, 0x0, 0xfffffdfc) 06:15:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}}, 0x0) 06:15:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:38 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_usb(r0, 0x0, 0x0) 06:15:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') read$char_usb(r0, 0x0, 0xfffffdfc) 06:15:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="94030000", @ANYRES16=r1, @ANYBLOB="050027bd7000f8dbdf2502"], 0x394}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) [ 2679.633517][T15968] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 06:15:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0xb9, 0x0, 0x0, @dev, @remote, {[@generic={0x0, 0x11, "773026146b32b4196b588fb5828eee"}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@loopback}, {}, {@multicast1}, {@private}, {@multicast2}, {@multicast2}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x10, "232e22aca4080a6dc70703d0faa8"}]}}}}}) [ 2679.753714][T15979] netlink: 896 bytes leftover after parsing attributes in process `syz-executor.4'. 06:15:38 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') read$char_usb(r0, 0x0, 0x0) 06:15:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/anycast6\x00') read$char_usb(r0, 0x0, 0x0) 06:15:44 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x1089600, 0x0, 0x1c, 0x0, 0x0, 0x0) 06:15:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') read$char_usb(r0, 0x0, 0xfffffdfc) 06:15:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000684b07"], 0x14}}, 0x0) 06:15:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:44 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:44 executing program 1: syz_usb_connect$uac1(0x0, 0x101, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0xb3, 0x0, 0x2, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1801}}]}) 06:15:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x2}}) 06:15:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') read$char_usb(r0, 0x0, 0xfffffdfc) 06:15:44 executing program 0: bpf$BPF_TASK_FD_QUERY(0x9, 0x0, 0x0) 06:15:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f0000000100)={'tunl0\x00', 0x0}) 06:15:44 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x2) [ 2686.367199][T14517] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2686.628103][T14517] usb 2-1: Using ep0 maxpacket: 8 [ 2686.788181][T14517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2686.878250][T14517] usb 2-1: config 0 has no interfaces? [ 2686.918294][T14517] usb 2-1: language id specifier not provided by device, defaulting to English [ 2687.038203][T14517] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2687.047342][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.056157][T14517] usb 2-1: Product: syz [ 2687.060734][T14517] usb 2-1: Manufacturer: ᠁ [ 2687.065504][T14517] usb 2-1: SerialNumber: syz [ 2687.074844][T14517] usb 2-1: config 0 descriptor?? [ 2687.325866][ T9290] usb 2-1: USB disconnect, device number 19 06:15:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/anycast6\x00') read$char_usb(r0, 0x0, 0x0) 06:15:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:15:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 06:15:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @multicast2, @dev]}, @lsrr={0x83, 0x17, 0x0, [@local, @rand_addr, @rand_addr, @private, @private]}]}}}}}) 06:15:51 executing program 1: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x4020000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(0x0) 06:15:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) [ 2692.532683][T16034] @: renamed from gre0 (while UP) 06:15:51 executing program 4: syz_usb_connect$uac1(0x0, 0x101, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0xb3, &(0x7f0000000540)=ANY=[@ANYBLOB="050fb3"]}) 06:15:51 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_ts_info={0x1b}}) 06:15:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 06:15:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2692.928076][T14517] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2693.168446][T14517] usb 5-1: Using ep0 maxpacket: 8 [ 2693.368398][T14517] usb 5-1: config 0 has no interfaces? [ 2693.528214][T14517] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2693.537434][T14517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.546405][T14517] usb 5-1: Product: syz [ 2693.551841][T14517] usb 5-1: Manufacturer: syz [ 2693.556616][T14517] usb 5-1: SerialNumber: syz [ 2693.563501][T14517] usb 5-1: config 0 descriptor?? [ 2693.816719][T14517] usb 5-1: USB disconnect, device number 20 06:15:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/anycast6\x00') read$char_usb(r0, 0x0, 0x0) 06:15:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 06:15:57 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 06:15:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:15:57 executing program 4: syz_usb_connect$uac1(0x0, 0x101, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0xb3, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]}) 06:15:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x400445a0, 0x0) 06:15:57 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x420c1, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 06:15:57 executing program 0: mknod(&(0x7f0000000800)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000940)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 06:15:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x40084504, 0x0) 06:15:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x0, 0x0, 0x0, 0x180}, 0x48) 06:15:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2699.298026][T14687] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2699.578695][T14687] usb 5-1: Using ep0 maxpacket: 8 [ 2699.748184][T14687] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2699.828337][T14687] usb 5-1: config 0 has no interfaces? [ 2699.868313][T14687] usb 5-1: language id specifier not provided by device, defaulting to English [ 2699.998515][T14687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2700.008343][T14687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.016399][T14687] usb 5-1: Product: syz [ 2700.020829][T14687] usb 5-1: Manufacturer: syz [ 2700.025495][T14687] usb 5-1: SerialNumber: syz [ 2700.033813][T14687] usb 5-1: config 0 descriptor?? [ 2700.288031][T15657] usb 5-1: USB disconnect, device number 21 06:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_GETNSID={0x14, 0x32, 0x11}, 0x14}}, 0x0) 06:16:03 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001040), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000015c0)) 06:16:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:03 executing program 0: syz_usb_connect$uac1(0x0, 0x101, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0xb3, 0x0, 0x2, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) 06:16:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_GETNSID={0x14, 0x5a, 0x11, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 06:16:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) 06:16:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev, {[@ra={0x94, 0x4}]}}}}}) 06:16:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000100)={'tunl0\x00', 0x0}) 06:16:03 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}}, &(0x7f0000000180)=""/206, 0x26, 0xce, 0x1}, 0x20) 06:16:03 executing program 1: r0 = io_uring_setup(0x7a8a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0x4, 0x0, 0x0) 06:16:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000040)="ee", 0x1}, {&(0x7f0000000100)="1ff1ee48a1461576a4896aca2c271eeca11289fb95163e615c3e0043791d060229b8f1bdcb261eb6b8a2cf987d1659d6fe572f8a207d030884ac6bf5390aff509401", 0x42}, {&(0x7f0000000180)="3f4c3ba721f7100eb296c7dfaf787b5f8feb00291fe0366bd6db1876f851e33a8a9adce216889447dc164956a30ca244d179aea669035cb2b9a607ed96261464a82203e2e6ce4b9b4213944f6caf4433824373304d6acff9370bcf7a92cc6ebdacbc4c34", 0x64}, {&(0x7f0000000200)="eac1c39a0e86a40383fef45884e0b853e11270eb71c12d406e1df6e26dd75c8a9a712a22dd6908d3c2b99f1b3e070fb168a697305a52ad2ad9ea434139125b10652e41c46212edd53f0ea1ae43c3a30a2c1a1919cbe2dad4589a0034fa98eb21e6596f46f02ffbc5f5c0e48ffe8ebcc8e21b71e367a01cbc63905f1895b501ad0fd525c8f44c1a5094b970799d2d7b8b3fc544405e66b07f9a39672d62528773180cfe281c01fb237b34bd6304828511c1d0bc3e7529a88b8370ce806669987448fa", 0xc2}, {&(0x7f0000000300)="fe68717bbd3d80c944cafd6f06b184e13782553c5083a09dc22757a80e686f142c3c783219220d7549a0e99688fde85a8693b1debac615d13bb4836abe93ae9a95ff77cddd904de094da4f2feaa6ec4b42dc39bae6ba7d22eec3c1a7b16ce63a8772d89eaa3d3bd3072d13ed130a0f4b5afc25c9db899259ca1d2fa0652f6946a183e148e96895041bbdd663a5d896327d827049dafc62eec6aa0ff7674d849483bcf0ce1d53e11b8870df9d3e8c16d68306fdd9a0b081ef56c566640edaae030a78d94c01263c6d8b304995cb980e833f21922be1079e0c29cbacc5886e067c552cb2a6296677a7a65376ed8e4f1d190b4a9c6a90aa61ed6e", 0xf9}, {&(0x7f0000000400)="e0bd5d51fe253ea1c2d12abf67ad11914ffc20feebbb33979973f52398dd4814c9ddafdb10c2a2d23f58084c09b86161a85efc7117a5a1b77e", 0x39}, {&(0x7f0000000440)="6d5aae9b2d4fdc98d302f340c9baf034b272205945d709a6ec793a0167ba73646928222b4533fc9057e4210a349460", 0x2f}, {&(0x7f0000000480)="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", 0x2ab}], 0x8, &(0x7f0000001500)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x0, 0xb, '\x00', [@ra, @ra, @enc_lim, @enc_lim, @ra, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xa, "8ab377ae12a59852d774"}]}}}, @hopopts={{0x18}}], 0x88}}], 0x1, 0x0) 06:16:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func]}}, &(0x7f0000002140)=""/128, 0x1000000, 0x80, 0x1}, 0x20) 06:16:04 executing program 1: bpf$BPF_BTF_LOAD(0xa, &(0x7f00000021c0)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 06:16:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x80049367, 0x0) [ 2705.598030][T13344] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2705.888231][T13344] usb 1-1: Using ep0 maxpacket: 8 [ 2706.078212][T13344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2706.158281][T13344] usb 1-1: config 0 has no interfaces? [ 2706.198306][T13344] usb 1-1: language id specifier not provided by device, defaulting to English [ 2706.358131][T13344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2706.367251][T13344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.375997][T13344] usb 1-1: Product: syz [ 2706.380583][T13344] usb 1-1: SerialNumber: syz [ 2706.387498][T13344] usb 1-1: config 0 descriptor?? [ 2706.644511][T15657] usb 1-1: USB disconnect, device number 12 06:16:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 06:16:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x4000000) 06:16:05 executing program 1: futex(0x0, 0x3, 0x1, 0x0, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000240)) io_setup(0x0, 0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) unshare(0x60000000) 06:16:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x80086601, 0x0) 06:16:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000001c0)) 06:16:16 executing program 0: setreuid(0xee01, 0xee00) setreuid(0xffffffffffffffff, 0xee01) socket$inet6_udplite(0xa, 0x2, 0x88) 06:16:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000080)={@mcast1, @private0, @dev}) 06:16:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, 0x0) 06:16:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:16 executing program 2: bpf$BPF_PROG_DETACH(0x7, &(0x7f00000009c0)={@map=0x1}, 0x10) 06:16:16 executing program 1: timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}}, &(0x7f0000000140)) 06:16:16 executing program 0: pselect6(0x40, &(0x7f0000000740), &(0x7f0000000780)={0x3}, 0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={[0x7]}, 0x8}) 06:16:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 06:16:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x4) 06:16:16 executing program 1: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @remote}}, 0x0, 0x5, [{{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}}, {{0xa, 0x4e21, 0x3f38, @mcast2, 0x39}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}, {{0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {{0xa, 0x0, 0x40, @private1}}]}, 0x310) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0xfe, &(0x7f0000000140)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5d47, &(0x7f00000000c0)) pipe2$9p(0x0, 0x8000) 06:16:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {}]}]}}, &(0x7f0000002140)=""/128, 0x36, 0x80, 0x1}, 0x20) [ 2718.130794][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2718.137186][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:16:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x84111, r0, 0x0) 06:16:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:27 executing program 0: bpf$BPF_PROG_DETACH(0x13, 0x0, 0x0) 06:16:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2b, 0x0, 0x92a3550a07e8faac) 06:16:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x9360, 0x0) 06:16:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 06:16:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000700)="d3", 0x1}], 0x2}}], 0x2, 0x8000) 06:16:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x3a, 0x0, &(0x7f0000001640)) 06:16:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001380)=[@pktinfo={{0x24, 0x29, 0x3b, {@dev}}}], 0x28}}], 0x1, 0x0) 06:16:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x1103, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 06:16:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, &(0x7f0000000400)) 06:16:28 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 06:16:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'ipvlan1\x00', 0xfffffffffffffffe}) 06:16:36 executing program 0: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') io_submit(r0, 0x1, &(0x7f0000002580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 06:16:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000040)="ee", 0x1}, {&(0x7f0000000100)="1ff1ee48a1461576a4896aca2c271eeca11289fb95163e615c3e0043791d060229b8f1bdcb261eb6b8a2cf987d1659d6fe572f8a207d030884ac6bf5390aff509401", 0x42}, {&(0x7f0000000180)="3f4c3ba721f7100eb296c7dfaf787b5f8feb00291fe0366bd6db1876f851e33a8a9adce216889447dc164956a30ca244d179aea669035cb2b9a607ed96261464a82203e2e6ce4b9b4213944f6caf4433824373304d6acff9370bcf7a92cc6ebdacbc4c34", 0x64}, {&(0x7f0000000200)="eac1c39a0e86a40383fef45884e0b853e11270eb71c12d406e1df6e26dd75c8a9a712a22dd6908d3c2b99f1b3e070fb168a697305a52ad2ad9ea434139125b10652e41c46212edd53f0ea1ae43c3a30a2c1a1919cbe2dad4589a0034fa98eb21e6596f46f02ffbc5f5c0e48ffe8ebcc8e21b71e367a01cbc63905f1895b501ad0fd525c8f44c1a5094b970799d2d7b8b3fc544405e66b07f9a39672d62528773180cfe281c01fb237b34bd6304828511c1d0bc3e7529a88b8370ce806669987448fa", 0xc2}, {&(0x7f0000000300)="fe68717bbd3d80c944cafd6f06b184e13782553c5083a09dc22757a80e686f142c3c783219220d7549a0e99688fde85a8693b1debac615d13bb4836abe93ae9a95ff77cddd904de094da4f2feaa6ec4b42dc39bae6ba7d22eec3c1a7b16ce63a8772d89eaa3d3bd3072d13ed130a0f4b5afc25c9db899259ca1d2fa0652f6946a183e148e96895041bbdd663a5d896327d827049dafc62eec6aa0ff7674d849483bcf0ce1d53e11b8870df9d3e8c16d68306fdd9a0b081ef56c566640edaae030a78d94c01263c6d8b304995cb980e833f21922be1079e0c29cbacc5886e067c552cb2a6296677a7a65376ed8e4f1d190b4a9c6a90aa61ed6e", 0xf9}, {&(0x7f0000000400)="e0bd5d51fe253ea1c2d12abf67ad11914ffc20feebbb33979973f52398dd4814c9ddafdb10c2a2d23f58084c09b86161a85efc7117a5a1b77e", 0x39}, {&(0x7f0000000440)="6d5aae9b2d4fdc98d302f340c9baf034b272205945d709a6ec793a0167ba73646928222b4533fc9057e4210a349460", 0x2f}, {&(0x7f0000000480)="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", 0x27b}], 0x8, &(0x7f0000001500)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x0, 0xb, '\x00', [@ra, @ra, @enc_lim, @enc_lim, @ra, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xa, "8ab377ae12a59852d774"}]}}}, @hopopts={{0x18}}], 0x88}}], 0x1, 0x0) 06:16:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 06:16:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x2c, 0x0, 0x4000000) 06:16:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) 06:16:36 executing program 4: r0 = io_uring_setup(0x7a8a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0x7, &(0x7f00000000c0)=[@ioring_restriction_sqe_flags_allowed], 0x1) 06:16:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x0) 06:16:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f0000000080)={@private2}, 0x14) 06:16:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) umount2(&(0x7f0000000180)='./file1\x00', 0x0) 06:16:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{0xffffffffffffffff}], 0x1}}], 0x3, 0x8000) 06:16:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:16:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0xfffffffffffffffe}) 06:16:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:48 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000380), 0x8, 0x0) 06:16:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x541b, 0x0) 06:16:48 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f00000001c0)={0x1}, 0x0, 0x0, 0x0) 06:16:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x80c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 06:16:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x541b, 0x0) 06:16:48 executing program 4: syz_clone(0x41289600, 0x0, 0x0, 0x0, 0x0, 0x0) 06:16:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x541b, 0x0) 06:16:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x541b, 0x0) 06:16:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:55 executing program 3: r0 = socket(0x10, 0x2, 0xc) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x10}, 0x3c}}, 0x0) 06:16:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002680)='B', 0x1}], 0x2}, 0x0) 06:16:55 executing program 0: setreuid(0xee00, 0xee00) bpf$BPF_GET_BTF_INFO(0xe, 0x0, 0x0) 06:16:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000001700), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 06:16:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:55 executing program 1: syz_clone(0x18c100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:16:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}, @ip_tos_u8={{0x11}}], 0x38}, 0x0) 06:16:56 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000002280)={&(0x7f0000001f00)=@name, 0x10, 0x0}, 0x18c4) 06:16:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0), 0x4) 06:16:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 06:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000001080)={'wlan1\x00'}) 06:16:56 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) [ 2767.811207][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 06:17:06 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x84240, 0x0) mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x5000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8021, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 06:17:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x28}}, 0x0) 06:17:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002880)) 06:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 06:17:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:06 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x23) 06:17:06 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x1c78c0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}]}}) 06:17:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='GPL\x00', 0x1, 0xb2, &(0x7f0000000600)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa700}, 0x80) 06:17:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000280)="406ee45e2b38211da7403bc453baca030b7f8336cb9bf6238033651ff6b0bf309ebfc43456ed4f5865bdc3e601bb5e5f24a65790aa71e6b96163fb6536bb641338b29fc899454d11be06a8c3036b1243b667e49b4bf9c910cc94a8a54b4f0bf1d1d85f1d0fc7b90a3cff5cb4ae5107ddc0cdf46ae62e0c665a7324ff60b9927b85", 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000300), &(0x7f00000000c0)=""/104}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 06:17:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x5452, &(0x7f0000000040)) 06:17:06 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x0, @broadcast=0xe0000001}}}}}, 0x0) 06:17:06 executing program 0: syz_emit_ethernet(0x6f, &(0x7f00000011c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x4d, 0x0, @opaque="b752c30091cd693589f364fcdd485ba41538270398246b92df74efd147c19ffa9b9957d1f1ea9b1b1bdb72301d1709e1c65c0d6e1054c6115aed964279af45eb40f65ed4d0"}}}}}, 0x0) [ 2768.075830][T16321] fuse: Bad value for 'fd' [ 2776.341816][T16330] devtmpfs: Unknown parameter 'fd' 06:17:14 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x84240, 0x0) mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x5000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8021, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 06:17:14 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000a00), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000a00), 0x4) 06:17:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x1, 0x8, 0x3ffdcf, 0x5}, 0x48) 06:17:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x5, [@dev, @multicast, @dev, @remote, @dev]}) 06:17:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:14 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x0, @broadcast=0xe0000001}}}}}, 0x0) 06:17:15 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x0, @broadcast=0xe0000001}}}}}, 0x0) 06:17:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x2}) 06:17:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='GPL\x00', 0x1, 0xb2, &(0x7f0000000600)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcc00}, 0x80) 06:17:15 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x0, @broadcast=0xe0000001}}}}}, 0x0) 06:17:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x1, 0x8, 0x2, 0x1, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 2779.579360][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2779.585685][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:17:21 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x84240, 0x0) mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x5000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8021, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 06:17:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x0, 0x7, 0x4}, 0x48) 06:17:21 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 06:17:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x1, 0x8, 0x3ffdcf, 0x5}, 0x48) 06:17:21 executing program 4: pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, 0x0, 0xb) 06:17:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2782.797544][T16360] devtmpfs: Unknown parameter 'fd' 06:17:21 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 06:17:21 executing program 1: pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fcntl$getown(r0, 0x9) setpriority(0x0, r1, 0x0) 06:17:21 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0xa03c2, 0xa1) 06:17:21 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 06:17:21 executing program 4: pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0xfffffffffffffe8c) 06:17:21 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18) 06:17:31 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.log\x00', 0x803c2, 0x10a) 06:17:31 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x84240, 0x0) mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x5000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8021, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 06:17:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000200), 0x10) 06:17:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 06:17:31 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockname$tipc(r0, 0x0, 0x0) 06:17:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2793.272237][T16388] devtmpfs: Unknown parameter 'fd' 06:17:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42020400) 06:17:31 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f00000002c0)={0x2}, 0x6) 06:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x781, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @private0}]}, 0x30}}, 0x0) 06:17:31 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x4) setreuid(0x0, 0x0) 06:17:31 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000005c0), 0x0, &(0x7f0000000000)={0x7f}, 0x0, 0x0) 06:17:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x8, 0x0, "bd2c21ef2e399d7a"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000280)=0xd) 06:17:32 executing program 2: syz_emit_ethernet(0x9e, &(0x7f0000000740)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001d08", 0x68, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80502"}, {0x0, 0x1, "000005000000000000fac600"}]}}}}}}, 0x0) 06:17:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x1) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x715d1e64) 06:17:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={0x0}) 06:17:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:40 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) poll(&(0x7f00000004c0)=[{r0}], 0x1, 0x200) 06:17:40 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) 06:17:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000280)=0xd) [ 2801.655970][T16421] devtmpfs: Unknown parameter 'fd' 06:17:40 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x400000000}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000780)={{0x80000000, r3}}) 06:17:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 06:17:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045430, 0x0) 06:17:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) 06:17:40 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) 06:17:40 executing program 2: getgroups(0xfffffffffffffe53, &(0x7f0000000000)) 06:17:40 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a6, &(0x7f0000000200)={{@host}}) 06:17:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 2801.941241][ T27] audit: type=1326 audit(1676960260.447:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 06:17:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc00, &(0x7f0000000300)=@framed={{}, [@exit]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x88, &(0x7f0000000380)=""/136, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x40104593, 0x0) [ 2802.021738][ T27] audit: type=1326 audit(1676960260.447:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2802.136503][ T27] audit: type=1326 audit(1676960260.487:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2802.159511][ T27] audit: type=1326 audit(1676960260.487:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2802.182296][ T27] audit: type=1326 audit(1676960260.487:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2802.205849][ T27] audit: type=1326 audit(1676960260.607:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2802.238900][ T27] audit: type=1326 audit(1676960260.607:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2802.261893][ T27] audit: type=1326 audit(1676960260.607:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 06:17:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x200, 0x8000, 0xc, 0xffffffffffffffff, 0x1}, 0x48) 06:17:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 06:17:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/4) 06:17:46 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstat(0xffffffffffffffff, 0x0) 06:17:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, 0x0, 0x0) 06:17:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:17:46 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7ab, &(0x7f0000000200)={{@host}}) 06:17:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x200, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 2808.093440][ T27] audit: type=1326 audit(1676960266.597:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 06:17:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r1, 0x1}, 0x14}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_genetlink_get_family_id$SEG6(&(0x7f0000001780), r0) 06:17:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init() r1 = dup(r0) lseek(r1, 0x0, 0x0) 06:17:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x4004556d, &(0x7f00000000c0)) 06:17:46 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2808.235101][ T27] audit: type=1326 audit(1676960266.597:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2808.259407][ T27] audit: type=1326 audit(1676960266.637:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2808.287584][ T27] audit: type=1326 audit(1676960266.637:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=108 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:17:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x7f, 0x4) [ 2808.324396][ T27] audit: type=1326 audit(1676960266.637:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2808.395629][ T27] audit: type=1326 audit(1676960266.637:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2808.443891][ T27] audit: type=1326 audit(1676960266.637:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2808.478635][ T27] audit: type=1326 audit(1676960266.637:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2808.505023][ T27] audit: type=1326 audit(1676960266.637:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6549 code=0x7ffc0000 [ 2808.528468][ T27] audit: type=1326 audit(1676960266.697:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:17:54 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') 06:17:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x6, 0x88, &(0x7f0000000380)=""/136, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x200, 0x8000, 0x8}, 0x48) 06:17:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0xc06855c8, 0x0) 06:17:54 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) inotify_rm_watch(r0, r1) 06:17:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2816.407727][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 2816.407748][ T27] audit: type=1326 audit(1676960274.907:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 06:17:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000001b00)=0x0) io_submit(r1, 0x1, &(0x7f0000001100)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x0, r0, 0x0}]) 06:17:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0xffffffff}) [ 2816.466450][ T27] audit: type=1326 audit(1676960274.937:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.493360][ T27] audit: type=1326 audit(1676960274.957:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f41549 code=0x7ffc0000 06:17:55 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000003200)=[{{&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000000400)="9a", 0x1}], 0x3}}], 0x1, 0x0) 06:17:55 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}}) [ 2816.517007][ T27] audit: type=1326 audit(1676960274.957:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.540769][ T27] audit: type=1326 audit(1676960274.957:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.585325][ T27] audit: type=1326 audit(1676960274.957:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7f41549 code=0x7ffc0000 06:17:55 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) 06:17:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2816.711585][ T27] audit: type=1326 audit(1676960274.957:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.806328][ T27] audit: type=1326 audit(1676960274.957:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.874740][ T27] audit: type=1326 audit(1676960274.957:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2816.905176][ T27] audit: type=1326 audit(1676960274.957:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 06:18:02 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x6) 06:18:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000001b00)=0x0) io_submit(r1, 0x1, &(0x7f0000001100)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x0, r0, 0x0}]) 06:18:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 06:18:02 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "7d8bd5e697068cb8764ce561db4244fcf6a24040ad7d97cc66d62ad1950c97fa54778ea282214130b155d491926628b390c32e02bb913b6211dc2b68759a4b7a"}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000740), 0x0, 0x0, 0x0, r0) 06:18:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6609) 06:18:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000940)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002280)=ANY=[], 0x158}}], 0x2, 0x0) 06:18:02 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xfffffffffffffd12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 06:18:02 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, [@mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x91, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x40}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0x40, 0x4}, 0x61, &(0x7f0000000200)={0x5, 0xf, 0x61, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xf8, 0x2, 0xfff, 0xf00f, 0x1, [0x0, 0xffffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x80, 0x69, 0x80}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0xc, 0xa6}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "d180fb6362e4d63764b688f431e5c121"}, @ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x2104, 0x0, 0x1ff, [0xf, 0x3f00, 0xc000, 0xc0, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0xd2, &(0x7f00000002c0)=@string={0xd2, 0x3, "db241d503ffd8b77cdfdc55bbf4c1f27172c6582c7e7fd6fc210abaa2e9f895fee3147fab0eb5edaebe0869d55ab0045ac7c4da92ef9622261ca77b7bf3df5524f82eb2f01d45dc4e9b96f06bb2c7dae670318076696ae61a515cd68fb2905a9ed491eae4e80469bf96e1d315d94064401371d5a73ccba837e898570d23f41a103c7fb48d459eeca5390fe5310598f86666e5c589a97176bf1ccaefa4d66235217126d93c06f930fecd6eafec9b44e56729302893badeaaabcc83f5445746b34203133081adbc93fc102c1b105d78436"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}]}) 06:18:02 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x9}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 06:18:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:02 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffceb4}) [ 2824.128213][T13344] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2824.248111][ T9290] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2824.398031][T13344] usb 3-1: Using ep0 maxpacket: 8 [ 2824.508024][ T9290] usb 2-1: Using ep0 maxpacket: 32 [ 2824.528492][T13344] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2824.657157][ T9290] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2824.758350][T13344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2824.768469][T13344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.776643][T13344] usb 3-1: Product: Ќ [ 2824.781410][T13344] usb 3-1: Manufacturer: ⓛ倝﴿瞋﷍寅䲿✟Ⱇ艥濽Ⴢꪫ鼮徉㇮漢鶆ꭕ䔀粬ꥍ冷≢쩡띷㶿勵艏⿫퐁쑝맩ٯⲻ깽ͧܘ陦憮ᖥ棍⧻꤅䧭긞聎魆滹ㄝ鑝䐆㜁娝챳莺襾炅㿒ꅁ윃䣻委쫮道叾夐蚏湦塜鞚欗쳱类晍刣ሗ鍭激ྒྷ훬ﻪ듉噎鍲褂괻ꫪ좼吿瑅㑫ㄠ࠳㿉ˁ뇁휅㚄 [ 2824.813351][T13344] usb 3-1: SerialNumber: ь [ 2824.848839][T16547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2824.868319][ T9290] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2824.877455][ T9290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.887063][T13344] usb 3-1: bad CDC descriptors [ 2824.896867][ T9290] usb 2-1: Product: syz [ 2824.901699][ T9290] usb 2-1: Manufacturer: syz [ 2824.906465][ T9290] usb 2-1: SerialNumber: syz [ 2825.084829][T13344] usb 3-1: USB disconnect, device number 19 [ 2825.165286][T16556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2825.177055][T16556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2825.239014][ T9290] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 2825.258813][ T9290] usb 2-1: USB disconnect, device number 20 06:18:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x0, 0x0, 0xfffffffd}, 0x48) 06:18:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:10 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x84240, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 06:18:10 executing program 0: io_setup(0x1ff, &(0x7f0000000000)=0x0) io_getevents(r0, 0x9, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}) 06:18:10 executing program 2: bpf$OBJ_PIN_MAP(0x8, &(0x7f00000000c0)={0x0}, 0x10) 06:18:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:10 executing program 2: bpf$OBJ_PIN_MAP(0x1d, &(0x7f00000000c0)={0x0}, 0x10) 06:18:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000480)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x10001) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 06:18:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0xc0045878, 0x0) 06:18:10 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/4\x00') 06:18:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newtaction={0x14, 0x6a, 0x1}, 0x14}}, 0x0) 06:18:16 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/exec\x00') write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) 06:18:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0xe7, &(0x7f0000000080)=""/231, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240), 0x8, 0x10, 0x0}, 0x80) 06:18:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:16 executing program 4: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/214}, 0xde, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x2, "635b34a05b9e99a7392f0f0ca2af3b771566e577d6e33739e5af6303abfee9121fa836c4cb07739582c324584907608bda0ffe0a2aad402019ef"}, 0x42, 0x800) 06:18:16 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 06:18:17 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) [ 2838.422864][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 2838.422885][ T27] audit: type=1326 audit(1676960296.927:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:18:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x100000, 0x4}, 0x48) 06:18:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x20, 0x10, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 06:18:17 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0xc0189436, 0x0) [ 2838.535809][ T27] audit: type=1326 audit(1676960296.957:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.559272][ T27] audit: type=1326 audit(1676960296.967:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.582025][ T27] audit: type=1326 audit(1676960296.967:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.622223][ T27] audit: type=1326 audit(1676960296.967:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.653258][ T27] audit: type=1326 audit(1676960296.967:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:18:17 executing program 4: syz_usb_connect$uac1(0x7, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002000000106b1d01014000010203010902"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x2, &(0x7f0000000740)=@string={0x2}}]}) keyctl$link(0x8, 0x0, 0x0) [ 2838.686492][ T27] audit: type=1326 audit(1676960296.967:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:18:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f00000000c0)={'veth0\x00'}) [ 2838.745875][ T27] audit: type=1326 audit(1676960296.967:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.771012][ T27] audit: type=1326 audit(1676960296.967:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2838.841283][ T27] audit: type=1326 audit(1676960296.967:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2839.097991][T13344] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2839.337980][T13344] usb 5-1: Using ep0 maxpacket: 16 [ 2839.528060][T13344] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2839.618071][T13344] usb 5-1: config 0 has no interfaces? [ 2840.050771][T13344] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2840.060064][T13344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.068620][T13344] usb 5-1: SerialNumber: syz [ 2840.077066][T13344] usb 5-1: config 0 descriptor?? [ 2840.333153][T13344] usb 5-1: USB disconnect, device number 22 [ 2841.019952][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.026327][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:18:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="44bad4c40990019496cdeb79512c56be", 0x10}, {0x0}, {&(0x7f0000000000)="9788b16f2f464ea400a92fe5ec60244d4cec53610ad5c6a8322943858e0bb1", 0x1f}, {&(0x7f0000000480)="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", 0xd9a}, {&(0x7f0000000040)="2ae159f2d2b02c8e7d1829ebb10cb036bb194d4d2be570c5ba3a54aa21fcda3145afe47674ef6fc17ea7fb74bcaf1709c5b9df9d86e12300ed5b8b44af9d55462bd5183053fcfba65bea1e0adc4905e7f9045514217c6c1421b1f99a37b8bd0270cec8a434946653ad40f046ece8e69502e130ead835aa8bbbaad8a35da82e30ba20358bda93ba7e02b04f19c853e355834673df9cb7cc00f8d9773784657041f10e0307a1d9db46edafe456b4846c526c1f3fadbe5c2ecf", 0xb8}], 0x5, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x38}, 0x0) 06:18:25 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81}}}}}]}}]}}, 0x0) 06:18:25 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 06:18:25 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xb4, &(0x7f0000000340)=ANY=[@ANYBLOB="050fb40004"]}) 06:18:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:25 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000300)=0x4) [ 2846.931261][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 2846.931282][ T27] audit: type=1326 audit(1676960305.437:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.003165][ T27] audit: type=1326 audit(1676960305.477:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.026487][ T27] audit: type=1326 audit(1676960305.477:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:18:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ipt={0x2, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "91986c06a9eafba9ed3ea2de4aa9c6dc32"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 06:18:25 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = inotify_init1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) [ 2847.049851][ T27] audit: type=1326 audit(1676960305.477:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.074011][ T27] audit: type=1326 audit(1676960305.487:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.097363][ T27] audit: type=1326 audit(1676960305.487:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.120494][ T27] audit: type=1326 audit(1676960305.487:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.143386][ T27] audit: type=1326 audit(1676960305.487:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.175986][ T27] audit: type=1326 audit(1676960305.487:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 06:18:25 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) [ 2847.209157][ T9290] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2847.220390][ T27] audit: type=1326 audit(1676960305.487:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16624 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77549 code=0x7ffc0000 [ 2847.243731][T14517] usb 1-1: new full-speed USB device number 13 using dummy_hcd 06:18:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$netlink(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000580)={0x10}, 0x10}], 0x1, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30}, 0x0) 06:18:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xfff, 0xfc, 0x0, 0x1}, 0x48) 06:18:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2847.478104][ T9290] usb 2-1: Using ep0 maxpacket: 8 [ 2847.598102][ T9290] usb 2-1: descriptor type invalid, skip [ 2847.603836][ T9290] usb 2-1: descriptor type invalid, skip [ 2847.610004][ T9290] usb 2-1: descriptor type invalid, skip [ 2847.615821][ T9290] usb 2-1: descriptor type invalid, skip [ 2847.618252][T14517] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2847.718143][ T9290] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2847.726985][ T9290] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2847.738045][ T9290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2847.788201][T14517] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 2847.797323][T14517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.806098][T14517] usb 1-1: Product: syz [ 2847.810977][T14517] usb 1-1: Manufacturer: syz [ 2847.815686][T14517] usb 1-1: SerialNumber: syz [ 2847.918503][ T9290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2847.927643][ T9290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.935957][ T9290] usb 2-1: Product: syz [ 2847.940257][ T9290] usb 2-1: Manufacturer: syz [ 2847.944902][ T9290] usb 2-1: SerialNumber: syz [ 2848.098294][T14517] usbhid 1-1:1.0: can't add hid device: -22 [ 2848.104554][T14517] usbhid: probe of 1-1:1.0 failed with error -22 [ 2848.114502][T14517] usb 1-1: USB disconnect, device number 13 [ 2848.282857][ T9290] usb 2-1: 0:2 : does not exist [ 2848.342317][ T9290] usb 2-1: USB disconnect, device number 21 06:18:29 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) 06:18:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getnetconf={0x14}, 0x14}}, 0x0) 06:18:29 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x6400473d, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="12", 0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 06:18:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:29 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 06:18:29 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$netlink(r0, 0x0, 0x0) 06:18:29 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00') 06:18:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100}, {0x6}]}) 06:18:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 06:18:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 06:18:29 executing program 0: socketpair(0x18, 0x0, 0x3, &(0x7f0000000340)) 06:18:29 executing program 1: socketpair(0x11, 0xa, 0x0, &(0x7f0000000340)) 06:18:40 executing program 3: syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 06:18:40 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_clone(0x40800000, &(0x7f0000000000)="e4a57552b81d77ca24fe0adf1a4b47fc67ed563a426943cff28640c09fd9781a2b731d902a9cad48e95a091d5ac70aef7474b42697a29ab9aa745ea66c48ebac76f2ebcaf79b7008e9c154eb06db6babca47357c35577fdb0582566c246459b5c589cde01ed104728f32d70c2eb7108b4617c53591aef7", 0x77, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="86f8976c89a44be47cee6245") 06:18:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 06:18:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 06:18:40 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, &(0x7f0000000040)) 06:18:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x401054d6, 0x0) 06:18:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 06:18:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xa5afc72e0f34bc4e}) 06:18:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454d0, 0x0) 06:18:40 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89a0, &(0x7f0000000040)={r0}) 06:18:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000680)={'pim6reg0\x00', {0x2, 0x0, @multicast2}}) 06:18:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003540)={&(0x7f0000002280)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x20044841) 06:18:48 executing program 1: select(0x40, &(0x7f00000309c0), &(0x7f0000030a00)={0x6}, 0x0, 0x0) 06:18:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89a0, &(0x7f0000000040)={r0}) 06:18:48 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x0) 06:18:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89a0, &(0x7f0000000040)={r0}) 06:18:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000000)=@ethtool_regs={0x4b}}) 06:18:48 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000002d80)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) 06:18:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfb, &(0x7f00000020c0)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89a0, &(0x7f0000000040)={r0}) 06:18:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) 06:18:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) close(r0) 06:18:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) 06:18:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xb, [@var={0x9, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000400)=""/201, 0x43, 0xc9, 0x1}, 0x20) 06:18:54 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000500)=""/154, 0x26, 0x9a, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='GPL\x00', 0x1, 0xb2, &(0x7f0000000600)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x10}, 0x80) 06:18:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:18:54 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x10, 0x10, 0x2, [@var={0x1}]}}, &(0x7f00000000c0)=""/206, 0x2a, 0xce, 0x1}, 0x20) 06:18:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x40, 0xffffffffffffffff}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfb, &(0x7f00000020c0)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x1a518) close(r0) 06:18:55 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000500)=""/154, 0x26, 0x9a, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='GPL\x00', 0x1, 0xb2, &(0x7f0000000600)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0}, 0x80) 06:18:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x1a518) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x7ffff065) write$cgroup_type(r0, &(0x7f0000000000), 0xd000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0x7ffff000) 06:18:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0xf, 0x0, 0x0, 0x0}, 0x20) 06:18:55 executing program 1: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/176) 06:18:55 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x5}}}}}}, 0x0) 06:19:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) 06:19:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xda8c) shutdown(r0, 0x0) listen(r0, 0x0) 06:19:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:19:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) listen(r0, 0xda8c) listen(r0, 0x0) listen(r0, 0x1000) 06:19:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070004000100000019ae074dc9", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00000008000100627066006000020008000600", @ANYRES32, @ANYBLOB="54000100500001000b0001006d69727265640000240002"], 0x8c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 06:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070004000100000019ae074dc9", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00000008000100627066006000020008000600", @ANYRES32, @ANYBLOB="54000100500001000b0001006d6972726564000024000280200002"], 0x8c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 06:19:01 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 06:19:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0x10}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) [ 2882.893781][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2883.017399][T16786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:19:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="8a8b45057d6f56741c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8ff000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r8], 0x20}}, 0x0) 06:19:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2883.074828][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2883.104264][T16792] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 06:19:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x1b00, 0x8003}, 0x48) 06:19:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x0) unshare(0x2000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) [ 2883.136492][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2883.239756][T16799] device bond2 entered promiscuous mode [ 2883.261273][T16804] device batadv2 entered promiscuous mode [ 2883.270043][T16804] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2883.279124][T16804] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 2883.301938][T16810] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 2883.391788][T16810] bond2 (unregistering): Released all slaves 06:19:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:19:11 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0xa03c2, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 06:19:11 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 06:19:11 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/block/ram10', 0x0, 0x0) 06:19:11 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 06:19:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="8a8b45057d6f56741c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8ff000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r8], 0x20}}, 0x0) 06:19:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0x5450, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x3c}, 0x8) 06:19:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x5) pipe2(&(0x7f0000000000), 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, 0x0, 0x0) [ 2893.389946][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:19:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x0, @broadcast}}) [ 2893.447638][T16819] device bond2 entered promiscuous mode 06:19:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) [ 2893.518726][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 06:19:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xf, 0x4, 0x4, 0x19f3, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)="a1020bdc6cd9e90653c131b010dd2c708202b881433695b8dbab7f19a2260fd50768a97cc494814bd4a14cf15896f5c50f3d46977fa1aecf2a25440c1e98647300c1", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 2893.563274][T16819] device batadv3 entered promiscuous mode [ 2893.572387][T16819] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 2893.581555][T16819] bond2: (slave batadv3): Enslaving as an active interface with an up link 06:19:12 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff]}, 0x2) 06:19:12 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) [ 2893.682117][T16819] bond2 (unregistering): (slave batadv3): Releasing backup interface [ 2893.729587][T16819] bond2 (unregistering): Released all slaves [ 2893.765484][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2893.765506][ T27] audit: type=1326 audit(1676960352.267:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2893.823362][ T27] audit: type=1326 audit(1676960352.267:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2893.847614][ T27] audit: type=1326 audit(1676960352.297:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2893.870763][ T27] audit: type=1326 audit(1676960352.297:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2893.899597][ T27] audit: type=1326 audit(1676960352.297:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41549 code=0x7ffc0000 [ 2902.449586][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.455928][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:19:24 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000395"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x100d, &(0x7f0000000580)=""/4109, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x3, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0x3, 0x8}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000395"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x100d, &(0x7f0000000580)=""/4109, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 06:19:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000180)=@udp}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), 0x0}, 0x20) 06:19:24 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff]}, 0x2) 06:19:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 06:19:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={@remote, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a002c}) 06:19:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048881}, 0xd563d9a62c4615b9) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x2000000}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:19:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x0, @empty}}) 06:19:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 06:19:24 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff]}, 0x2) [ 2905.961788][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:19:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xaea2, 0x0) 06:19:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x60, 0x870) 06:19:24 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff]}, 0x2) 06:19:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0xae03, 0x0) 06:19:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 06:19:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x5000aea5, &(0x7f0000000040)) 06:19:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 06:19:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) 06:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xaea2, 0x0) 06:19:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x4008ae48) 06:19:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x8030ae7c) 06:19:35 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000980)={0x2, 0x4e23, @local}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000980)={0x2, 0x4e23, @local}, 0x10) 06:19:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x223) 06:19:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xaea2, 0x0) 06:19:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') read$FUSE(r0, 0x0, 0x0) 06:19:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 06:19:43 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000980)={0x2, 0x4e23, @local}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000980)={0x2, 0x4e23, @local}, 0x10) 06:19:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x20, 0x21, 0x1, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 06:19:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x223) 06:19:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x3c}}, 0x0) 06:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xaea2, 0x0) 06:19:43 executing program 5: timer_create(0x9, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 06:19:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x223) [ 2925.037679][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:19:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) 06:19:43 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x55, &(0x7f0000000200)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}, @ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d180fb6362e4d63764b688f431e5c121"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 06:19:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x223) 06:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x18, 0x2e, 0x1}, 0x18}}, 0x0) [ 2925.548118][T15657] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2925.788015][T15657] usb 1-1: Using ep0 maxpacket: 8 [ 2925.988213][T15657] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2926.158195][T15657] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2926.172083][T15657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2926.189366][T15657] usb 1-1: Product: syz [ 2926.196571][T15657] usb 1-1: Manufacturer: syz [ 2926.215270][T15657] usb 1-1: SerialNumber: syz [ 2926.259393][T15657] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2926.462788][T15657] usb 1-1: USB disconnect, device number 14 06:19:49 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:19:49 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3ff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10120, 0x0, 0x0) 06:19:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) 06:19:49 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000040), 0x23) 06:19:49 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x55, &(0x7f0000000200)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}, @ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d180fb6362e4d63764b688f431e5c121"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 06:19:49 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x44c0, 0x0) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 06:19:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnexthop={0x1c, 0x14, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 06:19:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003700)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000040)="dfceb26fce04051366180af2a0f9a37c61a3e1f1879b24b8d990d9b1cd376db408a4579d685529ac9d3eef1f3f1983a8b96e66a908979d9815cc814a3bcc430f1613afa365619849f25b5e7864a579b8c8d4d7cf9508515d8f06b7397d5fb1602a788441b2f8340f04e9a6e588840e2c3c448ac1171318c22a36713944ec3adecbfaf1e08f87fc41f082a69961af9402fbb276a1cb44ab02b347ef607fcd8d3b8a34394a801004987fcc28b4434c78cbfb519e609d76236e469d3036def1432b462eac7961537420be35773db883d4f000be62378416a24e982228", 0xdb}, {&(0x7f0000000140)="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", 0x4e6}], 0x2, &(0x7f00000075c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x40}}], 0x1, 0x0) [ 2931.390343][T16968] fuse: blksize only supported for fuseblk 06:19:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) 06:19:50 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x10) syz_clone(0x40800000, &(0x7f0000000000)="e4a57552b81d77ca24fe0adf1a4b47fc67ed563a426943cff28640c09fd9781a2b731d902a9cad48e95a091d5ac70aef7474b42697a29ab9aa745ea66c48ebac76f2ebcaf79b7008e9c154eb06db6babca47357c35577fdb0582566c246459b5c589cde01ed104728f32d70c2eb7108b4617c53591aef71c4d1aaac49f45", 0x7e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="86f8976c89a44be47cee62455aa13f4131d7684ac6a77c4e2dc3b6a1f81caf0c58103a0a1454782448d741c172cb") bpf$PROG_LOAD_XDP(0x4, &(0x7f0000001240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="d9cf64b0a674b8576801110dee6e654ef0bf5d57fecb34019e0989e1e8ac03886877f2cde9e471cda4ee355570657a7ee47da33a78279ebf59569eba82cc8da9a4387bc83aecf40f1cf248fc347ee9d268ae9d30b86394d374291db07f2984c9fc5ff3fbbdff1b2199ca6913b35084256a77ec80583c371abf51441829a43cd4ad8d0a5bfe95000f5bd07c3ebe20027e163e6e", 0x93}, {&(0x7f0000001140)="38c570d27e72f45fcd556108d0be4afa3218c48ea08b83c1ffa43055a0ca03325eab6aa56d87ad509e2a16863c2277a5e3a2af91bd67fc9ec9c240add46932d491d8716ed9e53cda722541879178d41e3df2ea16e688ef82f6be634a0a88b2c2986aeac469a3242426401d56697c6a40bfdbd1c0241158fd6cd119f8ecbdd3a193165a6430025123357109b263329240ededbbc274d6563f535c3c3926ab32f9e45a5ead34704ca420ac05c051b6353d2d33e6751f948505bf04ab5a95e8502c23b539af3772eeb03a348f9067d3d8c327048caa78f20c61d637643bb28f9b96667d946a32f7655d8d735fe53599130bdad3a1443246472d0a34fe6ec72f8486f4a4b931e30a55117703fae73864741a95c619fa5924e2aa0e7ca7dd37d33d738acc91fab4bb44f30d81f32ea3966e852fd23e4e06289f0d111935a4cbb1cb56acc36454dc297c66638755a231bfdd013331e28e33a8bccbbb716cbfd49746081e773c8d353d58741fd1de5c2b6ed0c9dabe4c53c2a3235ec1077ceb53ac8bacb4c78c45e70239d3794ae2d428996424bdeecf95d671372f8c534997ef14cde4aebecc531fabbe9a4bedf6c78d4cf2ea0dca9b0a645e8c932d9a0c018c39e4856d1d2720671e979e9898d3100a3b5c08848cb64abc25e153ff2af4ece8669e0cc5c60e158c619e0fe93eae56099c730c630b6bcac0a35ce0dc72f1031fadc1b1ca34293fffb513d5d7ae6d7a37021c79951197022d18883ee3dfb29817f1c808ed0aef36aad94d67740adb9bd8f5d359952396fa0d670bc81977f9e0affcd3a59fef23836730ccdce2bfa64000c947cc660794e0939a4a7ee47ac5c4454cd916c7a304600128078a201c793c7d1e917920e305dc18b9ff58194f277f272fa12f744464bada6ff3c288d78db80ecb526f4e63584aace3a10395baf8b63e5a6df5fc2e5da87b124caa54cddadb0fc3320bd698d5b2db0f2db558af38004f3f0f8a54f78e05ae8882b2d34bf0757df779a4603fdd4c31c01b0370b291c0cededdef1edef0e74d0d4816c508dd571f7ba78cfa808882ece3a1f26c2578d5023b965767c1b9a03b0d487c8ce13242b955eaeee5b0a948d385bad2da82090263872f3f2ecfc0ce751bc8c373736f196bf0b4f00c7ab56829b63a239ed8468d2a748b3ad6298ec9f173c5993c785d2e79c207ad78403356c9af5dd611e02e6e6f85503b71203877eae8abc181df61fe29b9666edce09d5d85e4d21606c8fab110bb921c45b2ddb9975cac0cd90d7dca1695b4d001b3926ae27a7d05dbbe7c586ada21fe33b2b835742849048aeb5c29761b5ca127debd915138de071bc08caf7256cb518313250bf034834c87370b636f2009e949a14a51a8d1e744ba5036442209a32d6bed84c54f6b93954d5286b95932029adeee74c758843cd46a0e9fcc6cec60554bc6d4a82daa7decdf62ec0522f425a32102cc1dfec7a0751799e3bf7c9eda580b0dd110666b24536bad93133ebf90b3cce4197cf4566fc7ed6760587f0afc7ab61b9042c9c8c623624d2f4f2a9e81ef4642f44e6d4d54a20b2d7b7cdb3a73d2e1a280330bdd8434857e5b65708bfee64c0822669073268fa0337779eff1c25478cb174836d24b4621e164d3a6e4142740dcaceb21a325c684d3ed2dc7e93a53bf2536fa9baf575fc481fe7c22b1a68706c8924bcfbea72e7f50afa1754f3123452b3fbfb958c3ff2495fd0ace04d0ec3489ef3ec4ef8c9c9caeb6329211507e2ead5c25c19c93701b4808450f7479f191c43730a8f06e294f4609c414c728ffc93b97f0d9a42e91a144e9af8f9ff836ee2079b0b75b60d69c18633c45317f7a9bb0077ba6817a74c0080e61b6f5423a97e95902d0826e9405fc6e62f21bafaf92bdcb678a3d6c34d0cabf7fd32696f6fa3e9d7c256aba3249db22318bc0f6e8b000e22f5bb5cae0833e7035d1c62959838beb54b8c6af5eb78f80beeda0cb2cb50cd7978158369902104de269a4e1cfce2e3341fe71f6ea1f676f8f47321eeb51cea69d5fe73d613ee10166efce97b394f37c00a9f8866840f3ef6e0273ec17a83e407d337b7f280ee04ed85bdcbe0d03e288c5a38b6fc9c81f470ec56120169e1242879a71fc66a91a79ccc746e15231c0173fa03ea26f2e97a1731f3173aca349f9ac59f2f5f914ab6f7fdf706850dd86cce829b8ac4a522ef45c065bf07b49142b6ae43aa8e70da77bd25d4f1bc81ce502b04c8ec534c4f74c316a5a23ae271baea96d6417bce68bb5c794f4b58d9d068424ebc611d7436f972c6c337ce1bdcfe6cb27a2579a9436e04426b16317eb7d1de1f6fc2ae27966fdecd3ac1e3466549b51c0dd191a0c4ba3bf7e7d539711cf89cceef12024016269ccec651e97ea5e70fd09c59458384eb79a2dc921642d461d13ebb389498eba5edca163a17855152788dd2d2d0be79b5860f900593820caa5d0f1590a205c86593eca1e3037d91b2bbf97eed290ab2cf2edf2da8860f24afe642bc0378139964740b5029aa17768bbb2eef79d67f02d14c325c5b87a743694c96a00217449c34de5ce1193ad7b1d458641ecb7d1df4f38c260d64725043952f05971d74495c3da0ee3aecd4975780bc34ce0fee17ccd3c5ba6e44bb4735f4c5799dc8d6603ef50ca8fbdf37ec934f75dc91a58b31b2c1f27cb646a6a02377f9d278878f3b2f7732676a62bffc8f2f8c4627070ebea88c7b4e116e6b51dbf576cd32f711e167aad95da2d2ce554dc3613095a25f0efc1e23cf3835c19d688db9567c4f7dd335a80435a23b2d264107578c8b6940d87feef30a2cabc25034069e04e8c8ce59a685a4600c42d0e45f862262828f30d31a968c2e2abedfe650c5c29318ed9f2f81bbb3a2011c6da2f99e85e4c682276623afd370f4cb52e95f46864ab7460dd5ae09b163711dd61b9b5b4c844ea293055989ca9c18d1e979004e2e812b0b67ff0265efe2380ece63747c1ed6156d8815f0e8fa254c500fe0a8db7ac01ef502c781d405b8c1990effe6d0ba5498fd5a112726f303af70dd105961d20167564aae10f882582bce0b47e2da163d8cf6f869b2ecad075916e48e5caa2455328a535e236ba320e05c50ed1cb68c4d0ebeb57aacc4242898fbbcaecd90121da1b31685f87ee4e7070651ae8bc530338bf5e8c14149fa7f4be3b9d4f82f16c75f3980e7384ebc3dcc1fe23799f9229bd67a798303d27d8c4545c3eddcec45018484cf56f9a7655280043d85dd50a65efc5e61141b0b5e9034176f4204cacd412d5b1b130c1179e9bb0c50a43bc7c4592d9804779b3419417904afe2b5e85a5224f0b86b6aed666c7f1c4f7b2bbc47ad7e54161abe21451d9ace1df3136acecad99d71118a64e45a4ee667867c540a6a39f5641598de1662045940526923776a66b041f655f583d41cea589ef4a1c5e0ccd4743fa1ad2e9fccae1e4eed11dfbd4b0140549763cae7f42dae4c0f08eef26510922021e9160165ab9386e1d2302a05d51ef47fa96d1007d0e85ffe337ca3c32cf4d957faeb9b3dada6751675a7b8bb1b31184873a164d20bd0490484754dde5de82973a39ccdac3761ce2d00c66582e86be13ded30106f13ab11b14e1ceab3d393cb752d76ad9841a1960396a7129e6a31a6cc1f30f0db514db0495c5758aa6e239af20f1ba6958d5c94bad9ccad21ebe1bafd3f94259449e90f78e85aecd165c3c2f1e71b812b4f029040ee5f508b0d7397c671d34629f8610781a94f855cf0f3a4c15de5d925a1dfc6ccf29ec1a037db021f5a31878fea64dbada5b7b61cf9b59b7020819cb5f65358ed2332f0fc24c386a5818f569e8b0192cafbe7f52ac327313d91891737f41e472789c90de767e814043791e7aa74ab7a57ac26d9276ff6361b62ad1c90e4e131b1c034d40a0dcb15d1ea53075938f5994f3cb334afa374e3f4e58b0a7bb68a2cf328d9a7c821ac1b8516d47d29fd248e84b95dc514486308b56215c91c1bb268a1c36bbe9dda698c3a5a047da3e9f02d6b43ca3318872b72f0b69e8ce4853645df6023a6922b456bd9be3cd7b687b4f69ddd7593179b7ef59d7acbd97b5827c5ebcdf9df71a0bccd7a67499b9558c4efe0e74d4bbefc118e932502076d893a75d25eea6ce078140fb64b4790e586560b8e815bbc59a4bf6636389baa9c2fdd2ab407f7dcb6c5551078e69cf0b8f5718f1524c0a145024f81b7ea9f1a24bc8e250d89c6c1829be4a1a621ebd80daf7a8a9b21e402f34b7d70f22a99a630ead704adcf168d8969564c2baf46c9f6e973d5e387b101a87e4d6cb2f07a1fb57787d2bb2ef9fe35fff80c47bfdd7f381a029935d22b3eb85a51ddf4ab183a28bd740650b4e363aa234cd2b212821d9a046bb0ac1e772eeb82b3b18725f5422b5a5f16a312fc854e499f73f6922b6088b4ce3aca54adf2048a44b91f767be91f2845e2075433088b838cace2cd8b2aed2669d90408a8ada3057c31eae114d1ed36fed8769809ebb5e092ddadd415dd68ab3983c229a784db1403160ed1e1dd2e422b00e54b2e7d984b5faca5da6e2fe4853f46030ee4c9327a9857078467b84fcb85c27d74855bbeb89a05f38b20c90285b40fce4d0f23c28640b60f8c0b1189dd66378d39f3844ade5d9cdb23b21990a5b684ba558523874ef4d66cbd3bfcb05a4250f92678bd267c04e2fe325708aac71a42de932414c15d21359dd0c7156346612a130ed012a6a07e56059692b2bec437dbb2878e0ac39", 0xd26}], 0x3}, 0x0) [ 2931.531353][T16979] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 06:19:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) [ 2931.668095][T15908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2931.958151][T15908] usb 1-1: Using ep0 maxpacket: 8 [ 2932.168215][T15908] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2932.378416][T15908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2932.387542][T15908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2932.395823][T15908] usb 1-1: Product: syz [ 2932.400193][T15908] usb 1-1: Manufacturer: syz [ 2932.405112][T15908] usb 1-1: SerialNumber: syz [ 2932.454838][T15908] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2932.686238][T15908] usb 1-1: USB disconnect, device number 15 [ 2942.098069][T14517] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 2942.458167][T14517] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2942.638428][T14517] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 2942.647540][T14517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.655823][T14517] usb 4-1: Product: syz [ 2942.660943][T14517] usb 4-1: Manufacturer: syz [ 2942.665607][T14517] usb 4-1: SerialNumber: syz [ 2942.721182][T14517] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 06:20:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x781, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 06:20:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'syz_tun\x00', 0x2}) 06:20:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x20) 06:20:03 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x10) syz_clone(0x40800000, &(0x7f0000000000)="e4a57552b81d77ca24fe0adf1a4b47fc67ed563a426943cff28640c09fd9781a2b731d902a9cad48e95a091d5ac70aef7474b42697a29ab9aa745ea66c48ebac76f2ebcaf79b7008e9c154eb06db6babca47357c35577fdb0582566c246459b5c589cde01ed104728f32d70c2eb7108b4617c53591aef71c4d1aaac49f45", 0x7e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="86f8976c89a44be47cee62455aa13f4131d7684ac6a77c4e2dc3b6a1f81caf0c58103a0a1454782448d741c172cb") bpf$PROG_LOAD_XDP(0x4, &(0x7f0000001240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:20:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 06:20:03 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x55, &(0x7f0000000200)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}, @ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d180fb6362e4d63764b688f431e5c121"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) [ 2944.835794][T15908] usb 4-1: USB disconnect, device number 19 06:20:03 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000003c00)='ns/pid_for_children\x00') 06:20:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 06:20:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00036cc900000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffda7, &(0x7f0000000140)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 06:20:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x890c, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) [ 2945.052785][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2945.091984][T17015] device batadv4 entered promiscuous mode [ 2945.131042][T17015] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 2945.162044][T17015] team0: Port device batadv4 added 06:20:03 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005340)) 06:20:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8e6) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x21, @private=0xa010102, 0x4e23, 0x4, 'ovf\x00', 0x4}, {@multicast2}}, 0x44) [ 2945.188069][T14517] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2945.235969][T17015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2945.274237][T17015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2945.293016][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2945.311969][T17015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2945.324200][T17024] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20003 [ 2945.348437][T17015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2945.438005][T14517] usb 1-1: Using ep0 maxpacket: 8 [ 2945.638058][T14517] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2945.808081][T14517] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2945.821829][T14517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2945.830124][T14517] usb 1-1: Product: syz [ 2945.834485][T14517] usb 1-1: Manufacturer: syz [ 2945.839508][T14517] usb 1-1: SerialNumber: syz [ 2945.879265][T14517] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2946.142170][T14517] usb 1-1: USB disconnect, device number 16 06:20:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1d}]}) 06:20:10 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x82000100) inotify_rm_watch(r0, r1) 06:20:10 executing program 1: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 06:20:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00036cc900000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffda7, &(0x7f0000000140)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 06:20:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x26e1, 0x0) 06:20:10 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x55, &(0x7f0000000200)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}, @ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d180fb6362e4d63764b688f431e5c121"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 06:20:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xffff, 0x8, 0xe4de}, 0x48) 06:20:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1d, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) [ 2952.075755][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:20:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x5, 0x4, 0x2, 0x19f3, 0x0, 0x1}, 0x48) [ 2952.124382][T17040] device batadv0 entered promiscuous mode [ 2952.159890][T17040] 8021q: adding VLAN 0 to HW filter on device batadv0 06:20:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="018000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) [ 2952.200378][T17040] team0: Port device batadv0 added 06:20:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}}, 0x0) 06:20:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x39d}}) [ 2952.328078][T14517] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2952.432557][T17040] team0: Port device batadv0 removed [ 2952.568027][T14517] usb 1-1: Using ep0 maxpacket: 8 [ 2952.768284][T14517] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2952.948169][T14517] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2952.957555][T14517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.966233][T14517] usb 1-1: Product: syz [ 2952.970959][T14517] usb 1-1: Manufacturer: syz [ 2952.975591][T14517] usb 1-1: SerialNumber: syz [ 2953.029334][T14517] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2953.260043][ T9290] usb 1-1: USB disconnect, device number 17 06:20:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha224-ce\x00'}}}]}, 0x138}}, 0x0) 06:20:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) 06:20:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x39d}}) 06:20:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x10, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x40}}, 0x0) 06:20:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xa, 0x4, 0x4, 0x19f3, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, r0}, 0x38) 06:20:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x64, 0xa}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:20:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xe, 0x4, 0x4, 0x19f3, 0x0, 0x1}, 0x48) 06:20:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x39d}}) 06:20:20 executing program 0: msgrcv(0x0, &(0x7f0000000040)={0x0, ""/75}, 0x53, 0x0, 0x5c00) 06:20:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000002200)={{0x0, 0x0, 0x80}}) [ 2961.434038][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:20:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000900), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40081271, 0xffffffffffffffff) 06:20:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000008fc489"], 0x14}}, 0x0) [ 2963.889243][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2963.895573][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:20:27 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000a00)={0x3a32, 0x7fff, 0xf6}) 06:20:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x39d}}) 06:20:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000900), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 06:20:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000900), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x401870cc, 0xffffffffffffffff) 06:20:27 executing program 0: syz_clone3(&(0x7f0000003b00)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:20:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)) 06:20:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000900), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, 0xffffffffffffffff) 06:20:27 executing program 4: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r4, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 06:20:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000900), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 06:20:27 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="e23df2a109bc", @local, @val, {@ipv6}}, 0x0) [ 2968.735139][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:20:27 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 06:20:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) [ 2968.910527][T17117] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 06:20:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, 0x0, 0x0) 06:20:33 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 06:20:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x16, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 06:20:33 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7fff, 0x0) r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x3, 0x6, 0xeffffffffffffffe, 0x0, 0x4, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x6}}}, 0x78) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000580)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482cbae9a17ba12fc50", 0x11}], 0x1, 0x81806, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0'}, 0xb) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xb9c, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r2, 0x4c01) write$cgroup_type(r0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 06:20:33 executing program 5: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsuuid}]}}) 06:20:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 06:20:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5}}]}}, &(0x7f00000000c0)=""/134, 0x32, 0x86, 0x1}, 0x20) 06:20:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x2000000, 0x0) 06:20:33 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000100)) 06:20:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 06:20:33 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x5, 0x0) 06:20:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x2000000, 0x0) 06:20:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) [ 2983.648497][T14517] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2984.048219][T14517] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2984.128033][T14517] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2984.298068][T14517] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 2984.307469][T14517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.316084][T14517] usb 4-1: Product: syz [ 2984.320760][T14517] usb 4-1: Manufacturer: syz [ 2984.325466][T14517] usb 4-1: SerialNumber: syz [ 2984.372208][T14517] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 06:20:44 executing program 3: semget(0x0, 0x3, 0x715) 06:20:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="fc2d98bc7c87d172c419bfb785a3ca95b315724356071eb6891fd815dc5bba9a0930157bbcb4d2d44f6ca7d4073791622708946210e03dc7305937ff7fcc6785da", 0x41}], 0x1}, 0x0) poll(&(0x7f0000000040)=[{}, {}], 0x55, 0x0) 06:20:44 executing program 1: mlock(&(0x7f0000fec000/0x12000)=nil, 0x12000) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 06:20:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x2000000, 0x0) 06:20:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10b40, 0x0) 06:20:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x43, 0x0, 0x0) [ 2986.392899][T15908] usb 4-1: USB disconnect, device number 20 06:20:44 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000011c0), 0x0) 06:20:44 executing program 5: semget(0x0, 0x0, 0x715) 06:20:45 executing program 1: munmap(&(0x7f0000f5b000/0x3000)=nil, 0x3000) mmap(&(0x7f0000f5b000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 06:20:45 executing program 0: syz_emit_ethernet(0x4f, &(0x7f0000000440)={@random="1f451b8ab472", @random="980300001b20", @val, {@ipv4}}, 0x0) 06:20:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x2000000, 0x0) 06:20:45 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000)=0x7fffffff, 0x4) 06:20:55 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @empty, @val, {@ipv6}}, 0x0) 06:20:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) 06:20:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002700)="c8", 0x1}], 0x1}}], 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvfrom$unix(r1, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x20000000) 06:20:55 executing program 2: pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:20:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:55 executing program 5: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 06:20:55 executing program 2: pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:20:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:20:55 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:20:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:20:55 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:20:55 executing program 2: pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:21:01 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x2000000, 0x0) 06:21:01 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:21:01 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:21:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x2000000, 0x0) 06:21:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x2000000, 0x0) 06:21:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:21:01 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:21:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:08 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:21:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:09 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x2000000, 0x0) 06:21:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:09 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3011.007736][T17284] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3011.260908][T17292] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 06:21:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3018.005151][T17320] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3018.091177][T17322] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3018.130448][T17316] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:16 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:23 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffd8, 0x0) 06:21:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffd8, 0x0) 06:21:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="fc", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r1, 0x0, 0x4ffd8, 0x0) [ 3025.330735][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.337166][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:21:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:24 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3025.599976][T17374] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3025.786720][T17392] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:24 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:33 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:33 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3034.753833][T17420] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 06:21:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3035.011248][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 3043.751025][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:21:42 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 06:21:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 06:21:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 3044.074441][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:21:42 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3044.195866][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3044.244214][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:21:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:53 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d20000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:53 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3055.329810][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3055.394475][T17523] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3055.416345][T17525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:21:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3055.630445][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3055.690678][T17542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:21:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 3055.753373][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:22:00 executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f0000001000)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100084, 0x0, 0x0, {r0}}, 0x20) 06:22:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:22:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:22:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:22:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:22:00 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000600), 0x100000000, 0x0) 06:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) [ 3061.878692][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:22:00 executing program 1: socketpair(0x1, 0x80000, 0x7ff, &(0x7f0000000400)) 06:22:00 executing program 5: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) [ 3061.965122][T17579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:22:00 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 06:22:00 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3062.388044][T17347] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 3062.788153][T17347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3062.828067][T17347] usb 2-1: not running at top speed; connect to a high speed hub [ 3062.908038][T17347] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3063.078073][T17347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3063.087192][T17347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.096537][T17347] usb 2-1: Product: syz [ 3063.101131][T17347] usb 2-1: Manufacturer: syz [ 3063.105872][T17347] usb 2-1: SerialNumber: syz [ 3063.150047][T17347] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 3063.355619][ T9289] usb 2-1: USB disconnect, device number 22 06:22:06 executing program 0: syz_io_uring_setup(0x7d0d, &(0x7f0000000900)={0x0, 0x0, 0x2}, &(0x7f0000fb4000/0x2000)=nil, &(0x7f0000e53000/0x1000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) 06:22:06 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x2, 0x0, @loopback}, 0x10) 06:22:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x20004085) 06:22:06 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 06:22:06 executing program 1: r0 = io_uring_setup(0xab, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 06:22:06 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:06 executing program 1: syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) 06:22:06 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000080)) 06:22:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 06:22:06 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) [ 3068.395694][T17629] dlm: non-version read from control device 0 06:22:06 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) 06:22:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r2}, {r3, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0), 0x8) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff4b, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:07 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 06:22:07 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 06:22:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:13 executing program 5: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_setup(0x4fef, &(0x7f0000000280)) io_uring_enter(0xffffffffffffffff, 0x0, 0x51b2, 0x0, &(0x7f0000000400), 0x8) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 06:22:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="6bc83bfd13579c2fe02bf30ddc874e2d464f3cfe0cc6a86292bef20ec0da1ad4324e02ea1d859d294aee68e4018d0173a804c3b1c6fca61008bd9338d16b44d6790af278da7cf5bff27316e39ffdacda28f7e69a1680a6d9f306fa05df8bc3db6733a9aa7fc6a6f36a7bf95ab96709d74ff15526838b141d021f16be77c2ce6e3ed7cf3a322d947b506193cd7a608fec5df33b32c3d5668cbb201fff2dfa61e1f01f5ab909105662915f560e5be56aaacf5d25dc98be6f8aacfb3376c40d26405940466c9f610a2c1f9003dd8f8619cfcadebd352a29ad7f8d59046000e4e8a1227058334eba6d8c5daa09c1c9df82faa04dbfc48fbbbeed806a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:13 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r2, 0x0, &(0x7f0000000180)='\a', 0x1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x10000, 0x0, r2, 0x3847d8}) 06:22:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:13 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2a, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:22:13 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 06:22:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000005c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 06:22:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3075.538129][ T9290] usb 1-1: new high-speed USB device number 18 using dummy_hcd 06:22:14 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 3075.898194][ T9290] usb 1-1: config 1 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3075.944970][ T9290] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3076.138171][ T9290] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.40 [ 3076.157220][ T9290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.190514][ T9290] usb 1-1: Product: syz [ 3076.208908][ T9290] usb 1-1: Manufacturer: syz [ 3076.229815][ T9290] usb 1-1: SerialNumber: syz [ 3076.300028][ T9290] gspca_main: spca501-2.14.0 probing 0000:0000 [ 3076.517955][ T9290] gspca_spca501: reg write: error -71 [ 3076.523562][ T9290] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 3076.551648][ T9290] spca501: probe of 1-1:1.0 failed with error -22 [ 3076.569148][ T9290] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 3076.594019][ T9290] usb 1-1: USB disconnect, device number 18 06:22:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="6bc83bfd13579c2fe02bf30ddc874e2d464f3cfe0cc6a86292bef20ec0da1ad4324e02ea1d859d294aee68e4018d0173a804c3b1c6fca61008bd9338d16b44d6790af278da7cf5bff27316e39ffdacda28f7e69a1680a6d9f306fa05df8bc3db6733a9aa7fc6a6f36a7bf95ab96709d74ff15526838b141d021f16be77c2ce6e3ed7cf3a322d947b506193cd7a608fec5df33b32c3d5668cbb201fff2dfa61e1f01f5ab909105662915f560e5be56aaacf5d25dc98be6f8aacfb3376c40d26405940466c9f610a2c1f9003dd8f8619cfcadebd352a29ad7f8d59046000e4e8a1227058334eba6d8c5daa09c1c9df82faa04dbfc48fbbbeed806a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:22 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:22 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec347da0d6236378cd4324a11a67d5069f633c06e9d6cef4554ad9739daa4ec1cd19dff786aeb933a8bd2fb3c32324e1e417866215cd2e5ee9a1df37c2c63c66"}}}}, 0x0) 06:22:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:22 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) 06:22:22 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fcntl$getown(r1, 0x9) syz_open_dev$usbfs(&(0x7f0000000600), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f00000007c0), 0x0, 0x200000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 06:22:22 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec347da0d6236378cd4324a11a67d5069f633c06e9d6cef4554ad9739daa4ec1cd19dff786aeb933a8bd2fb3c32324e1e417866215cd2e5ee9a1df37c2c63c66"}}}}, 0x0) 06:22:22 executing program 0: r0 = io_uring_setup(0xab, &(0x7f0000000040)) syz_io_uring_setup(0x2906, &(0x7f0000000300), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000cbb000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x7d0d, &(0x7f0000000900), &(0x7f0000fb4000/0x2000)=nil, &(0x7f0000e53000/0x1000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) 06:22:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) connect$netlink(r0, &(0x7f0000000880), 0xc) 06:22:22 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:22 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x68d01cd6d0b5bf91) 06:22:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x2e1c578ce53a11d, 0x0, 0x0, {{}, {}, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}}, 0x34}}, 0x0) [ 3086.779832][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3086.786289][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:22:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="6bc83bfd13579c2fe02bf30ddc874e2d464f3cfe0cc6a86292bef20ec0da1ad4324e02ea1d859d294aee68e4018d0173a804c3b1c6fca61008bd9338d16b44d6790af278da7cf5bff27316e39ffdacda28f7e69a1680a6d9f306fa05df8bc3db6733a9aa7fc6a6f36a7bf95ab96709d74ff15526838b141d021f16be77c2ce6e3ed7cf3a322d947b506193cd7a608fec5df33b32c3d5668cbb201fff2dfa61e1f01f5ab909105662915f560e5be56aaacf5d25dc98be6f8aacfb3376c40d26405940466c9f610a2c1f9003dd8f8619cfcadebd352a29ad7f8d59046000e4e8a1227058334eba6d8c5daa09c1c9df82faa04dbfc48fbbbeed806a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x20000) 06:22:31 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000004d80), r0) 06:22:31 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) 06:22:31 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r4}, {r5, 0x6620}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0xc55f46f]}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="6bc83bfd13579c2fe02bf30ddc874e2d464f3cfe0cc6a86292bef20ec0da1ad4324e02ea1d859d294aee68e4018d0173a804c3b1c6fca61008bd9338d16b44d6790af278da7cf5bff27316e39ffdacda28f7e69a1680a6d9f306fa05df8bc3db6733a9aa7fc6a6f36a7bf95ab96709d74ff15526838b141d021f16be77c2ce6e3ed7cf3a322d947b506193cd7a608fec5df33b32c3d5668cbb201fff2dfa61e1f01f5ab909105662915f560e5be56aaacf5d25dc98be6f8aacfb3376c40d26405940466c9f610a2c1f9003dd8f8619cfcadebd352a29ad7f8d59046000e4e8a1227058334eba6d8c5daa09c1c9df82faa04dbfc48fbbbeed806a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 06:22:31 executing program 4: r0 = io_uring_setup(0xab, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 06:22:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x2e1c578ce53a11d, 0x0, 0x0, {{}, {}, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}}, 0x34}}, 0x0) 06:22:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 06:22:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000002100)=""/140, 0x26, 0x8c, 0x1}, 0x20) 06:22:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:32 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = io_uring_setup(0x4e70, &(0x7f0000004cc0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000004f00), 0xffffffffffffffff) io_uring_setup(0x5f44, &(0x7f0000005140)) pipe2$watch_queue(&(0x7f00000068c0), 0x80) 06:22:45 executing program 3: syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x0) 06:22:45 executing program 4: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0xa, 0x0, 0x92b, &(0x7f0000000780)) 06:22:45 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 06:22:45 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x7f, 0x0, 0x38, [{{0x9, 0x4, 0x0, 0x37, 0x2, 0x2, 0x6, 0x0, 0xc1, {{0x8, 0x24, 0x6, 0x0, 0x0, "654b9c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x6, 0x8}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0xc1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x8, 0xce}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x100, 0x3, 0x2, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x421}}, {0x0, 0x0}, {0xc1, &(0x7f00000001c0)=@string={0xc1, 0x3, "0d901ff35dc9d7a73c110ee0f6637dcfc029af4987521cd42c5e9afab9f6a4a66ed1e11781920c90283b814b3a28ad8e661847499e95362d114084531c0d2dd18ef185f33f9365642b1277542322d77b19503948d83753b7031e5457352fc0fc8c37b6836856fb56d373d46da741c80e3da4d6ac23dd65682aa7a34e46c377c995469165e201586a66955e8371eabd23f5ff1f36a468139b13d125d3cdefd91ddcef3d58d1c22b7616ea9640a69dff07168275c0a3892ad95baa013bd22491"}}]}) 06:22:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:45 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x7f, 0x0, 0x38, [{{0x9, 0x4, 0x0, 0x37, 0x2, 0x2, 0x6, 0x0, 0xc1, {{0x8, 0x24, 0x6, 0x0, 0x0, "654b9c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x6, 0x8}, [@acm={0x4, 0x24, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x4c, 0xf8, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x9dd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x20, 0xc1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x3f, 0x48}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x8, 0xce}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x100, 0x3, 0x2, 0x4, 0x10, 0x1}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xcd, &(0x7f00000001c0)=@string={0xcd, 0x3, "0d901ff35dc9d7a73c110ee0f6637dcfc029af4987521cd42c5e9afab9f6a4a66ed1e11781920c90283b814b3a28ad8e661847499e95362d114084531c0d2dd18ef185f33f9365642b1277542322d77b19503948d83753b7031e5457352fc0fc8c37b6836856fb56d373d46da741c80e3da4d6ac23dd65682aa7a34e46c377c995469165e201586a66955e8371eabd23f5ff1f36a468139b13d125d3cdefd91ddcef3d58d1c22b7616ea9640a69dff07168275c0a3892ad95baa013bd224917dcf97fda72c8264b06a7de6"}}]}) 06:22:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000007140)={0x0, 0x0, 0x0}, 0x0) 06:22:45 executing program 4: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 06:22:45 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x3}, 0xc) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:22:45 executing program 4: pselect6(0x17, &(0x7f0000000180), &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0) 06:22:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2}}) [ 3107.143824][T17347] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 3107.152477][T13267] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 3107.518131][T17347] usb 6-1: config 1 interface 0 altsetting 55 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3107.528187][T13267] usb 2-1: config 1 interface 0 altsetting 55 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 3107.539318][T17347] usb 6-1: config 1 interface 0 altsetting 55 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 3107.551509][T13267] usb 2-1: config 1 interface 0 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3107.565411][T17347] usb 6-1: config 1 interface 0 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3107.578838][T13267] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3107.585551][T17347] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3107.738085][T13267] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3107.747315][T13267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3107.756475][T13267] usb 2-1: Product: 㰊 [ 3107.761959][T13267] usb 2-1: Manufacturer: 《 [ 3107.766863][T13267] usb 2-1: SerialNumber: 逍쥝ꟗᄼ揶콽⧀䦯劇퐜帬漢ꚤ텮១銁逌㬨䮁⠺躭ᡦ䥇閞ⴶ䀑厄ജ턭錿摥ራ呷∣篗候䠹㟘띓ḃ坔⼵ﳀ㞌莶器囻珓淔䆧່ꐽ곖桥Ꜫ亣썆쥷䚕斑Ǣ橘镦荞⎽￵㘟梤鬓턓팥ᷙ堽싑瘫䂖鶦߿舖쁵覣꩛㬁ⓒ綑韏ꟽ般끤絪 [ 3107.821813][T17780] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3107.968450][T17347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3107.977580][T17347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3107.986267][T17347] usb 6-1: Product: 逍쥝ꟗᄼ揶콽⧀䦯劇퐜帬漢ꚤ텮១銁逌㬨䮁⠺躭ᡦ䥇閞ⴶ䀑厄ജ턭錿摥ራ呷∣篗候䠹㟘띓ḃ坔⼵ﳀ㞌莶器囻珓淔䆧່ꐽ곖桥Ꜫ亣썆쥷䚕斑Ǣ橘镦荞⎽￵㘟梤鬓턓팥ᷙ堽싑瘫䂖鶦߿舖쁵覣꩛㬁ⓒ [ 3108.014747][T17347] usb 6-1: SerialNumber: syz [ 3108.048435][T17778] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3108.108782][T13267] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 3108.119701][T13267] usb 2-1: USB disconnect, device number 23 [ 3108.348885][T17347] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 3108.373414][T17347] usb 6-1: USB disconnect, device number 20 06:22:52 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1fb7c597000000070000000086dd6392e91700145000fe8000000000000000000000000000aaca"], 0x0) 06:22:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x3e, 0x0) 06:22:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0x7, 0x0) 06:22:52 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 06:22:52 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x4008744b, &(0x7f0000000180)=0x281) 06:22:52 executing program 4: r0 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 06:22:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0x7, 0x0) 06:22:52 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x1) 06:22:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0x7, 0x0) 06:22:52 executing program 4: select(0x40, &(0x7f00000006c0)={0x7}, 0x0, 0x0, &(0x7f0000000780)={0x8001}) 06:22:52 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 06:23:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0x7, 0x0) 06:23:01 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=""/240}, 0x20) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0xae60, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x9, 0x0, [{0x0, 0x0, 0xc9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xe0}]}}) close(r5) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendfile(r7, r6, 0x0, 0x11f01) r8 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 06:23:01 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000000)) 06:23:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x4e8, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087e8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) dup(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0xe20, @rand_addr=0x64010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78050a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e756d44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$nl_generic(0x10, 0x3, 0x10) 06:23:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x3, 0x4000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000040000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 06:23:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 06:23:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3124.018085][ T9289] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3124.257849][ T9289] usb 1-1: Using ep0 maxpacket: 16 06:23:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3124.378131][ T9289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3124.378195][ T9289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3124.378249][ T9289] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3124.378292][ T9289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:23:03 executing program 4: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x9}]) [ 3124.380746][ T9289] usb 1-1: config 0 descriptor?? [ 3124.993564][ T9289] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input21 [ 3125.101202][ T9289] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input22 [ 3125.160529][ T9289] kye 0003:0458:5019.0003: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 3125.213836][ T9289] usb 1-1: USB disconnect, device number 19 06:23:13 executing program 3: syz_open_dev$usbfs(&(0x7f0000000600), 0x10, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0) 06:23:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:23:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 06:23:13 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 06:23:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 06:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="a247000053"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:23:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:14 executing program 4: syz_emit_ethernet(0x4f, &(0x7f0000000200)=ANY=[@ANYBLOB="e1479ef21d21649fe2b8fb3e86dd60d3e3a600190000000000000000000000000000000000000000000001"], 0x0) [ 3135.777837][T14517] usb 1-1: new high-speed USB device number 20 using dummy_hcd 06:23:14 executing program 4: ioperm(0x0, 0x18c, 0xcb) ioperm(0x0, 0x3, 0x0) 06:23:14 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) 06:23:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 3136.017880][T14517] usb 1-1: Using ep0 maxpacket: 16 [ 3136.138008][T14517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3136.149249][T14517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3136.160306][T14517] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3136.169807][T14517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.180497][T14517] usb 1-1: config 0 descriptor?? [ 3136.797612][T14517] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input23 [ 3136.881007][T14517] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input24 [ 3137.025654][T14517] kye 0003:0458:5019.0004: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 3137.061791][T14517] usb 1-1: USB disconnect, device number 20 06:23:23 executing program 3: getresuid(&(0x7f00000002c0), 0x0, 0x0) 06:23:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 06:23:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:23 executing program 5: rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x8) 06:23:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:23:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 06:23:23 executing program 5: syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc293, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:23:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:23:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:23:23 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc293, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 06:23:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3145.098096][T17347] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 3145.310107][T14517] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3145.367979][T17347] usb 1-1: Using ep0 maxpacket: 16 [ 3145.498003][T17347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3145.509341][T17347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3145.520001][T17347] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3145.529670][T17347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3145.544813][T17347] usb 1-1: config 0 descriptor?? [ 3145.698121][T14517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3145.709322][T14517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3145.719898][T14517] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3145.768217][T14517] usb 5-1: language id specifier not provided by device, defaulting to English [ 3145.908032][T14517] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.40 [ 3145.917224][T14517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.925795][T14517] usb 5-1: Product: syz [ 3145.930476][T14517] usb 5-1: Manufacturer: syz [ 3145.935211][T14517] usb 5-1: SerialNumber: syz [ 3146.176864][T17347] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0005/input/input25 [ 3146.228163][T14517] usbhid 5-1:1.0: can't add hid device: -22 [ 3146.234259][T14517] usbhid: probe of 5-1:1.0 failed with error -22 [ 3146.248917][T14517] usb 5-1: USB disconnect, device number 23 [ 3146.273122][T17347] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0005/input/input26 [ 3146.348012][T17347] kye 0003:0458:5019.0005: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 3146.382009][T17347] usb 1-1: USB disconnect, device number 21 [ 3148.219850][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.226247][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:23:31 executing program 3: bpf$PROG_LOAD(0x18, 0x0, 0x0) 06:23:31 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:23:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 06:23:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000043eaff"], 0x4c}}, 0x0) 06:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 06:23:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:31 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f00000001c0), 0x48) 06:23:31 executing program 5: setrlimit(0x2, &(0x7f0000000100)={0x60000000, 0x60000000}) 06:23:32 executing program 4: ioperm(0x0, 0x18c, 0xcb) 06:23:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'syztnl0\x00', 0x0}) [ 3153.518123][T17347] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 3153.787828][T17347] usb 1-1: Using ep0 maxpacket: 16 [ 3153.907990][T17347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3153.919306][T17347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3153.929800][T17347] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3153.940415][T17347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.959727][T17347] usb 1-1: config 0 descriptor?? [ 3154.586682][T17347] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0006/input/input27 [ 3154.671552][T17347] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0006/input/input28 [ 3154.743761][T17347] kye 0003:0458:5019.0006: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 3154.776634][T17347] usb 1-1: USB disconnect, device number 22 06:23:41 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x4c, 0x0, 0x0) 06:23:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:41 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) modify_ldt$read_default(0x2, 0x0, 0x0) 06:23:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 06:23:41 executing program 5: ioperm(0x0, 0x18c, 0xcb) ioperm(0x0, 0x3, 0x54) 06:23:41 executing program 0: r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0xff600000) 06:23:41 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002200)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) 06:23:41 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002200)={0x0, 0x0, 0x0}, 0x0) 06:23:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:41 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) 06:23:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x3}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 06:23:41 executing program 5: bpf$PROG_LOAD(0x8, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3163.018171][T17347] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3163.258096][T17347] usb 5-1: Using ep0 maxpacket: 8 [ 3163.377983][T17347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3163.548171][T17347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3163.557439][T17347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.567540][T17347] usb 5-1: Product: syz [ 3163.572513][T17347] usb 5-1: Manufacturer: syz [ 3163.577166][T17347] usb 5-1: SerialNumber: syz [ 3163.876031][T17347] usb 5-1: USB disconnect, device number 24 06:23:49 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrusage(0x1, &(0x7f0000000600)) 06:23:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:49 executing program 0: bpf$PROG_LOAD(0x7, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 5: bpf$PROG_LOAD(0xd, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 1: syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) 06:23:49 executing program 4: bpf$PROG_LOAD(0x6, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002200)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) 06:23:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 06:23:49 executing program 4: bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:23:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 3171.567982][ T9290] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3171.837812][ T9290] usb 1-1: Using ep0 maxpacket: 16 [ 3171.958041][ T9290] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3171.968166][ T9290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.992350][ T9290] usb 1-1: config 0 descriptor?? [ 3172.688369][ T9290] video4linux radio32: keene_cmd_set failed (-71) [ 3172.694887][ T9290] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3172.705514][ T9290] usb 1-1: USB disconnect, device number 23 06:23:58 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYRES64], 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) 06:23:58 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[], 0x0) 06:23:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 06:23:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:23:58 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:23:58 executing program 5: syz_clone(0x0, 0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f00000023c0)='z') 06:23:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4bfa, 0x0) 06:23:59 executing program 5: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80101, 0x0) write$damon_attrs(r0, &(0x7f0000000040)={{}, {}, {}, {' ', 0x6}}, 0x69) 06:23:59 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3180.678255][T17347] usb 1-1: new high-speed USB device number 24 using dummy_hcd 06:23:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd4000161) [ 3180.719513][T15657] usb 2-1: new low-speed USB device number 24 using dummy_hcd 06:23:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x5) 06:23:59 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3180.948000][T17347] usb 1-1: Using ep0 maxpacket: 16 [ 3181.098255][T17347] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3181.118197][T15657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3181.130551][T17347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3181.147807][T15657] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3181.167251][T17347] usb 1-1: config 0 descriptor?? [ 3181.177147][T15657] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3181.207283][T15657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3181.487227][T15657] usb 2-1: USB disconnect, device number 24 [ 3181.857965][T17347] video4linux radio32: keene_cmd_set failed (-71) [ 3181.864483][T17347] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3181.884978][T17347] usb 1-1: USB disconnect, device number 24 [ 3182.077951][T15657] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3182.328178][T15657] usb 2-1: Using ep0 maxpacket: 8 [ 3182.468458][T15657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3182.478876][T15657] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3182.487987][T15657] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3182.497088][T15657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.752548][T14615] usb 2-1: USB disconnect, device number 25 06:24:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYRES64], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 06:24:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:24:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:24:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() getpriority(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 06:24:08 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_usbip_server_init(0x1) writev(r0, &(0x7f0000002680)=[{&(0x7f00000003c0)="3b2d3a49389104f75fd7c78a1c14b33bf0e301b19f05f565e6dc09e8cc36742f49a5b3a8ffaba60626275b4db90be004119c3cbc76d27ad1188652c43d6eb97c20614ad3a76776277deab5558ce4c08d7b42085abe1eca1e0f1902d957602ed120df316b4cc9955cef7fecb8b9c7e50ce33b2a4f12a67a", 0x77}, {0x0}, {0x0}], 0x3) 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3189.856255][T18113] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 3189.863258][T18113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3189.888269][ T9289] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3189.924003][T18113] vhci_hcd vhci_hcd.0: Device attached 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3190.057544][T18116] vhci_hcd: connection closed [ 3190.061724][T12604] vhci_hcd: stop threads [ 3190.097583][T12604] vhci_hcd: release socket [ 3190.125276][T12604] vhci_hcd: disconnect device [ 3190.158115][ T9289] usb 1-1: Using ep0 maxpacket: 16 06:24:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3190.187948][T15657] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 3190.206023][T15657] usb 19-1: enqueue for inactive port 0 [ 3190.299317][ T9289] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3190.308008][T15657] vhci_hcd: vhci_device speed not set [ 3190.317226][ T9289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3190.388525][ T9289] usb 1-1: config 0 descriptor?? [ 3191.107990][ T9289] video4linux radio32: keene_cmd_set failed (-71) [ 3191.117367][ T9289] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3191.144790][ T9289] usb 1-1: USB disconnect, device number 25 06:24:15 executing program 3: chroot(0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 06:24:15 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:15 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_usbip_server_init(0x1) writev(r0, &(0x7f0000002680)=[{&(0x7f00000003c0)="3b2d3a49389104f75fd7c78a1c14b33bf0e301b19f05f565e6dc09e8cc36742f49a5b3a8ffaba60626275b4db90be004119c3cbc76d27ad1188652c43d6eb97c20614ad3a76776277deab5558ce4c08d7b42085abe1eca1e0f1902d957602ed120df316b4cc9955cef7fecb8b9c7e50ce33b2a4f12a67a", 0x77}, {0x0}, {0x0}], 0x3) 06:24:15 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000400), 0x10, 0x0) 06:24:15 executing program 1: setuid(0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0x1) 06:24:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:24:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xff9}, 0x0, 0x0) dup2(r3, r2) 06:24:15 executing program 4: readv(0xffffffffffffffff, &(0x7f0000001880)=[{0x0}], 0x1) [ 3196.932241][T18143] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 3196.938849][T18143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 06:24:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000180)="e1ecb8179ed256d717c4080cbe081ca9c059853663966a90fc01c95d68c5c43c2e75922a9a2f5feff896d50411225c1aea89a54448f3021c53c224924bc09add918e1496894adb6ac5ba965eb22ab060e37989bd93043025e1a795408e54473d9a6f3add5bb42f6a21db2a08509b5d07944e25b198d1e7121515037693f1c16ac506a090f129b272eb75e4af49ed7b5dcd21da9489d555a5a739845a217420dc57814485612197af4ab3dad086fff81c0957276716682f6e0341c55c984fae92025a344c40e8e382d39db289e4d5b3a9d1cc0e81e84364337f224b00c305d40d81fb7e5c31076442c03e7080b4ff73f2c88a482c3acddca247eb682fdb1b18460f0fe0910ef0849219468397cf36a15a902d046e98ba1574a8c9432e6bfd1a85b941a772db0a86fb0e77285b2efc3849af073d0f1e55564a284936f66bbe9803ba688533c552d9fb5153a2d8976a8a280823b9e84b0d980b8dd5af7cd20df8c6326f0035e1a87ac95005ee9f95f983b24b", 0x171, 0x0, 0x0, 0x0) 06:24:15 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3196.985941][T18143] vhci_hcd vhci_hcd.0: Device attached 06:24:15 executing program 4: sendto(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000680)=@hci={0x1f, 0x2}, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3197.038168][T18147] vhci_hcd: connection closed [ 3197.039548][T18017] vhci_hcd: stop threads [ 3197.058340][T18017] vhci_hcd: release socket [ 3197.062831][T18017] vhci_hcd: disconnect device 06:24:15 executing program 1: socket(0x18, 0x0, 0x10000) [ 3197.160880][ T9290] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 3197.427870][ T9290] usb 1-1: Using ep0 maxpacket: 16 [ 3197.558475][ T9290] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3197.577756][ T9290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3197.602701][ T9290] usb 1-1: config 0 descriptor?? [ 3198.297926][ T9290] video4linux radio32: keene_cmd_set failed (-71) [ 3198.304584][ T9290] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3198.313590][ T9290] usb 1-1: USB disconnect, device number 26 06:24:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) 06:24:23 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 06:24:23 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc0189436, &(0x7f0000000080)) 06:24:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:23 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/packet\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:24:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:24:23 executing program 4: socketpair(0x2, 0x6, 0x5, &(0x7f00000001c0)) 06:24:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000007c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 06:24:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000540), 0x14) 06:24:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:23 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 06:24:23 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 3205.497976][T15657] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 3205.747814][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3205.868146][T15657] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3205.877346][T15657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.888031][T15657] usb 1-1: config 0 descriptor?? [ 3206.368203][T15657] video4linux radio32: keene_cmd_main failed (-71) [ 3206.374805][T15657] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3206.385271][T15657] usb 1-1: USB disconnect, device number 27 [ 3209.660372][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3209.666730][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:24:30 executing program 3: dup(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x1002000) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$vcsu(0x0, 0x0, 0x0) 06:24:30 executing program 1: socketpair(0x2, 0x0, 0x5, &(0x7f00000001c0)) 06:24:30 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000001f80), &(0x7f0000001fc0)=0xc) 06:24:30 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:30 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'vlan0\x00'}) 06:24:30 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) 06:24:30 executing program 4: socket(0x0, 0x8000d, 0x0) 06:24:30 executing program 4: request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0xfffffffffffffffa) 06:24:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000004740)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, @rc={0x1f, @none}, @nl=@unspec}) 06:24:30 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:24:30 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x40030000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 06:24:30 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3211.887936][T15657] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3212.127923][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3212.258048][T15657] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3212.267233][T15657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.278501][T15657] usb 1-1: config 0 descriptor?? [ 3212.538195][T15657] (null): keene_cmd_main failed (-71) [ 3212.557910][T15657] video4linux radio32: keene_cmd_main failed (-71) [ 3212.564572][T15657] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 3212.573861][T15657] usb 1-1: USB disconnect, device number 28 06:24:38 executing program 3: request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0) 06:24:38 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(0xffffffffffffffff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10120, 0x2, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46900) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) 06:24:38 executing program 4: add_key(&(0x7f0000000500)='pkcs7_test\x00', 0x0, &(0x7f00000005c0)="14cf", 0x2, 0xfffffffffffffffd) 06:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 06:24:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:38 executing program 0: 06:24:38 executing program 4: select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x5}, 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x6}, 0x0) 06:24:38 executing program 0: 06:24:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f0000000100)={'tunl0\x00', 0x0}) 06:24:38 executing program 0: 06:24:38 executing program 4: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000002c0)=""/130) 06:24:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f0000000100)={'tunl0\x00', 0x0}) 06:24:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @multicast2, @dev]}, @lsrr={0x83, 0x17, 0x0, [@local, @rand_addr, @rand_addr, @private, @private]}]}}}}}) 06:24:44 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:44 executing program 0: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:24:44 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) 06:24:44 executing program 4: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 06:24:44 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f00000004c0)=@bloom_filter, 0x48) 06:24:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 06:24:44 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/201, 0xc9, 0x0) 06:24:45 executing program 4: gettid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x600a0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="36185b2d30f3e463db334214fee8b1d4d5d81097") 06:24:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="862b0ebfbed4ed55e89aa9046afa100fda1490db911c5a8552fadb67d9eeef4e81b9aa9d0d4a10b2ee47a1fe6979a32d20192b72a1b9a71a592323e947102a87f14c5b521121ccb5c51bcb35842ebe5840fbf30d01b8e513c594a6424dbc0046079127ddd13edb71ac240490a0996c6e450577e5964c800b5b4cf76e1faf6f6f03b088e115c6abf866d18cb5d9cb9cab1ece585a2ed0af736edd1cc103c11209e9f3d45c58ec39c8d8136aae2409d65fdb4dc0f02688cb72ccd5b7592d25e8088b", 0xc1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c, 0x0}}], 0x2, 0x0) 06:24:45 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x3001000, 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, &(0x7f0000002440)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) 06:24:45 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) 06:24:54 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x2040, 0x0) openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x103, 0x0) 06:24:54 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000003c0)='.log\x00', 0x26cc0, 0x0) 06:24:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) 06:24:54 executing program 4: gettid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x600a0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="36185b2d30f3e463db334214fee8b1d4d5d81097") 06:24:54 executing program 0: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:24:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='io\x00') write$cgroup_type(r0, 0xffffffffffffffff, 0x0) 06:24:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') write$tcp_mem(r0, &(0x7f00000011c0), 0x48) 06:24:54 executing program 5: syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x24800) 06:24:54 executing program 1: socketpair(0x22, 0x0, 0xe98, &(0x7f00000002c0)) 06:24:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:24:54 executing program 5: syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x24800) 06:25:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7c, &(0x7f0000001540), 0x8) 06:25:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x0, 0x0, 0x0, 0x90}, 0x48) 06:25:03 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)) 06:25:03 executing program 4: gettid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x600a0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="36185b2d30f3e463db334214fee8b1d4d5d81097") 06:25:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:03 executing program 0: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:25:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0xb4c7016}) 06:25:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000540)=0x90) 06:25:03 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x42202, 0x0) 06:25:03 executing program 5: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+10000000}, &(0x7f0000000340)={0x0}) 06:25:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x75, &(0x7f0000001540), 0x8) 06:25:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x0}]}}, &(0x7f0000000240)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 06:25:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x65, &(0x7f0000001540), 0x8) 06:25:11 executing program 4: gettid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x600a0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="36185b2d30f3e463db334214fee8b1d4d5d81097") 06:25:11 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:11 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) 06:25:11 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000340), 0x0, 0x0) 06:25:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7d2a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp6\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 06:25:11 executing program 1: syz_io_uring_setup(0x3339, &(0x7f0000000700), &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780), 0x0) syz_io_uring_setup(0x4595, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) 06:25:12 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7f, 0x2, 0x0, "98ff8a6c067781788debb6d6d82e7f9510e4c46950d270e65c4b5bb1b32c7d89"}) [ 3253.697904][T14517] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3253.908051][T14517] usb 1-1: device descriptor read/64, error 18 06:25:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7f, 0x2, 0x0, "98ff8a6c067781788debb6d6d82e7f9510e4c46950d270e65c4b5bb1b32c7d89"}) 06:25:12 executing program 4: syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3254.177942][T14517] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3254.347961][T14615] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 3254.378040][T14517] usb 1-1: device descriptor read/64, error 18 [ 3254.508356][T14517] usb usb1-port1: attempt power cycle [ 3254.718178][T14615] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3254.730551][T14615] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3254.753234][T14615] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3254.937810][T14517] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 3255.008703][T14615] usb 5-1: string descriptor 0 read error: -22 [ 3255.015021][T14615] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3255.035959][T14615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.112893][T14615] usb 5-1: 0:2 : does not exist [ 3255.128216][T14517] usb 1-1: device descriptor read/8, error -61 [ 3255.321119][T15657] usb 5-1: USB disconnect, device number 25 [ 3255.398165][T14517] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 3255.578717][T14517] usb 1-1: device descriptor read/8, error -61 [ 3255.706387][T14517] usb usb1-port1: unable to enumerate USB device 06:25:25 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc4b40, 0x0) rmdir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 06:25:25 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:25 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x20141, 0x0) 06:25:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7d2a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp6\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 06:25:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7d2a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp6\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 06:25:25 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) 06:25:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x280040, 0x0) fcntl$getown(r0, 0x2) 06:25:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x280040, 0x0) fcntl$getown(r0, 0x3) 06:25:25 executing program 1: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) r1 = dup2(r0, r0) write$cgroup_freezer_state(r1, 0x0, 0x0) 06:25:25 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fcntl$getownex(r0, 0x407, 0x0) 06:25:25 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:25 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4001}, {r1}], 0x2, 0x0) [ 3267.077972][T14517] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3267.277846][T14517] usb 1-1: device descriptor read/64, error 18 [ 3267.558052][T14517] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3267.788034][T14517] usb 1-1: device descriptor read/64, error 18 [ 3267.908034][T14517] usb usb1-port1: attempt power cycle [ 3268.338028][T14517] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3268.517958][T14517] usb 1-1: device descriptor read/8, error -61 [ 3268.787874][T14517] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3268.998124][T14517] usb 1-1: device descriptor read/8, error -61 [ 3269.118088][T14517] usb usb1-port1: unable to enumerate USB device [ 3271.089245][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.095613][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:25:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000690000100000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:25:34 executing program 1: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001980)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfc}]) 06:25:34 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:34 executing program 5: mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0xffffffff0000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 06:25:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 06:25:34 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) 06:25:34 executing program 5: unshare(0x400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001980)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 06:25:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 06:25:34 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x891b, 0x0) 06:25:34 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001000)={'syztnl1\x00', 0x0}) 06:25:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 06:25:34 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3276.528053][T17347] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 3276.727976][T17347] usb 1-1: device descriptor read/64, error 18 [ 3276.997944][T17347] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 3277.197866][T17347] usb 1-1: device descriptor read/64, error 18 [ 3277.318068][T17347] usb usb1-port1: attempt power cycle [ 3277.767845][T17347] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 3277.968774][T17347] usb 1-1: device descriptor read/8, error -61 [ 3278.237795][T17347] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3278.418043][T17347] usb 1-1: device descriptor read/8, error -61 [ 3278.539105][T17347] usb usb1-port1: unable to enumerate USB device 06:25:41 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000001f80)=""/99, 0x63}, {&(0x7f0000002280)=""/77, 0x4d}], 0x3, &(0x7f0000003880)=[{&(0x7f0000002380)=""/248, 0xf8}], 0x1, 0x0) 06:25:41 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) socketpair(0x1, 0x0, 0x6fe, &(0x7f0000001240)) 06:25:41 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 06:25:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 06:25:41 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:41 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) 06:25:41 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) 06:25:41 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)) 06:25:42 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000280)="44c957a827fa65e8a885cfee6665601f65dc52c325c1976061982bf2f125d3aa4545200c915c5e7eaaa7f494d132d5ddb0572bc1cf5ef0f118dead281f6dab24f6", 0x41}) 06:25:42 executing program 4: mknodat$loop(0xffffffffffffffff, 0x0, 0x89c6ee5c75c6e805, 0x1) 06:25:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x80086601, 0x0) 06:25:42 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write(r0, &(0x7f0000000080)="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", 0x1000) [ 3283.700352][T18381] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3283.897887][T18381] usb 1-1: device descriptor read/64, error 18 [ 3284.167792][T18381] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3284.357878][T18381] usb 1-1: device descriptor read/64, error 18 [ 3284.481031][T18381] usb usb1-port1: attempt power cycle [ 3284.907866][T18381] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3285.078082][T18381] usb 1-1: device descriptor read/8, error -61 [ 3285.347854][T18381] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3285.537868][T18381] usb 1-1: device descriptor read/8, error -61 [ 3285.657941][T18381] usb usb1-port1: unable to enumerate USB device 06:25:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f00000001090212000100000000090400000003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:25:50 executing program 4: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0xa0843, 0x0) 06:25:50 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) 06:25:50 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:25:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3292.067961][T14615] usb 1-1: new high-speed USB device number 45 using dummy_hcd 06:25:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:25:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3292.199752][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3292.262314][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3292.272368][T14615] usb 1-1: device descriptor read/64, error 18 [ 3292.547800][T14615] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3292.751123][T14615] usb 1-1: device descriptor read/64, error 18 [ 3292.879031][T14615] usb usb1-port1: attempt power cycle [ 3293.301628][T14615] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3293.477990][T14615] usb 1-1: device descriptor read/8, error -61 [ 3293.757978][T14615] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 3293.948248][T14615] usb 1-1: device descriptor read/8, error -61 [ 3294.068347][T14615] usb usb1-port1: unable to enumerate USB device [ 3300.487854][T15908] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3300.747781][T15908] usb 4-1: Using ep0 maxpacket: 16 [ 3300.867978][T15908] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3300.877166][T15908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3300.901843][T15908] usb 4-1: config 0 descriptor?? [ 3301.377937][T15908] video4linux radio32: keene_cmd_main failed (-71) [ 3301.384550][T15908] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 3301.406766][T15908] usb 4-1: USB disconnect, device number 21 06:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:26:00 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:26:00 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) [ 3301.958614][T18549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3301.959562][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 06:26:00 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:26:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) [ 3302.262361][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3302.277596][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3302.287858][T15908] usb 1-1: new high-speed USB device number 49 using dummy_hcd 06:26:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) [ 3302.487800][T15908] usb 1-1: device descriptor read/64, error 18 [ 3302.768061][T15908] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 3302.987786][T15908] usb 1-1: device descriptor read/64, error 18 [ 3303.119022][T15908] usb usb1-port1: attempt power cycle [ 3303.578078][T15908] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3303.787878][T15908] usb 1-1: device descriptor read/8, error -61 [ 3304.077949][T15908] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 3304.287989][T15908] usb 1-1: device descriptor read/8, error -61 [ 3304.407963][T15908] usb usb1-port1: unable to enumerate USB device [ 3310.303351][T18580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:26:09 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000"], 0x0) [ 3311.228429][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:26:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3311.274515][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:26:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3311.365268][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:26:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:10 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) [ 3311.528006][T15657] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3311.629645][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3311.777887][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3311.819042][T15657] usb 1-1: no configurations [ 3311.823728][T15657] usb 1-1: can't read configurations, error -22 [ 3311.977937][T15657] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3312.218012][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3312.258106][T15657] usb 1-1: no configurations [ 3312.262805][T15657] usb 1-1: can't read configurations, error -22 [ 3312.269859][T15657] usb usb1-port1: attempt power cycle [ 3312.677757][T15657] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3312.768021][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3312.808098][T15657] usb 1-1: no configurations [ 3312.812771][T15657] usb 1-1: can't read configurations, error -22 [ 3312.987975][T15657] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3313.098306][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3313.138121][T15657] usb 1-1: no configurations [ 3313.142938][T15657] usb 1-1: can't read configurations, error -22 [ 3313.149994][T15657] usb usb1-port1: unable to enumerate USB device 06:26:19 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:19 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:19 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:19 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:19 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000"], 0x0) 06:26:19 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3320.566501][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3320.603804][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:26:19 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:19 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:19 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:19 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3320.786602][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3320.818282][T18381] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3320.903383][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3320.934727][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3321.068001][T18381] usb 1-1: Using ep0 maxpacket: 16 [ 3321.108556][T18381] usb 1-1: no configurations [ 3321.113235][T18381] usb 1-1: can't read configurations, error -22 [ 3321.267871][T18381] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3321.537818][T18381] usb 1-1: Using ep0 maxpacket: 16 [ 3321.581590][T18381] usb 1-1: no configurations [ 3321.586332][T18381] usb 1-1: can't read configurations, error -22 [ 3321.593342][T18381] usb usb1-port1: attempt power cycle [ 3322.017964][T18381] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3322.118034][T18381] usb 1-1: Using ep0 maxpacket: 16 [ 3322.157943][T18381] usb 1-1: no configurations [ 3322.162609][T18381] usb 1-1: can't read configurations, error -22 [ 3322.327785][T18381] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3322.417959][T18381] usb 1-1: Using ep0 maxpacket: 16 [ 3322.458017][T18381] usb 1-1: no configurations [ 3322.462693][T18381] usb 1-1: can't read configurations, error -22 [ 3322.469591][T18381] usb usb1-port1: unable to enumerate USB device 06:26:28 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:28 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000"], 0x0) 06:26:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3329.930625][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3329.961837][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3330.076165][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:26:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3330.168191][T13267] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3330.214648][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3330.407973][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3330.448071][T13267] usb 1-1: no configurations [ 3330.453229][T13267] usb 1-1: can't read configurations, error -22 [ 3330.607996][T13267] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3330.848018][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3330.888156][T13267] usb 1-1: no configurations [ 3330.893249][T13267] usb 1-1: can't read configurations, error -22 [ 3330.900086][T13267] usb usb1-port1: attempt power cycle [ 3331.307818][T13267] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3331.399617][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3331.438042][T13267] usb 1-1: no configurations [ 3331.442813][T13267] usb 1-1: can't read configurations, error -22 [ 3331.597934][T13267] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3331.688495][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3331.728263][T13267] usb 1-1: no configurations [ 3331.732961][T13267] usb 1-1: can't read configurations, error -22 [ 3331.740090][T13267] usb usb1-port1: unable to enumerate USB device [ 3332.529845][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.536211][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:26:37 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:37 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000"], 0x0) 06:26:37 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:37 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3339.411980][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:38 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3339.557836][T14615] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3339.570648][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3339.657498][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3339.797894][T14615] usb 1-1: Using ep0 maxpacket: 16 [ 3339.927961][T14615] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3339.947706][T14615] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3339.956845][T14615] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3339.966668][T14615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3339.983840][T14615] usb 1-1: config 0 descriptor?? [ 3340.234368][ T9289] usb 1-1: USB disconnect, device number 65 06:26:45 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:45 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000"], 0x0) [ 3346.800748][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3346.829388][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:45 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:45 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3346.920061][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:26:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:45 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3347.013880][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3347.023053][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3347.104825][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3347.117846][ T9289] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3347.377863][ T9289] usb 1-1: Using ep0 maxpacket: 16 [ 3347.497924][ T9289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3347.508396][ T9289] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3347.517471][ T9289] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3347.526695][ T9289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.539796][ T9289] usb 1-1: config 0 descriptor?? [ 3347.790666][ T9289] usb 1-1: USB disconnect, device number 66 06:26:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:51 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:51 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:51 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:51 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000"], 0x0) [ 3353.122178][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:51 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3353.194110][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3353.211291][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3353.362449][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3353.391530][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:51 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3353.427852][T15657] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3353.469334][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3353.484771][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3353.687788][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3353.807885][T15657] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3353.818153][T15657] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3353.828201][T15657] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3353.837302][T15657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.848141][T15657] usb 1-1: config 0 descriptor?? [ 3354.093732][ T9289] usb 1-1: USB disconnect, device number 67 06:26:58 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:26:58 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:58 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:58 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:58 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904"], 0x0) [ 3360.402214][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3360.429639][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:59 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:26:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3360.540986][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:26:59 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:26:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:26:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3360.603769][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3360.622521][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3360.667947][T15908] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3360.723819][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3360.907764][T15908] usb 1-1: Using ep0 maxpacket: 16 [ 3361.027929][T15908] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3361.037049][T15908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.062233][T15908] usb 1-1: config 0 descriptor?? [ 3361.305260][T15908] usb 1-1: USB disconnect, device number 68 06:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:27:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:09 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904"], 0x0) [ 3370.788045][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3370.870952][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3370.873245][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3371.013519][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:27:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3371.090230][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3371.141201][T15908] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3371.169900][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3371.210349][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3371.438408][T15908] usb 1-1: Using ep0 maxpacket: 16 [ 3371.578086][T15908] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3371.587247][T15908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.598966][T15908] usb 1-1: config 0 descriptor?? [ 3371.852419][T15908] usb 1-1: USB disconnect, device number 69 [ 3375.023158][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:27:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:14 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904"], 0x0) 06:27:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3375.930171][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3375.946906][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:27:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3376.086872][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) [ 3376.208121][ T9289] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3376.457831][ T9289] usb 1-1: Using ep0 maxpacket: 16 [ 3376.578044][ T9289] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3376.587307][ T9289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3376.598281][ T9289] usb 1-1: config 0 descriptor?? [ 3376.841932][T15908] usb 1-1: USB disconnect, device number 70 06:27:24 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:24 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:24 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:24 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:24 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:24 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000000009040000"], 0x0) [ 3386.294082][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:24 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:24 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:25 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:27:25 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:25 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) [ 3386.707831][T15657] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3386.947780][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3387.068086][T15657] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3387.077310][T15657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3387.088528][T15657] usb 1-1: config 0 descriptor?? [ 3387.336106][T15657] usb 1-1: USB disconnect, device number 71 06:27:32 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e00802110000015050505050"], 0x448}}, 0x0) 06:27:32 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 06:27:32 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:32 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000000009040000"], 0x0) 06:27:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 06:27:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 06:27:32 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 06:27:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) [ 3393.969824][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3393.976203][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:27:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:27:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) [ 3394.128296][T18381] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3394.377806][T18381] usb 1-1: Using ep0 maxpacket: 16 [ 3394.508138][T18381] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3394.517423][T18381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3394.536833][T18381] usb 1-1: config 0 descriptor?? [ 3394.793855][T15657] usb 1-1: USB disconnect, device number 72 06:27:43 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:43 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 06:27:43 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 06:27:43 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:27:43 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f0000000109021200010000000009040000"], 0x0) 06:27:43 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 06:27:43 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 06:27:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:43 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3404.868076][T13267] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3405.107852][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3405.227886][T13267] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3405.237499][T13267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3405.258506][T13267] usb 1-1: config 0 descriptor?? [ 3405.511823][T18836] usb 1-1: USB disconnect, device number 73 06:27:44 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904000000"], 0x0) 06:27:45 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) [ 3407.087793][T13267] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3407.337763][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3407.482711][T13267] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3407.492057][T13267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3407.512538][T13267] usb 1-1: config 0 descriptor?? [ 3407.768593][T13267] usb 1-1: USB disconnect, device number 74 06:27:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) 06:27:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:27:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 06:27:51 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904000000"], 0x0) 06:27:51 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 06:27:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) 06:27:52 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:27:52 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) 06:27:52 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) 06:27:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3413.627804][T13267] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3413.638420][T19059] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:52 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) [ 3413.877913][T13267] usb 1-1: Using ep0 maxpacket: 16 [ 3413.998168][T13267] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3414.007293][T13267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3414.018290][T13267] usb 1-1: config 0 descriptor?? [ 3414.263713][T13267] usb 1-1: USB disconnect, device number 75 06:27:56 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x448}}, 0x0) 06:27:56 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:27:56 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) 06:27:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:27:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0, 0x148}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000e100892ba8d2000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 06:27:56 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00010000966d62106d040e0ace2f000000010902120001000000000904000000"], 0x0) [ 3417.597523][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:56 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) [ 3417.672217][T19076] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3417.674349][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:27:56 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) [ 3417.739443][T19085] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. 06:27:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:27:56 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) 06:27:56 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) [ 3417.856736][T19088] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3417.866265][T19090] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:56 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2], 0x448}}, 0x0) [ 3417.937947][T15657] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3418.008985][T19097] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3418.014303][T19098] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3418.208916][T15657] usb 1-1: Using ep0 maxpacket: 16 [ 3418.337873][T15657] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=2f.ce [ 3418.347116][T15657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.366505][T15657] usb 1-1: config 0 descriptor?? [ 3418.627458][T15657] usb 1-1: USB disconnect, device number 76 06:28:05 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba512e0080211000001505050505050"], 0x448}}, 0x0) 06:28:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 06:28:05 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) 06:28:05 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) 06:28:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:28:05 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da60ac93ce77baa00"], 0x22) 06:28:05 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da60ac93ce77baa00"], 0x22) [ 3426.950351][T10406] Bluetooth: hci0: Invalid handle: 0x8d90 > 0x0eff 06:28:05 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) [ 3426.992442][T19111] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3427.018039][T19112] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:05 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da60ac93ce77baa00"], 0x22) [ 3427.068683][T19107] Bluetooth: hci0: Invalid handle: 0x8d90 > 0x0eff 06:28:05 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) 06:28:05 executing program 0: 06:28:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 3427.129188][T19107] Bluetooth: hci0: Invalid handle: 0x8d90 > 0x0eff [ 3427.195387][ T5118] Bluetooth: hci2: Invalid handle: 0x8d90 > 0x0eff [ 3427.208420][T19124] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:14 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) 06:28:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB], 0x448}}, 0x0) 06:28:14 executing program 0: 06:28:14 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:28:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:28:14 executing program 0: [ 3436.236164][ T5118] Bluetooth: hci2: Invalid handle: 0x8d90 > 0x0eff [ 3436.255318][T19137] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3436.266654][T19136] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. 06:28:14 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de"], 0x448}}, 0x0) 06:28:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:28:14 executing program 0: syz_emit_vhci(0x0, 0x22) [ 3436.419738][ T5118] Bluetooth: hci2: Invalid handle: 0x8d90 > 0x0eff [ 3436.480743][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3436.503839][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:21 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:28:21 executing program 2: 06:28:21 executing program 0: syz_emit_vhci(0x0, 0x22) 06:28:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:21 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:28:21 executing program 2: [ 3442.542966][ T5118] Bluetooth: hci4: Invalid handle: 0x8d90 > 0x0eff 06:28:21 executing program 0: syz_emit_vhci(0x0, 0x22) 06:28:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3442.619699][T19160] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3442.634219][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:28:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:21 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512"], 0x448}}, 0x0) 06:28:21 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) [ 3442.803140][T19170] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3442.829885][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3448.775006][ T5118] Bluetooth: hci4: Invalid handle: 0x8d90 > 0x0eff 06:28:29 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:28:29 executing program 2: 06:28:29 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:28:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:28:29 executing program 2: syz_emit_vhci(0x0, 0x22) 06:28:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:28:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:28:29 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) [ 3450.918820][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3450.954915][T19189] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:29 executing program 2: syz_emit_vhci(0x0, 0x22) 06:28:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="24043300"], 0x448}}, 0x0) [ 3451.085050][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3451.115251][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3455.409065][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3455.415528][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3461.354305][ T5118] Bluetooth: hci4: Invalid handle: 0x8d90 > 0x0eff 06:28:41 executing program 3: 06:28:41 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:41 executing program 2: syz_emit_vhci(0x0, 0x22) 06:28:41 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:28:41 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:28:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:28:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:28:41 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:28:42 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) [ 3463.480359][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3463.508584][T19218] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:42 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:28:42 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:42 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000015050"], 0x448}}, 0x0) [ 3463.696871][T19232] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3463.727170][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:28:50 executing program 3: 06:28:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:28:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:28:50 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:28:50 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB='$'], 0x448}}, 0x0) 06:28:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:28:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:50 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) [ 3471.884327][T19242] netlink: 1032 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3471.919466][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:28:50 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:28:50 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:28:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908da6"], 0x22) 06:28:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) [ 3471.989031][T19107] Bluetooth: hci0: Invalid handle: 0x8d90 > 0x0eff [ 3472.087920][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3472.117378][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3472.150770][T19107] Bluetooth: hci0: Invalid handle: 0x8d90 > 0x0eff 06:29:00 executing program 3: 06:29:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:00 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:29:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2404"], 0x448}}, 0x0) 06:29:00 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) 06:29:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:29:00 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) [ 3482.359077][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3482.373022][ T5118] Bluetooth: hci0: Received unexpected HCI Event 0x00 06:29:00 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) [ 3482.414526][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:29:00 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x22) 06:29:01 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e008021100000150"], 0x448}}, 0x0) 06:29:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) [ 3482.464926][ T5118] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 3482.497411][ T5118] Bluetooth: hci0: Received unexpected HCI Event 0x00 06:29:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2404"], 0x448}}, 0x0) [ 3482.623771][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3482.687007][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:29:07 executing program 3: syz_emit_vhci(0x0, 0x22) 06:29:07 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:29:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:07 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) 06:29:07 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2404"], 0x448}}, 0x0) 06:29:07 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) 06:29:07 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:29:07 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) [ 3488.693311][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3488.693623][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:29:07 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:29:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:07 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) [ 3488.856371][T19315] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3488.884141][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:18 executing program 3: syz_emit_vhci(0x0, 0x22) 06:29:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:29:18 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:29:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:18 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) 06:29:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:29:18 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) [ 3500.068248][ T5118] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:29:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433"], 0x448}}, 0x0) [ 3500.129989][T19325] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3500.147742][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:18 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e00802110000"], 0x448}}, 0x0) 06:29:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 3500.215549][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:29:18 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f"], 0x22) [ 3500.307133][T19339] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3500.334360][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3500.363870][ T5118] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:29:29 executing program 3: syz_emit_vhci(0x0, 0x22) 06:29:29 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f"], 0x22) 06:29:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:29 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) [ 3510.584977][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3510.600191][T19355] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:29 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f"], 0x22) 06:29:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:29 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) [ 3510.632273][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:29:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:29 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 3510.746134][T19364] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3510.796010][ T5118] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3510.827113][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3510.844769][T19107] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3516.849048][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3516.855427][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:29:39 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:29:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:39 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:39 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 06:29:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000003940)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) 06:29:39 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3521.050138][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3521.081294][T19382] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000003940)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x24}}, 0x0) [ 3521.102649][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:29:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:29:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000003940)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) 06:29:39 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:39 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3521.305483][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:50 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:29:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:29:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000003940)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x20}}, 0x0) 06:29:50 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000740)="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", 0x280}], 0x1) 06:29:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "837ad552eed22b08", "a4326bf47c648997a7347f1767b503c5", 'ZD\x00\b', "1272d692072b1107"}, 0x28) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000740)="27480b3ee8ca8b16ad0fc2b52283b835cc20f9ece32d944fbc572301ade3d771ca01ac090677b90a6667ea29945dd16822aea077cbda3bdedc617253a4b3ac0391fd35f662e6982f1fbc22f4832737cc1864bd4e251d534fdd045cac9a84a9c6ee80530d7608687fbddce6b9f9f43da99772d4043745d180e07ed7559fc4537f5d8e0452aae2f6175d4e12ec8161e774f4dce0f809da82f06bccfe9e674d34eb74da937a970e9dc35497f5e19a33d0bdc382c5eaf3d21e0ced3c7a2003b99f0b35e40b7c7036c76abbff6d30cb41d5c372b782a5958f22ef80de90c9e9eb89e67663f008fc108b5f4f130ddccb742ca9c19597a133eadd3f522c7152135b411a46026689b327a161a155ef9e20413265c0453a95a00b102125fa876cc786244184e96774b5255c6ca817ec3a471954d0a3a9a008dd23b3e5f999d3230bfb080a6a50efd26309a70ebdcce0ba98af3e16e754b34ca20979e07354a89704edf63974ef09a74008a46d44c8fa957b3876b023ea082df315a9072c6f64fe48c630336344dca0550debbc27b50dd9f74f44037cec294b7588cc9ebc47605af0a70dc602a245cd05988e49491f0d4f7472b91d507094e079439a776852ed2655fd3ff4be37ba6480905349479cc2073d2e26ed3289125b87107b52c59339ff76e8287fd08e65381643be2923760e9fe0b4f7250c562b68e138cd9498dd87324b2bab634c7486db3c730ab869dd9fbcc8b76c741f9baa87bb0de0854342b120c95e42c3ef447cf16b271da30aa935ee7cde1f97e8b93781e222daf5dcdcb73918e2f814baadd0a692834d44d57710a0dce9f169fd1546ac1ed8c638366ddf4a690e80665ff3939b172e1f27f03609cb1abc22c3596edcedd5d55860c567c9a87953aa41", 0x280}], 0x1) 06:29:51 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x5) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000180)={0x0, 0x0, 'client0\x00', 0x0, "4e656efd851b40e1", "01959351c2394c616a093ccb8c380e51c45dd96fa7ac3db18adfcd6ba0bec27c"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) [ 3532.488514][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:29:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:29:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:29:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:29:51 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) [ 3532.661068][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:00 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:30:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:00 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0x0, "4e656efd851b40e1", "01959351c2394c616a093ccb8c380e51c45dd96fa7ac3db18adfcd6ba0bec27c"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) 06:30:00 executing program 2: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc058534b, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0x0, "4e656efd851b40e1", "01959351c2394c616a093ccb8c380e51c45dd96fa7ac3db18adfcd6ba0bec27c"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) 06:30:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:06 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:30:06 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:06 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:06 executing program 2: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc058534b, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0x0, "4e656efd851b40e1", "01959351c2394c616a093ccb8c380e51c45dd96fa7ac3db18adfcd6ba0bec27c"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) 06:30:06 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:06 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:06 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f0a", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="97d1f58d11c4ac45a48d82c073e55854d0b3410314440f35da7a394ef75fed493ea56b5caeff56000a40cd053df7118ce0cafbef7c5f08f1019ae5e8ec9315a3044b28d4aeaa46264f61ed39a8fc2a425415f6e380b742f23d98d79cd3c73c57b32121c84180903596e94765395a26e6555dd908b8de83b5dfacca17c0335e7f419dfbb9441f223cabbb3d2721a22e175345979d9c891d9bc5230033e1266b5f8b6051be85fc9002f3a4df4e11af613371789e197df01cd3", @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES8=r1], 0x22) 06:30:06 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3548.314467][T19487] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3548.360049][T19107] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3548.370469][T19107] CPU: 1 PID: 19107 Comm: kworker/u5:1 Not tainted 6.2.0-syzkaller-00081-g91bc559d8d3a #0 [ 3548.380444][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 3548.390714][T19107] Workqueue: hci0 hci_rx_work [ 3548.395521][T19107] Call Trace: [ 3548.398827][T19107] [ 3548.401794][T19107] dump_stack_lvl+0xd1/0x138 [ 3548.406468][T19107] sysfs_warn_dup.cold+0x1c/0x29 [ 3548.411491][T19107] sysfs_create_dir_ns+0x237/0x290 [ 3548.416784][T19107] ? sysfs_create_mount_point+0xb0/0xb0 [ 3548.422370][T19107] ? rwlock_bug.part.0+0x90/0x90 [ 3548.427408][T19107] ? do_raw_spin_unlock+0x175/0x230 [ 3548.432643][T19107] kobject_add_internal+0x2c9/0x8f0 [ 3548.437996][T19107] kobject_add+0x154/0x1c0 [ 3548.442453][T19107] ? kset_create_and_add+0x1a0/0x1a0 [ 3548.447784][T19107] ? lockdep_init_map_type+0x21e/0x800 [ 3548.453285][T19107] ? __raw_spin_lock_init+0x3a/0x110 [ 3548.458624][T19107] device_add+0x36c/0x1e90 [ 3548.463141][T19107] ? dev_set_name+0xbf/0xf0 [ 3548.467693][T19107] ? device_initialize+0x540/0x540 [ 3548.473043][T19107] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 3548.479419][T19107] ? mgmt_send_event_skb+0x2fd/0x470 [ 3548.484959][T19107] ? kfree_skbmem+0xef/0x1b0 [ 3548.489707][T19107] ? kfree_skb_reason+0x1b8/0x4f0 [ 3548.494791][T19107] hci_conn_add_sysfs+0x113/0x210 [ 3548.499937][T19107] le_conn_complete_evt+0xef5/0x1550 [ 3548.505277][T19107] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3548.511014][T19107] ? hci_role_change_evt+0x310/0x310 [ 3548.516363][T19107] ? __mutex_lock+0x231/0x1360 [ 3548.521257][T19107] hci_le_enh_conn_complete_evt+0x23d/0x350 [ 3548.527256][T19107] ? skb_pull_data+0xfb/0x130 [ 3548.531993][T19107] hci_le_meta_evt+0x2bc/0x510 [ 3548.536826][T19107] ? le_conn_complete_evt+0x1550/0x1550 [ 3548.542459][T19107] hci_event_packet+0x641/0xfd0 [ 3548.547386][T19107] ? hci_conn_drop+0x2f0/0x2f0 [ 3548.552201][T19107] ? hci_conn_request_evt+0x8c0/0x8c0 [ 3548.557650][T19107] ? kcov_remote_start+0x49c/0x7a0 [ 3548.562928][T19107] hci_rx_work+0xaeb/0x1230 [ 3548.567673][T19107] process_one_work+0x9bf/0x1710 [ 3548.572716][T19107] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3548.578492][T19107] ? rwlock_bug.part.0+0x90/0x90 [ 3548.583461][T19107] ? _raw_spin_lock_irq+0x45/0x50 [ 3548.588581][T19107] worker_thread+0x669/0x1090 [ 3548.593399][T19107] ? __kthread_parkme+0x163/0x220 [ 3548.598509][T19107] ? process_one_work+0x1710/0x1710 [ 3548.603746][T19107] kthread+0x2e8/0x3a0 06:30:07 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f0a", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="97d1f58d11c4ac45a48d82c073e55854d0b3410314440f35da7a394ef75fed493ea56b5caeff56000a40cd053df7118ce0cafbef7c5f08f1019ae5e8ec9315a3044b28d4aeaa46264f61ed39a8fc2a425415f6e380b742f23d98d79cd3c73c57b32121c84180903596e94765395a26e6555dd908b8de83b5dfacca17c0335e7f419dfbb9441f223cabbb3d2721a22e175345979d9c891d9bc5230033e1266b5f8b6051be85fc9002f3a4df4e11af613371789e197df01cd3", @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES8=r1], 0x22) [ 3548.607867][T19107] ? kthread_complete_and_exit+0x40/0x40 [ 3548.613547][T19107] ret_from_fork+0x1f/0x30 [ 3548.618037][T19107] [ 3548.626608][T19107] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3548.639998][T19107] Bluetooth: hci0: failed to register connection device [ 3548.754547][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3550.688182][T19107] Bluetooth: hci0: command 0x2016 tx timeout 06:30:15 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:30:15 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:15 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:15 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f0a", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="97d1f58d11c4ac45a48d82c073e55854d0b3410314440f35da7a394ef75fed493ea56b5caeff56000a40cd053df7118ce0cafbef7c5f08f1019ae5e8ec9315a3044b28d4aeaa46264f61ed39a8fc2a425415f6e380b742f23d98d79cd3c73c57b32121c84180903596e94765395a26e6555dd908b8de83b5dfacca17c0335e7f419dfbb9441f223cabbb3d2721a22e175345979d9c891d9bc5230033e1266b5f8b6051be85fc9002f3a4df4e11af613371789e197df01cd3", @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES8=r1], 0x22) 06:30:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:15 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0xfffffffc) r3 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r4], 0x8, 0x2, 0x2}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="000600001200070000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d0000000000000002e2f66696c653000"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0xfffffffc) r11 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r7, r12], 0x8, 0x2, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r13, 0xc01064c1, &(0x7f0000000080)={r14, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r13, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r15, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r13, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r16, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r17, 0xfffffffc) r18 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r17, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r18, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r14, r19], 0x8, 0x2, 0x2}) r20 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r20, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, r14, r14], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r14], &(0x7f0000000080)=[0x7, 0xffffffffffffffff, 0x43c7, 0x6, 0x4, 0x428de49], 0x9}) 06:30:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 3556.520051][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3556.535478][T19512] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:15 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:15 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0xfffffffc) (async, rerun: 64) r3 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r4], 0x8, 0x2, 0x2}) (async) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="000600001200070000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d0000000000000002e2f66696c653000"]) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0xfffffffc) (async) r11 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r7, r12], 0x8, 0x2, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r13, 0xc01064c1, &(0x7f0000000080)={r14, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r13, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r15, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r13, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r16, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r17, 0xfffffffc) r18 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r17, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r18, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r14, r19], 0x8, 0x2, 0x2}) (async) r20 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r20, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, r14, r14], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r14], &(0x7f0000000080)=[0x7, 0xffffffffffffffff, 0x43c7, 0x6, 0x4, 0x428de49], 0x9}) [ 3556.647093][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:30:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) 06:30:15 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:15 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0xfffffffc) openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) r3 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r4], 0x8, 0x2, 0x2}) openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="000600001200070000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d0000000000000002e2f66696c653000"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0xfffffffc) (async) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0xfffffffc) openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) r11 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r7, r12], 0x8, 0x2, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r13, 0xc01064c1, &(0x7f0000000080)={r14, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r13, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r15, {0xfffffffffffffffb}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r13, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r16, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r13, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r16, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r17, 0xfffffffc) openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) r18 = openat$null(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r17, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r17, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r18, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r14, r19], 0x8, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r18, 0xc02064c3, &(0x7f0000000200)={&(0x7f00000001c0)=[r14, r19], 0x8, 0x2, 0x2}) r20 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r20, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, r14, r14], &(0x7f00000003c0)=[0x0, 0x0, 0x2, 0x2, 0x3, 0x5a44, 0x1000, 0x9, 0x7, 0x3], 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r14], &(0x7f0000000080)=[0x7, 0xffffffffffffffff, 0x43c7, 0x6, 0x4, 0x428de49], 0x9}) [ 3556.746109][T19524] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3556.838389][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3556.847279][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:30:23 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) 06:30:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:23 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:23 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:30:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x2, 0x9}}}}, 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_conf_req={{0x4, 0x7, 0x49}, {0x200, 0x3, [@l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_ews={0x7, 0x2, 0x9ea}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x2, 0xfffb, 0x8, 0x48}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x20, 0x80, 0x1, 0x7, 0x15}}, @l2cap_conf_ews={0x7, 0x2, 0x3dda}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x63, 0x94, 0x17, 0x9, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0xc, 0x3, 0x6}}]}}, @l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0x2, 0x4, 0x7f}}, @l2cap_move_chan_cfm={{0x10, 0xf0, 0x4}, {0x3, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x8, 0x1, 0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0xa18d, 0x607}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0xffff, 0x2}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x1, 0x3f}}]}}, 0x8c) 06:30:23 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c94012000e000100010302000900078157101f000600"], 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xba, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}}}, 0xa) 06:30:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x2, 0x9}}}}, 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_conf_req={{0x4, 0x7, 0x49}, {0x200, 0x3, [@l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_ews={0x7, 0x2, 0x9ea}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x2, 0xfffb, 0x8, 0x48}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x20, 0x80, 0x1, 0x7, 0x15}}, @l2cap_conf_ews={0x7, 0x2, 0x3dda}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x63, 0x94, 0x17, 0x9, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0xc, 0x3, 0x6}}]}}, @l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0x2, 0x4, 0x7f}}, @l2cap_move_chan_cfm={{0x10, 0xf0, 0x4}, {0x3, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x8, 0x1, 0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0xa18d, 0x607}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0xffff, 0x2}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x1, 0x3f}}]}}, 0x8c) [ 3564.917825][T19107] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3564.926706][ T5118] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3564.930491][T19544] netlink: 'syz-executor.1': attribute type 72 has an invalid length. [ 3564.971572][T19544] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:23 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3565.018205][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:30:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:23 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c94012000e000100010302000900078157101f000600"], 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xba, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}}}, 0xa) [ 3565.085834][T19547] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3565.097802][T19547] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection 06:30:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x2, 0x9}}}}, 0x11) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_conf_req={{0x4, 0x7, 0x49}, {0x200, 0x3, [@l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_ews={0x7, 0x2, 0x9ea}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x2, 0xfffb, 0x8, 0x48}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x20, 0x80, 0x1, 0x7, 0x15}}, @l2cap_conf_ews={0x7, 0x2, 0x3dda}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x63, 0x94, 0x17, 0x9, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0xc, 0x3, 0x6}}]}}, @l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0x2, 0x4, 0x7f}}, @l2cap_move_chan_cfm={{0x10, 0xf0, 0x4}, {0x3, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x8, 0x1, 0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0xa18d, 0x607}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0xffff, 0x2}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x1, 0x3f}}]}}, 0x8c) [ 3565.143908][T19560] netlink: 'syz-executor.1': attribute type 72 has an invalid length. [ 3565.180049][T19547] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3565.190207][T19560] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3565.245341][T19566] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3565.256515][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:30:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup3(r3, r2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC=r4], 0x22) socketpair(0x0, 0x2, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r7, r6, 0x0) accept4(r7, &(0x7f0000000100)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) 06:30:28 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c94012000e000100010302000900078157101f000600"], 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xba, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}}}, 0xa) 06:30:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3569.995452][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3570.002286][T19580] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3570.023134][T19579] netlink: 'syz-executor.1': attribute type 72 has an invalid length. 06:30:28 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=r2], 0x22) [ 3570.045367][T19547] Bluetooth: hci2: unexpected event 0x04 length: 31 > 10 [ 3570.045413][T19547] Bluetooth: unknown link type 48 [ 3570.052940][T19579] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3570.204552][T19590] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:28 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="df0f365d174d16a9ee561fadf2978e8fe72cbd34d094f6f5ba4aecc8af83727fe1153ca638fdd433f314cfe7e3e080434133fc27abec771b464e8a750289fddcc49740cbfb329eb69e2d027da880df7bc5c3d258b209e2600bbb2bf35846a01b1e8b62af7bada7bc31f66af48febf6601839674c8be4427b246c5711cc8470731b13836482374173b108992c647707e794f699fdbb600c9cd619f7e8ac083037d44a5b32b218f88752b3053069f7fcf344f1cc7174a60a0f5cca4d78ab429ced775fe4189d28a8e7feabef7e2429642b9774e7bbf9826100000008b1f6aa6b4f91b362536f94adc01dece677099b274b767d94cab3c9922d2d18a481bbd594c64c78a8a7046ad13cef8d8e570d6ffcd21764", @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=r2], 0x22) [ 3570.312412][T19597] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3570.411426][T19606] netlink: 'syz-executor.4': attribute type 72 has an invalid length. [ 3570.420880][T19606] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3572.127838][T19547] Bluetooth: hci2: command 0x0409 tx timeout [ 3578.289461][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3578.295847][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:30:39 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:30:39 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup3(r3, r2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC=r4], 0x22) socketpair(0x0, 0x2, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r7, r6, 0x0) (async) dup3(r7, r6, 0x0) accept4(r7, &(0x7f0000000100)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) 06:30:39 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=r2], 0x22) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) dup3(r1, r0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=r2], 0x22) (async) 06:30:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:39 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3581.377038][T19621] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3581.398243][T19547] Bluetooth: hci2: unexpected event 0x04 length: 31 > 10 [ 3581.398293][T19547] Bluetooth: unknown link type 48 [ 3581.413280][T19620] netlink: 'syz-executor.4': attribute type 72 has an invalid length. 06:30:39 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c21000800", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3581.421762][T19620] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) r3 = dup3(r2, r0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = accept4$phonet_pipe(r3, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x800) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x4, 0x3, 0x4, 0x20003}}, 0x2e) dup3(r6, r4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x40, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x22) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6f181bb45bbf9c94}, 0x4000811) 06:30:40 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3581.592300][T19639] netlink: 'syz-executor.4': attribute type 72 has an invalid length. [ 3581.605487][T19639] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:40 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3581.630658][T19642] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:40 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) [ 3581.716769][T19648] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3583.487821][T19547] Bluetooth: hci2: command 0x0409 tx timeout [ 3587.592992][T19547] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection 06:30:49 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 06:30:49 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup3(r3, r2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC=r4], 0x22) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC=r4], 0x22) socketpair(0x0, 0x2, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r7, r6, 0x0) accept4(r7, &(0x7f0000000100)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) 06:30:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:49 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) r3 = dup3(r2, r0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = accept4$phonet_pipe(r3, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x800) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x4, 0x3, 0x4, 0x20003}}, 0x2e) dup3(r6, r4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x40, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x22) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6f181bb45bbf9c94}, 0x4000811) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) (async) dup3(r2, r0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) accept4$phonet_pipe(r3, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x800) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x4, 0x3, 0x4, 0x20003}}, 0x2e) (async) dup3(r6, r4, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x40, 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x22) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6f181bb45bbf9c94}, 0x4000811) (async) 06:30:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:49 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c2100080003", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3590.664447][T19667] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) dup3(r2, r0, 0x0) (async) r3 = dup3(r2, r0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = accept4$phonet_pipe(r3, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x800) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x4, 0x3, 0x4, 0x20003}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x4, 0x3, 0x4, 0x20003}}, 0x2e) dup3(r6, r4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x40, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x22) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x22) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6f181bb45bbf9c94}, 0x4000811) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6f181bb45bbf9c94}, 0x4000811) 06:30:49 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) [ 3590.815709][T19681] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:30:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:57 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0090"], 0x22) 06:30:57 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04735b3c00000800ae1d87fa122a0000000086ecc0b64aba7d171fbc1d9c8a3cebcba83447048940070000000000000067eaa192402a5d8cb1ff781e9c0bf7808e4a82f452174d1f74754a31b09a33331c8701b5ca4ffa283c084b0ac951756abbcc6e8db1ae1dfd589ca700"/119], 0x5) 06:30:57 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:30:57 executing program 0: tkill(0x0, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:30:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3598.941991][T19547] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection 06:30:57 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04735b3c00000800ae1d87fa122a0000000086ecc0b64aba7d171fbc1d9c8a3cebcba83447048940070000000000000067eaa192402a5d8cb1ff781e9c0bf7808e4a82f452174d1f74754a31b09a33331c8701b5ca4ffa283c084b0ac951756abbcc6e8db1ae1dfd589ca700"/119], 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04735b3c00000800ae1d87fa122a0000000086ecc0b64aba7d171fbc1d9c8a3cebcba83447048940070000000000000067eaa192402a5d8cb1ff781e9c0bf7808e4a82f452174d1f74754a31b09a33331c8701b5ca4ffa283c084b0ac951756abbcc6e8db1ae1dfd589ca700"/119], 0x5) (async) 06:30:57 executing program 0: tkill(0x0, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) tkill(0x0, 0xc) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 06:30:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) [ 3598.998741][T19547] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3599.025504][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:30:57 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) [ 3599.112494][T10406] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3599.122271][T10406] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection 06:30:57 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04735b3c00000800ae1d87fa122a0000000086ecc0b64aba7d171fbc1d9c8a3cebcba83447048940070000000000000067eaa192402a5d8cb1ff781e9c0bf7808e4a82f452174d1f74754a31b09a33331c8701b5ca4ffa283c084b0ac951756abbcc6e8db1ae1dfd589ca700"/119], 0x5) 06:30:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:30:57 executing program 0: tkill(0x0, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 3599.196878][T10406] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3599.211875][T10406] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3599.308342][T19547] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3599.332021][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection 06:31:03 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0090"], 0x22) 06:31:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:31:03 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:03 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r5, r4, 0x0) dup3(r5, r0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:31:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) dup3(r2, r0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r4, r3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r6, r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r10, r9, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r14 = dup3(r13, r11, 0x0) r15 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r15, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r11, @ANYRESOCT=r1, @ANYRES8=r14, @ANYRES32=r4, @ANYRES8], 0xfffffd6c) [ 3605.262924][T10406] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection 06:31:03 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) dup3(r2, r0, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r4, r3, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r6, r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r10, r9, 0x0) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r14 = dup3(r13, r11, 0x0) (async) r15 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r15, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r11, @ANYRESOCT=r1, @ANYRES8=r14, @ANYRES32=r4, @ANYRES8], 0xfffffd6c) 06:31:03 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r5, r4, 0x0) (async) dup3(r5, r0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:31:03 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:04 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) [ 3605.545306][T19755] [ 3605.547709][T19755] ============================================ [ 3605.553890][T19755] WARNING: possible recursive locking detected [ 3605.560206][T19755] 6.2.0-syzkaller-00081-g91bc559d8d3a #0 Not tainted [ 3605.566918][T19755] -------------------------------------------- [ 3605.573099][T19755] syz-executor.2/19755 is trying to acquire lock: [ 3605.579547][T19755] ffff88807c4e2130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: l2tp_tunnel_register+0x2aa/0x11e0 [ 3605.589553][T19755] [ 3605.589553][T19755] but task is already holding lock: [ 3605.597203][T19755] ffff8880428e8130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0xadc/0x1a10 [ 3605.606756][T19755] [ 3605.606756][T19755] other info that might help us debug this: [ 3605.614863][T19755] Possible unsafe locking scenario: [ 3605.614863][T19755] [ 3605.622323][T19755] CPU0 [ 3605.625628][T19755] ---- [ 3605.628924][T19755] lock(sk_lock-AF_PPPOX); [ 3605.633532][T19755] lock(sk_lock-AF_PPPOX); [ 3605.638570][T19755] [ 3605.638570][T19755] *** DEADLOCK *** [ 3605.638570][T19755] [ 3605.646807][T19755] May be due to missing lock nesting notation [ 3605.646807][T19755] [ 3605.655134][T19755] 1 lock held by syz-executor.2/19755: [ 3605.661053][T19755] #0: ffff8880428e8130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0xadc/0x1a10 [ 3605.671017][T19755] [ 3605.671017][T19755] stack backtrace: [ 3605.677085][T19755] CPU: 1 PID: 19755 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-00081-g91bc559d8d3a #0 [ 3605.687271][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 3605.697433][T19755] Call Trace: [ 3605.700724][T19755] [ 3605.703674][T19755] dump_stack_lvl+0xd1/0x138 [ 3605.708293][T19755] __lock_acquire.cold+0x116/0x3a7 [ 3605.713471][T19755] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3605.719510][T19755] lock_acquire+0x1e3/0x630 [ 3605.724049][T19755] ? l2tp_tunnel_register+0x2aa/0x11e0 [ 3605.729542][T19755] ? lock_release+0x810/0x810 [ 3605.734271][T19755] ? __fget_files+0x26a/0x440 [ 3605.738989][T19755] lock_sock_nested+0x3a/0xf0 [ 3605.743690][T19755] ? l2tp_tunnel_register+0x2aa/0x11e0 [ 3605.749178][T19755] l2tp_tunnel_register+0x2aa/0x11e0 [ 3605.754489][T19755] ? sprintf+0xc4/0x100 [ 3605.758688][T19755] ? l2tp_tunnel_del_work+0x6a0/0x6a0 [ 3605.764083][T19755] ? debug_object_free+0x360/0x360 [ 3605.769280][T19755] ? lockdep_init_map_type+0x21e/0x800 [ 3605.774850][T19755] ? lockdep_init_map_type+0x21e/0x800 [ 3605.780349][T19755] ? l2tp_tunnel_create+0x2bf/0x4b0 [ 3605.785592][T19755] ? l2tp_tunnel_create+0x3c6/0x4b0 [ 3605.790830][T19755] pppol2tp_connect+0xcdc/0x1a10 [ 3605.795802][T19755] ? pppol2tp_put_sk+0xd0/0xd0 [ 3605.800590][T19755] ? aa_sk_perm+0x313/0xab0 [ 3605.805179][T19755] ? aa_af_perm+0x240/0x240 [ 3605.809723][T19755] ? bpf_lsm_socket_connect+0x9/0x10 [ 3605.815100][T19755] ? pppol2tp_put_sk+0xd0/0xd0 [ 3605.819883][T19755] __sys_connect_file+0x153/0x1a0 [ 3605.824976][T19755] __sys_connect+0x165/0x1a0 [ 3605.829592][T19755] ? __sys_connect_file+0x1a0/0x1a0 [ 3605.834843][T19755] __ia32_sys_connect+0x72/0xb0 [ 3605.839724][T19755] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 3605.846363][T19755] __do_fast_syscall_32+0x65/0xf0 [ 3605.851523][T19755] do_fast_syscall_32+0x33/0x70 [ 3605.856407][T19755] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 3605.862830][T19755] RIP: 0023:0xf7f77549 [ 3605.866913][T19755] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3605.886633][T19755] RSP: 002b:00000000f7f725cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 3605.895075][T19755] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 3605.903062][T19755] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 3605.911133][T19755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3605.919216][T19755] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 3605.927289][T19755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3605.935290][T19755] [ 3609.492223][T19547] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection 06:31:09 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0090"], 0x22) 06:31:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:31:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:09 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r5, r4, 0x0) dup3(r5, r0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) 06:31:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) dup3(r2, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r4, r3, 0x0) (async) dup3(r4, r3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r6, r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r10, r9, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r14 = dup3(r13, r11, 0x0) r15 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r15, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r11, @ANYRESOCT=r1, @ANYRES8=r14, @ANYRES32=r4, @ANYRES8], 0xfffffd6c) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r11, @ANYRESOCT=r1, @ANYRES8=r14, @ANYRES32=r4, @ANYRES8], 0xfffffd6c) 06:31:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x94}, @l2cap_cid_signaling={{0x90}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0xff80, 0xf718}}, @l2cap_conf_req={{0x4, 0x81, 0x5b}, {0x40, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3a, 0x6, 0x9, 0xffa3, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x1, 0x5, 0x10000, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xba, 0x5, 0x6, 0x8, 0xfffd}}, @l2cap_conf_ews={0x7, 0x2, 0x401}, @l2cap_conf_efs={0x6, 0x10, {0x29, 0x0, 0x92, 0xa0, 0xffffffff, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x9, 0x6, 0x9, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0xc0, 0x4}, {0x4, 0x8fb7}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x6, 0xf001, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x322}}]}}, 0x99) 06:31:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00", @ANYRESOCT=r1, @ANYRES8=r1], 0x22) 06:31:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00", @ANYRESOCT=r1, @ANYRES8=r1], 0x22) [ 3610.631164][T19547] Bluetooth: hci2: Invalid handle: 0x3030 > 0x0eff [ 3610.643649][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3610.702183][T19547] Bluetooth: hci2: Invalid handle: 0x3030 > 0x0eff 06:31:13 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a00908d"], 0x22) 06:31:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x94}, @l2cap_cid_signaling={{0x90}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0xff80, 0xf718}}, @l2cap_conf_req={{0x4, 0x81, 0x5b}, {0x40, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3a, 0x6, 0x9, 0xffa3, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x1, 0x5, 0x10000, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xba, 0x5, 0x6, 0x8, 0xfffd}}, @l2cap_conf_ews={0x7, 0x2, 0x401}, @l2cap_conf_efs={0x6, 0x10, {0x29, 0x0, 0x92, 0xa0, 0xffffffff, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x9, 0x6, 0x9, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0xc0, 0x4}, {0x4, 0x8fb7}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x6, 0xf001, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x322}}]}}, 0x99) 06:31:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8], 0x0, 0x31a5c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:31:13 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:13 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00", @ANYRESOCT=r1, @ANYRES8=r1], 0x22) 06:31:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="3a1446bb06"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xea) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 3614.692592][T19547] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 3614.724922][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 3614.733875][T10406] Bluetooth: hci2: Invalid handle: 0x3030 > 0x0eff 06:31:13 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x94}, @l2cap_cid_signaling={{0x90}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0xff80, 0xf718}}, @l2cap_conf_req={{0x4, 0x81, 0x5b}, {0x40, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3a, 0x6, 0x9, 0xffa3, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x1, 0x5, 0x10000, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xba, 0x5, 0x6, 0x8, 0xfffd}}, @l2cap_conf_ews={0x7, 0x2, 0x401}, @l2cap_conf_efs={0x6, 0x10, {0x29, 0x0, 0x92, 0xa0, 0xffffffff, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x9, 0x6, 0x9, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0xc0, 0x4}, {0x4, 0x8fb7}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x6, 0xf001, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x322}}]}}, 0x99) 06:31:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4804", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433"], 0x448}}, 0x0) 06:31:13 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="240433005000de295b3acba512e0080211000001"], 0x448}}, 0x0) 06:31:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="3a1446bb06"], 0x22) (async) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xea) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 3614.824905][T19547] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection