1011.192597][T12635] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1011.432381][T12635] usb 1-1: Using ep0 maxpacket: 8 [ 1011.544013][ T9120] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.561172][T12635] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.571590][T12635] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1011.580713][T12635] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 19:46:29 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) [ 1011.592124][T12635] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1011.603595][T12635] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1011.612988][T12635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:46:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xf00, 0x0, 0x54}, 0x9c) 19:46:29 executing program 5: msgsnd(0x0, &(0x7f0000000200), 0x8, 0x0) [ 1011.773858][ T9120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.783363][ T9120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.791510][ T9120] usb 2-1: Product: syz [ 1011.795974][ T9120] usb 2-1: Manufacturer: syz [ 1011.800714][ T9120] usb 2-1: SerialNumber: syz [ 1011.912851][T13819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.935357][T12635] hub 1-1:1.0: bad descriptor, ignoring hub [ 1011.941391][T12635] hub: probe of 1-1:1.0 failed with error -5 [ 1012.006587][T12635] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1012.012950][T12635] cdc_wdm 1-1:1.0: Unknown control protocol 19:46:30 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1012.262378][ T9092] usb 5-1: new high-speed USB device number 22 using dummy_hcd 19:46:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) [ 1012.503472][T12635] usb 1-1: USB disconnect, device number 65 [ 1012.523504][ T9092] usb 5-1: Using ep0 maxpacket: 8 [ 1012.664215][ T9092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.676020][ T9092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.685364][ T9092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1012.696759][ T9092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1012.708271][ T9092] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1012.717721][ T9092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.762875][T13838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1012.785061][ T9092] hub 5-1:1.0: bad descriptor, ignoring hub [ 1012.791135][ T9092] hub: probe of 5-1:1.0 failed with error -5 [ 1012.809393][ T9092] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1012.815646][ T9092] cdc_wdm 5-1:1.0: Unknown control protocol [ 1013.072802][ T9120] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1013.079615][ T9120] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1013.090512][ T9120] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1013.125278][ T9092] usb 5-1: USB disconnect, device number 22 [ 1013.292558][ T9120] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1013.305827][ T9120] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1013.512116][ T9092] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1013.710645][T12911] usb 2-1: USB disconnect, device number 25 [ 1013.718603][T12911] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1013.782488][ T9092] usb 5-1: Using ep0 maxpacket: 8 [ 1013.932878][ T9092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.943280][ T9092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1013.952667][ T9092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1013.964082][ T9092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1013.975705][ T9092] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1013.985091][ T9092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.023435][T13838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1014.045834][ T9092] hub 5-1:1.0: bad descriptor, ignoring hub [ 1014.052584][ T9092] hub: probe of 5-1:1.0 failed with error -5 19:46:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1014.079591][ T9092] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1014.085948][ T9092] cdc_wdm 5-1:1.0: Unknown control protocol 19:46:32 executing program 5: mq_open(&(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0, 0x0) 19:46:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 19:46:32 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 19:46:32 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:46:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 19:46:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) [ 1014.653216][ T9120] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1014.882216][ T9092] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1014.893379][ T9120] usb 1-1: Using ep0 maxpacket: 8 [ 1015.013867][ T9120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.024446][ T9120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1015.035731][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1015.047721][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1015.059165][ T9120] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1015.068516][ T9120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.114039][T13870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.137708][ T9120] hub 1-1:1.0: bad descriptor, ignoring hub [ 1015.143868][ T9120] hub: probe of 1-1:1.0 failed with error -5 [ 1015.173264][ T9120] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1015.179488][ T9120] cdc_wdm 1-1:1.0: Unknown control protocol [ 1015.263131][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.442625][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.452445][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.460629][ T9092] usb 2-1: Product: syz [ 1015.465091][ T9092] usb 2-1: Manufacturer: syz [ 1015.469849][ T9092] usb 2-1: SerialNumber: syz 19:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000170a01010000000000000000073100070900020073797a32000000000900010073797a3000"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) 19:46:33 executing program 2: msgsnd(0x0, &(0x7f0000000180)={0x3}, 0x8, 0x0) 19:46:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x163882) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x20000000) 19:46:33 executing program 5: syz_mount_image$ext4(&(0x7f00000040c0)='ext4\x00', &(0x7f0000004100)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000004480)) [ 1015.898909][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 19:46:34 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000280)=""/231, 0xe7, 0x0, 0x0, 0x3}}, 0x48) [ 1016.632993][ T9092] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1016.639691][ T9092] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1016.647599][ T9092] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1016.842405][ T9092] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1016.855968][ T9092] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 19:46:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:35 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:35 executing program 4: syz_clone(0x1000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 1017.308096][ T9092] usb 2-1: USB disconnect, device number 26 [ 1017.316392][ T9092] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:46:37 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 19:46:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r0, &(0x7f0000000740)=@isdn, 0x80) 19:46:37 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000014006d"], 0x78}}, 0x0) 19:46:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 1019.787666][ T9120] usb 5-1: USB disconnect, device number 23 [ 1019.932889][T12635] usb 1-1: USB disconnect, device number 66 19:46:38 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1ff, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 19:46:38 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}) 19:46:38 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1ff, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) [ 1020.185921][ T3561] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1020.342132][ T9120] usb 1-1: new high-speed USB device number 67 using dummy_hcd 19:46:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:38 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:38 executing program 2: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x9000000}]}]}}, &(0x7f0000001540)=""/4083, 0x32, 0xff3, 0x1}, 0x20) [ 1020.582637][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.594917][ T9120] usb 1-1: Using ep0 maxpacket: 8 [ 1020.743463][ T9120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.754049][ T9120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1020.763393][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1020.776875][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1020.788774][ T9120] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1020.798069][ T9120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.808694][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.818249][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.826553][ T3561] usb 2-1: Product: syz [ 1020.830866][ T3561] usb 2-1: Manufacturer: syz [ 1020.835836][ T3561] usb 2-1: SerialNumber: syz [ 1020.902997][T13978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1020.944389][ T9120] hub 1-1:1.0: bad descriptor, ignoring hub [ 1020.950446][ T9120] hub: probe of 1-1:1.0 failed with error -5 [ 1021.003596][ T9120] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1021.009751][ T9120] cdc_wdm 1-1:1.0: Unknown control protocol [ 1021.472637][ T9120] usb 1-1: USB disconnect, device number 67 19:46:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 19:46:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0/file0/file0\x00'}) 19:46:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 19:46:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {0x0}], 0x2}, 0x0) [ 1021.984964][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1021.991581][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1022.002938][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1022.206013][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1022.220670][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1022.382128][ T9092] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1022.622443][ T9092] usb 1-1: Using ep0 maxpacket: 8 [ 1022.625897][ T3561] usb 2-1: USB disconnect, device number 27 [ 1022.635670][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1022.742671][ T9092] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.753340][ T9092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1022.762668][ T9092] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1022.774154][ T9092] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1022.785769][ T9092] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1022.795117][ T9092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.842788][T14002] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1022.864787][ T9092] hub 1-1:1.0: bad descriptor, ignoring hub [ 1022.870841][ T9092] hub: probe of 1-1:1.0 failed with error -5 [ 1022.881346][ T9092] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1022.887581][ T9092] cdc_wdm 1-1:1.0: Unknown control protocol 19:46:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:46:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 19:46:41 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0xffffff1f, 0x1, 0x18}, './file0/file0\x00'}) 19:46:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="78000010000080"]}) [ 1023.303666][T14021] autofs4:pid:14021:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 1023.318036][T14021] autofs4:pid:14021:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 19:46:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) [ 1023.752334][ T3561] usb 2-1: new high-speed USB device number 28 using dummy_hcd 19:46:42 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000000c0)) 19:46:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize}]}}) [ 1024.122724][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.312848][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.322763][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.331016][ T3561] usb 2-1: Product: syz [ 1024.335455][ T3561] usb 2-1: Manufacturer: syz [ 1024.340186][ T3561] usb 2-1: SerialNumber: syz 19:46:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 19:46:43 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:43 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x20000058}, './file0/file0\x00'}) 19:46:43 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000380)="fe", 0x1, 0x100000000}], 0x0, 0x0) [ 1025.261150][ T9120] usb 1-1: USB disconnect, device number 68 [ 1025.532994][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1025.539594][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1025.547434][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1025.772620][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1025.789613][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1025.952612][ T9120] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1026.216484][ T9120] usb 1-1: Using ep0 maxpacket: 8 [ 1026.223267][ T9092] usb 2-1: USB disconnect, device number 28 [ 1026.231006][ T9092] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1026.362958][ T9120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.373309][ T9120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1026.382488][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1026.393920][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1026.405351][ T9120] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1026.414623][ T9120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.522788][T14071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.546983][ T9120] hub 1-1:1.0: bad descriptor, ignoring hub [ 1026.553224][ T9120] hub: probe of 1-1:1.0 failed with error -5 [ 1026.572816][ T9120] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1026.578865][ T9120] cdc_wdm 1-1:1.0: Unknown control protocol 19:46:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 19:46:44 executing program 4: socketpair(0x10, 0x3, 0x6, &(0x7f0000000100)) 19:46:44 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 19:46:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20004841) 19:46:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:45 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 19:46:45 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x4020940d, 0x0) [ 1027.371978][ T9092] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1027.742822][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.914664][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1027.924193][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.933179][ T9092] usb 2-1: Product: syz [ 1027.937468][ T9092] usb 2-1: Manufacturer: syz [ 1027.942472][ T9092] usb 2-1: SerialNumber: syz 19:46:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 19:46:46 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x40049409, 0x0) 19:46:46 executing program 4: truncate(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x75bf504a, 0x1, &(0x7f0000001240)=[{&(0x7f0000000080)}], 0x4040, &(0x7f0000003300)={[{@journal_async_commit}], [{@dont_measure}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '--\xd9'}}, {@uid_lt}]}) 19:46:46 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) [ 1028.608113][ T9120] usb 1-1: USB disconnect, device number 69 [ 1028.739898][T14135] loop4: detected capacity change from 0 to 264192 [ 1028.799812][T14135] ext2: Unknown parameter 'dont_measure' [ 1029.092644][ T9092] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1029.099243][ T9092] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1029.107451][ T9092] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1029.166498][ T3561] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1029.312711][ T9092] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1029.326090][ T9092] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1029.422204][ T3561] usb 1-1: Using ep0 maxpacket: 8 [ 1029.574458][ T3561] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.584818][ T3561] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1029.594008][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1029.605419][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1029.616868][ T3561] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1029.626377][ T3561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.675941][T14139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1029.715369][ T3561] hub 1-1:1.0: bad descriptor, ignoring hub [ 1029.721420][ T3561] hub: probe of 1-1:1.0 failed with error -5 [ 1029.742870][ T9120] usb 2-1: USB disconnect, device number 29 [ 1029.752634][ T9120] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1029.785684][ T3561] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1029.791962][ T3561] cdc_wdm 1-1:1.0: Unknown control protocol 19:46:48 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:46:48 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000001240), 0x0) 19:46:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x2, 0x0, "7c52b53492931b7270713cb54e31f96c52de07f3544fca5e223d83bdd76760f227e1a695513583956874175c85ba3408cfc1d54fd08c181bd931151dfaa1be514f06e6d1eb625c9efebd8fe1ed64c543"}, 0xd8) 19:46:48 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 19:46:48 executing program 4: socketpair(0x28, 0x5, 0x0, &(0x7f0000000300)) 19:46:48 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:48 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) 19:46:48 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) [ 1030.862200][ T9091] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1031.223306][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.392970][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.402413][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.410555][ T9091] usb 2-1: Product: syz [ 1031.415916][ T9091] usb 2-1: Manufacturer: syz [ 1031.420648][ T9091] usb 2-1: SerialNumber: syz 19:46:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="fd59b87e38018eed498da14706c0017fbe48afa06b6229b93488d3fffa1360a29b4f7d1afd3c3b5bf407b9ad9f8429dfe03be2a97d9d1bd37f0f251e5ee08c820f67629fdddfe9dbb7f373d3344f48e61b57356f7abb0d6040a4798df679dfdaf5cca00c8035c7f3ee65c2f9d3c154c05793df239180d254e2030b0912d2931088339664523fbb6ccf2092f68052d59c4fd06273eaf4dd6830db246aabef0705ffda89e03d5158d26900aa6ae4830b7f72723f7c3448ba700bd146750516310547625705ef14108317bc4aed247d5f9d48d2612c15ed7b6a4e6be6cc7dd1e2f61f1c648ecb2fc6bfbc3104659c00f305cf868332f66aa28f71d7c390a6cc813aceb6982b1ddb9d3bacc3be6a6dfbba29270972681e94e5d91e3489ec08747b0f4e03d788d433fa8cce2325afcb0634f410b3ca0c1a529df9c8fbf1b58455defefe9e8ca63fa0492f0ebbe02a26616ae74893be7189c86246ed1b745ed250c161e711d6a1e97c3ec37fc91fe7f194fb3ebea52802fd1ad8e0631b661c0d92f814230de29b78aadd9d98dcf4042b4b2ab908b5916d6ee4e45ffe25500466819e1c2cbb593036c3abf23ad811cedcc5fcc96efdfea631d561b39a54bc3859963048fea66d95976380a02e6fb0735d4dffa37abd76ab9acedfe4f0a3557a8b504e68d29e67a4b2a43797d59a678918e24456659604ccc8e4a8cf4d5900a5fdad6c43276892f240fa076589bfa6680017be0f25c3bdca3521afcdd96b532ea6d926aa7de97e7a2ab76e53e752298957467d91aa95ee28d244a2e30306f14bba4affc7e56d5c21e50d251d7a5c5c04d9bbdb16fee2a1b97bdba8dc572a5f96f37a0367400011f77218b5abd48e637a1fd3d080a996b241031336734c52c81afb5236978d3bc0263f3876cce81cc906a03771d94f06b76038937d5cacbdfb52e4b7cd39216a556f4d57bf9c5271f88454af68b974612bd3eb4424eb96b4660848bb9ff2950e097edbf9c94f195c4e90faad5788dcddc9ff166ab863a43978c246f15e88d71122c8ea563aae04829ad6cc60ec9e3935115298900c6773fa05127920e74330ef76421d21b612cff7c3e528092ddeb567e5c63bfb6a1236cf34ab7e321d06727cc9adde45a4c78a235878ab05766e7dde159368a621bcbfcd1ea75b3a3c9dad0e23ba5899035e15076c8e4cae50cf4d689f528c879c96f43eec03d15af5a9cc960ebe94181655a01695cc92aea32b70b369308b58f1d4e05d7b6bef9ae21e84801f8675fe9f0497710194203046474b5847da78dd313ec7d9d24e5b7f367077dcadf70082c38c188ce822b34e9e16cddfdcdf37af9eadb7c7d0cbd515114fcb4a02154f2a07a4b4b69c589c43fa5e97be110799b3da2c6b80785c22f2c27b96bf7942a9f307503f993da30d71aa663e687f90acceb638d3548701576a7c195a926548164382474084c9e1d776e955412f95a8187ed451668c301d7c59522c8423fd7d29bc9c9881e64392f97ed597c3e828637bbd29946ae09de3c8f96e490ce482c8389f3ef757265737899f90a233b2dbeb9f006851b815ac6a3bb8f17737df5be04d93ed25569ba7ed1b8f6a1a6c8a6043e044e6efc0f3443ba6b8582014ee2e93e8f9acd8270ae6d2b26d2c8db473a9f1cb17e1a20b88bcbcde1ff72bb4a7792ce89dfaac9a24deab0936963452199528d2a85e1ab77723dc9cb7b5df16dfd64ef7ed5b723c1a41ef9ea596bae67d8b0628869e53f67dd097aad2db879958e5503f0f80c3483586199394cc11824d1fb2d52750b40e3beb215adbaacbd193d7cde86c6b08aaccd9dbb0bf24f07b8666518c3a2f18fca68c119d77687f644bae71a2e2ceeeadb51c2acbd4e22e0a4d2213e8e11f41d1faa989835706aca9e6b113bab66c2e1705b66a43b598a87e1e361b584507b1f15c39d15870e3c191aaf5f80d561237487cfad5736996a7df1da597dbb7a623f58b46261f3895dc9735383e88850b7112186bef411d26d5ff2a82963a09b66ba645b1410cee0ada9cd72e018acf76f6aa7716086b2eef459453fa05b48434efeb8727af06fee062cb60d82a41e8fdff304c44b68a40e226937f0f62a7e8c23bd0b786318981c41a3a06040104c88a35c4f811f1c8f01a26e0e1335d2e714d489c1b83e298c90443ee2f44203499b36840f75d9f70f9f178abad730e7d871a22d07b97aef1c20fef3b7e9cb67c94dfe3ce99fe285597d5003e755247247d0e3a6e25113f1d8d4f78ed838fcb07ef325eda0f9db6fa2ebe451528775ee271ef40839e060ed5c0cff23be4664d5fdb8d4736ba3e114742c624f127530e77e1a779c37899762fc5951bcadc9acf537750270a381d40a5f5d059c5bf99b3fcb21a7651b0fc34e9b06733ba81f3bb3678010d92fd7d3be19d913e8c77c3cd02f2202e0c56e152c15da62624ef334799a1aa8b8a9275423e70184ced2ca3b86f27d8bef37587ea6ee360f715c113f75c53c1e946b689389eb60e788de3f7cf19e66b95be81b4f011c01ccecd590e1bfb281de86c7ac68c192efd575d845717c893b36ae064d3f95726d9085782fc6afcd8f9563d126a3654877cf66dc684c43c1ae8d5619f31a8fb301f6f5823c69157a540576ff53fa4d4e99fd2c60d3665f357a3409ac631f892a5fa8fd8edf55fca4d7a9a0c5c79b7cef9b14a78a236f3878ef38aeec2cbdc89b0c22a6f9f98f6f045d0552ee0a3654a11f49f69edef82b172b92222b3c2a198aca2794076d2546a68e0317b081a40e98159e651f19d4c003d2af26acccfd5abc55e22e9826fd024152a68aa062b55bc57048644ca860fff3fc5a016d1b9947bd44caf82266b2c3e7b99ebd65f64c90795b95f2197574e0112bf672ff7f89627a990aa50bbe5829f8fdd150dd58a1f1f0005b022c75fc29f30180870942acd8af991c9b735af99ffc692e4b6241a5d3a3a4c6c8866e4a353be14ca0dc443f4b819a2b7fd71c8898dc750acce7290f9991657ff508b81f403a5eddd72f2d8d86ed82d8d010b2d6afea6c0e437f766a1f2831ea53c4cfc72e6e5704a15a40a6a79dee9ecc81458b3886772c223edeb20745fb000a0c2e7bd74ff7f3f7b401fc0f29a8ae123f9b8f672e3d19331bf6abdd056f1b8a2b7d4b4c559a863cf8116f000b97394cab83efc278e8560ada9dd161772e94f4a3d90e6b2cc8eede1447d5b1a5273cf62de99da874f67cfd934115e8a4b2e126f1bd967de58f1ea9bd3934e796fc973e114538ec602205264ac33da33b8e81d221489e774bfbee96bee274b7cc626299f550ff8644abba29be5d7683da3457ff55bee1ec1d88485593e0e89419a31612d9c5e41f714a85a8197fde2aac7922f9bf441e170f85c0e2e8363a1b9b5e425595ea67c1d208d5a58397ff1076c308a115922f6feb211a0490af1bdc7cb8c752838b7f84be03bad5c7fdb5ff1f5d456b34dd995ce703dd3615596e75193ce092367543e62b556ef34bae4f3aa926c50ef595fab4e16236b5962b8fc62cae5caa598169f013ff3b5c04839e4e9b203ec3601acc68b1a187322798566c7d99d59efe233812c8222bdcd84a9c86c0ef2dcbc52614a4c407189839bd6aa0a2cc46e88416f44d0bf896df2b6137dcfd2551a657f6053cbf1f58a1e3382df9f91dbd19f91e5aefd9f2768f09743e4a3814c6bf426640e3729ead2745479523d8a53c7a561872c9a5ac35be5be08161ffafa53f985ea5f53b67cd752792d248b3a72e2eb8077e0704d0d6ae3b8a382a1bf6506ecb82146ad3529fdee820609eb9935e7c0c1f222bd9197c8c463682bf8133714dc0ddc0ab660aa4971a074947894add2c87bd6665c1e1d0b46f14e2ffda8931f95a55b57e45093c9e10d9352ccd7206d5c1cc45e520efa5b63bf03aa8080702116a10bfd857189095acab3b2c2d39fcb018fb4342dfedd3c610e9af9c578da3d1bd69fa880abc19dfded459c62f6f015d57549d32d1ed3a249ee58a600fce467265df6359d792259ef08a61336436720d3a37b88e25151a334fb4a9a5189e1250e3078977a8b8d09ad6ef25e361651ae498d00ec5d9ef9c30686b3039d6c9cc2e37fc866848b445e2e780c8185e86edc674c13b1627409e184855460dc745894f77568eca02e3779590b042048c8e9055cfbb0859068d8c5e2c5eb43ad30182b43aedfb3fa4217f107d3eda9c6297565b13a4ed31f5fbb2be06e821e5c0ac448c60a5c465fb92c4b8eaa9308e4e2ceec7d3c22797771aaeb0260fe9abefc6232c77e13c21063ae4366547dcb760cf6985acd9956ddc01fe688362aa5a8972a5218da2482a56ad23e91f7f6ec8d9381fea46f14025dd69bf658e2e0ef2fcf47df6f342197e9518a2d0501ebbb70e5c689ff3dfdf874912ee3a128ed90c6392f9d21806907a2fac5741cb9621274eee3d00742b1a4199c495a8d56365f6d28f20e01abd84d2ccf287d5edc30be3062da250453c399250ef9371442f6dc54db02d35bc8a0dfa257fe27150665f3f2b845f726dc23658bc79728109defa7a19533dd2bc10ae8ae7b3a4d1a5c1729ce00f8be8ccbdb790dbd9dfcb00fea0ca4c07c6feb9b9aa28a9b360da50e930e59ceedb0c93debcd946c231004312c34c74ae9baa59f82cfafa16f996e096ae933f4e423f3b9a1d053a82c73a7ce7f75dead21d2a536d850b788099186fdcaa2395569f2ceef4180a1c3751830e026f39521b316a300c6f953f0a07d03eb35adc74f3ca3fc339273a5e4acedec08ac6b3ce107dc2b0a3a826afe9a89ae55dab0636505302cd6b5960580372683b7b3278a4e2cffa6a7ea3150db3a4748d3f398565e3ec8834a7f056cff72716bb78330ba15c90182fb8861124867e83fba552c1fbbfbd676d7508231f4fb32235fa0b67dd3dd54279e739ef118d1459603fb26bdf3447d6a2cad6787a73e41d3cd60b5956ac3dc3e55315f05521ccc74bc9070f4129de4bcff4dfc16937cba93f96e7082b163e42532298bfccce57c1c085175fdb04f45b6562413378866525e594d181a4c1f28d2d36d9c126b9933479578469f5413d20df40af8af72b4ea00091b26adfd9d30fc2a36a039ce0f04c2c3e90bd6630d3153c57a3e6afddca3dd0286f3a92a81042210f6a3d7542812416ad42278327962aac46118438ae523bfd8fa82478db71e0b50595a01d7bec81d79a341bb0c4dd16fbbaa4808ebd2922929c222679d3dadfda4e16857f62c77735672f416819fc83e80f3fdf2402b09112d4b1c664f591d56e0def37df66818ec857214a560a4e496d9428d3b3b735e9bcc62694eb0014528427ad937af259d1e038c9117708fc82f01ee576dff89310e6b99e54bf7e5f8ad5cdff05415bb92c1f8ed6128c8a989c04998b55394f4f6190bb0f30b318d7b07c03ed28e72d580af76821b19130bab", 0xf00}], 0x1}}], 0x1, 0x0) 19:46:50 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={[0x80]}, 0x8}) 19:46:50 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@noextend}], [{@subj_user={'subj_user', 0x3d, 'ext2\x00'}}]}}) [ 1032.034163][ T9120] usb 1-1: USB disconnect, device number 70 19:46:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "cb9e045d17e301467288f29bcf0ce8237b5144dc35528aa244d385e713d577a4079206ec96a3e37ea24dc142178e66661be81b274709242f5b1c1e3aaa9f6120"}, 0x48, r0) keyctl$clear(0x7, r0) [ 1032.167062][T14207] 9pnet_fd: Insufficient options for proto=fd [ 1032.572860][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1032.579459][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1032.587349][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1032.792595][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1032.805729][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1033.200314][ T9120] usb 2-1: USB disconnect, device number 30 [ 1033.208252][ T9120] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:46:51 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:46:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x8, 0x0, "c96db3a82e4d231916fdb1e1d435932846c1be0992e309de60aeaf611dbaa27993f02073e13e598dea21a9ec3bc28632538115d1d16cdd23485e02b95a1f7dd812ed66a5674eefaeb811716504e0b805"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x25, 0x0, "7c52b53492931b7270713cb54e31f96c52de07f3544fca5e223d83bdd76760f227e1a695513583956874175c85ba3408cdc1d54fd08c181bd931151dfaa1be514f06e6d1eb625c9efebd8fe1ed64c543"}, 0xd8) 19:46:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x38, 0x0, 0x1, 0x203, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}]}, 0x38}}, 0x0) 19:46:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000016c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) 19:46:51 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 19:46:52 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x80086601, 0x0) 19:46:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:52 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) 19:46:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) 19:46:52 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa, 0x0) [ 1034.322767][ T9120] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1034.696822][ T9120] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.892930][ T9120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.902227][ T9120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.910379][ T9120] usb 2-1: Product: syz [ 1034.914794][ T9120] usb 2-1: Manufacturer: syz [ 1034.919526][ T9120] usb 2-1: SerialNumber: syz [ 1036.062456][ T9120] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1036.069179][ T9120] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1036.077109][ T9120] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1036.272783][ T9120] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1036.285615][ T9120] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1036.478134][ T9120] usb 2-1: USB disconnect, device number 31 [ 1036.485979][ T9120] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:46:55 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000bc0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x8c, {0x8a, "80613e650682155e10795c6771a3928069d64a6ddebc995e8a03ce534011e0a03067e596295715ee22120c0f33211180648c98cad08a630b2eb3db3ebba7234a3de8cad333764c674234c8a109c8de7ca0d2e6d96aa4eb1f0e0f0b34ed1ffa1e8fa66a1735a983b077ecaec3b546544ad5218d681051601d50c92049d5440c98d109415509bf87491ca4"}}, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x1}}) 19:46:55 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x801c581f, 0x0) 19:46:55 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32]) 19:46:55 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 19:46:55 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:55 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000004dc0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 19:46:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5451, 0x0) 19:46:55 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:55 executing program 4: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='i') 19:46:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) [ 1037.822155][ T3561] usb 2-1: new high-speed USB device number 32 using dummy_hcd 19:46:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1038.133973][T14330] autofs4:pid:14330:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc018937e) [ 1038.148374][T14330] autofs4:pid:14330:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1038.202220][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.403634][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1038.413008][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.421151][ T3561] usb 2-1: Product: syz [ 1038.425666][ T3561] usb 2-1: Manufacturer: syz [ 1038.430394][ T3561] usb 2-1: SerialNumber: syz [ 1039.702395][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1039.712182][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1039.719806][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1039.922248][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1039.934946][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1040.128871][ T9092] usb 2-1: USB disconnect, device number 32 [ 1040.137231][ T9092] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:46:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 19:46:58 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:46:58 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:58 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000180)={0x0}) 19:46:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000740)=@known='system.sockprotoname\x00', &(0x7f0000000640)=""/161, 0xa1) 19:46:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) [ 1040.789364][T14373] autofs4:pid:14373:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc018937e) [ 1040.804083][T14373] autofs4:pid:14373:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 19:46:58 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:46:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "7c52b5349293fa7131f96c52de07f3544fca5e223d83bdd76760f227e1a695513585ba3408cfc1d54fd08c1802d931151dfaa1be514f06e6d1eb625c9efebd8fe1cd64c5430000000000000000004000"}, 0xd8) 19:46:59 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) [ 1041.283683][ T9091] usb 2-1: new high-speed USB device number 33 using dummy_hcd 19:46:59 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x410882, 0x0) 19:46:59 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1041.536964][T14392] autofs4:pid:14392:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc018937e) [ 1041.551542][T14392] autofs4:pid:14392:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 19:46:59 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000004400)=[{&(0x7f00000043c0)="bc693b38a3ad097338", 0x9, 0xfffffffffffffff8}], 0x0, 0x0) [ 1041.663093][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.833314][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.842777][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.850937][ T9091] usb 2-1: Product: syz [ 1041.855541][ T9091] usb 2-1: Manufacturer: syz [ 1041.860914][ T9091] usb 2-1: SerialNumber: syz [ 1042.049043][T14400] loop4: detected capacity change from 0 to 264192 [ 1042.382540][T13186] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1043.082695][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1043.089304][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1043.097265][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1043.308065][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1043.320263][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1043.509717][ T3561] usb 2-1: USB disconnect, device number 33 [ 1043.517691][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:47:02 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 19:47:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x1400, 0x0, "7c52b53492931b7270713cb54e31f96c52de07f3544fca5e223d83bdd76760f227e1a695513583956874175c85ba3408cfc1d54fd08c181bd931151dfaa1be514f06e6d1eb625c9efebd8fe1ed64c543"}, 0xd8) 19:47:02 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:02 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:02 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) time(&(0x7f0000000140)) 19:47:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1044.150464][T14440] autofs4:pid:14440:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc018937e) [ 1044.165184][T14440] autofs4:pid:14440:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 19:47:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 19:47:02 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:02 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 19:47:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x75bf504a, 0x1, &(0x7f0000001240)=[{&(0x7f0000000080)}], 0x4040, &(0x7f0000003300)={[{@jqfmt_vfsold}], [{@dont_measure}, {@hash}]}) [ 1044.702428][ T3561] usb 2-1: new high-speed USB device number 34 using dummy_hcd 19:47:02 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 1045.025235][T14463] loop2: detected capacity change from 0 to 264192 [ 1045.066072][T14463] ext2: Unknown parameter 'dont_measure' [ 1045.117146][T13186] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1045.134667][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.323098][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1045.332403][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.340593][ T3561] usb 2-1: Product: syz [ 1045.345005][ T3561] usb 2-1: Manufacturer: syz [ 1045.349813][ T3561] usb 2-1: SerialNumber: syz [ 1046.542346][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1046.548940][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1046.556745][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1046.755372][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1046.768568][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1046.796516][ T3561] usb 2-1: USB disconnect, device number 34 [ 1046.804637][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:47:05 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 19:47:05 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:05 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5450, 0x0) 19:47:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x401c5820, 0x0) 19:47:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:47:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 19:47:05 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) 19:47:05 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1047.813395][ T9091] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1048.183338][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.352354][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.361683][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.370276][ T9091] usb 2-1: Product: syz [ 1048.375012][ T9091] usb 2-1: Manufacturer: syz [ 1048.379822][ T9091] usb 2-1: SerialNumber: syz [ 1049.532337][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1049.540065][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1049.547842][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1049.752288][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1049.764943][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1049.793244][ T9091] usb 2-1: USB disconnect, device number 35 [ 1049.802482][ T9091] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:47:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:08 executing program 4: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) 19:47:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 19:47:08 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:47:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5415, 0x0) 19:47:08 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) [ 1050.782050][ T3561] usb 2-1: new high-speed USB device number 36 using dummy_hcd 19:47:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:08 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x163882) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 19:47:09 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) [ 1051.172763][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.353047][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1051.362511][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.370661][ T3561] usb 2-1: Product: syz [ 1051.376534][ T3561] usb 2-1: Manufacturer: syz [ 1051.381310][ T3561] usb 2-1: SerialNumber: syz [ 1052.582382][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1052.588943][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1052.597034][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1052.802443][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1052.815337][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1052.848451][ T3561] usb 2-1: USB disconnect, device number 36 [ 1052.860312][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 19:47:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 19:47:11 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) [ 1053.742070][ T3561] usb 2-1: new high-speed USB device number 37 using dummy_hcd 19:47:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:47:12 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:12 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:12 executing program 4: socket(0x0, 0x0, 0xff) 19:47:12 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0xffffff1f, 0x18}, './file0/file0\x00'}) 19:47:12 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) [ 1054.133469][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:47:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20ef8, 0x0) [ 1054.312761][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.322367][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.330512][ T3561] usb 2-1: Product: syz [ 1054.335152][ T3561] usb 2-1: Manufacturer: syz [ 1054.339899][ T3561] usb 2-1: SerialNumber: syz 19:47:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) [ 1055.702263][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1055.722757][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1055.754731][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1055.782259][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1055.812155][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1055.824117][ T3561] usb 2-1: USB disconnect, device number 37 19:47:14 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 19:47:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) [ 1056.504227][ T3561] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1056.892315][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.072423][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1057.082043][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.090186][ T3561] usb 2-1: Product: syz [ 1057.094559][ T3561] usb 2-1: Manufacturer: syz [ 1057.099279][ T3561] usb 2-1: SerialNumber: syz 19:47:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:47:15 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:15 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0x0) 19:47:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 19:47:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 19:47:15 executing program 4: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000001940)={{0x0, 0x80000000}}, 0x0) 19:47:15 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:15 executing program 0: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000040), 0x4) [ 1058.252515][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1058.272737][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1058.312566][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1058.342317][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1058.382203][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1058.403084][ T3561] usb 2-1: USB disconnect, device number 38 19:47:16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 19:47:16 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00') [ 1059.142244][ T9092] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1059.502594][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.672409][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1059.682451][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.690704][ T9092] usb 2-1: Product: syz [ 1059.695550][ T9092] usb 2-1: Manufacturer: syz [ 1059.700283][ T9092] usb 2-1: SerialNumber: syz 19:47:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 19:47:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:18 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 19:47:18 executing program 0: socketpair(0x2, 0x4003, 0x0, 0x0) 19:47:18 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 19:47:18 executing program 0: r0 = socket(0x2, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@un=@abs, 0x8) 19:47:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[]) 19:47:18 executing program 4: clock_settime(0x100000000000000, &(0x7f0000000040)={0xc000000}) 19:47:18 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:12 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) [ 1060.862639][ T9092] cdc_ncm 2-1:1.0: failed to get mac address [ 1060.885364][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1060.942702][ T9092] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1060.965359][ T9092] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1061.022497][ T9092] usbtest: probe of 2-1:1.1 failed with error -71 [ 1061.120641][ T9092] usb 2-1: USB disconnect, device number 39 04:03:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:12 executing program 4: socketpair(0x21, 0x0, 0x81, 0x0) [ 1061.812158][ T3561] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1062.222390][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.402222][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.411551][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.419907][ T3561] usb 2-1: Product: syz [ 1062.424306][ T3561] usb 2-1: Manufacturer: syz [ 1062.429028][ T3561] usb 2-1: SerialNumber: syz 04:03:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:14 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:14 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) 04:03:14 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 04:03:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b4a, &(0x7f0000000440)) [ 1063.572508][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1063.612100][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1063.687799][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1063.717741][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 04:03:15 executing program 0: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 04:03:15 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1063.783045][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 04:03:15 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) 04:03:15 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[]) [ 1063.840124][ T3561] usb 2-1: USB disconnect, device number 40 04:03:15 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) 04:03:15 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1064.682330][ T3561] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1065.082405][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.252374][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.261608][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.269894][ T3561] usb 2-1: Product: syz [ 1065.274266][ T3561] usb 2-1: Manufacturer: syz [ 1065.278989][ T3561] usb 2-1: SerialNumber: syz [ 1066.492371][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1066.522402][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1066.552251][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1066.574675][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1066.602343][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1066.623422][ T3561] usb 2-1: USB disconnect, device number 41 04:03:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, r0, 0x0, 0x0) 04:03:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 04:03:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000940)={0x1f, 0x0, 0x0}) 04:03:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:18 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:18 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x58, "0882df623713bfd9a25ed26451ee753939d47f925b4be51f594a9960679501e632cffe6281edbd4df326d24c0ec3768853d53c0241581e8b22afe9d56592579e8137a8975ff42da4949e876a104e1b6d0104a9f3e1bf70d2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, "a3"}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000580)={0x20, 0x84, 0x1, 'H'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "e0780a"}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:18 executing program 0: syz_clone(0x51284080, 0x0, 0x0, 0x0, 0x0, 0x0) 04:03:18 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 04:03:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x7}]}]}}, &(0x7f0000000640)=""/174, 0x32, 0xae, 0x1}, 0x20) 04:03:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 04:03:18 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000001200)=""/200, 0x2a, 0xc8, 0x1}, 0x20) [ 1067.692785][ T9092] usb 2-1: new high-speed USB device number 42 using dummy_hcd 04:03:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@typedef={0x6}, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000980)=""/199, 0x3c, 0xc7, 0x1}, 0x20) [ 1067.940640][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.947716][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.052404][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.223261][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1068.233161][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.241315][ T9092] usb 2-1: Product: syz [ 1068.246065][ T9092] usb 2-1: Manufacturer: syz [ 1068.250791][ T9092] usb 2-1: SerialNumber: syz [ 1069.442487][ T9092] cdc_ncm 2-1:1.0: failed to get mac address [ 1069.462322][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1069.492504][ T9092] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1069.512146][ T9092] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1069.532373][ T9092] usbtest: probe of 2-1:1.1 failed with error -71 [ 1069.545766][ T9092] usb 2-1: USB disconnect, device number 42 04:03:21 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:21 executing program 5: r0 = epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x6000001d}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4bfa, &(0x7f0000000440)) 04:03:21 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000000500)=@bloom_filter, 0x48) 04:03:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 04:03:21 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1070.283166][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:03:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3f7ff0d428d6283e) 04:03:21 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:21 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 04:03:21 executing program 0: syz_read_part_table(0x2b00000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000fffffffd0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) [ 1070.522153][ T9092] usb 2-1: new high-speed USB device number 43 using dummy_hcd 04:03:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) 04:03:21 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1070.882339][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.053667][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1071.063165][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.071306][ T9092] usb 2-1: Product: syz [ 1071.075734][ T9092] usb 2-1: Manufacturer: syz [ 1071.080465][ T9092] usb 2-1: SerialNumber: syz [ 1072.242411][ T9092] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1072.249031][ T9092] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1072.256920][ T9092] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1072.462322][ T9092] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1072.474885][ T9092] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1072.670509][ T9092] usb 2-1: USB disconnect, device number 43 [ 1072.678775][ T9092] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:03:24 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:24 executing program 2: syz_read_part_table(0x4600000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000ffffffee0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) 04:03:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000080)="b45ce83026a2c85d6ae70f75", 0xc, 0x5}, {0x0, 0x0, 0x200}], 0x0, &(0x7f00000004c0)) 04:03:24 executing program 0: socket$inet6(0xa, 0x0, 0xb8d) 04:03:24 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:24 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1073.549845][T14746] loop4: detected capacity change from 0 to 2 04:03:24 executing program 0: clock_getres(0x897eae45cd84fb5a, 0x0) [ 1073.598924][T14747] loop2: detected capacity change from 0 to 1 04:03:24 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1073.691338][T14746] FAT-fs (loop4): invalid media value (0x00) [ 1073.697892][T14746] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1073.742335][T14747] ldm_validate_privheads(): Disk read failed. [ 1073.748845][T14747] Dev loop2: unable to read RDB block 1 [ 1073.754793][T14747] loop2: unable to read partition table [ 1073.773205][T14747] loop2: partition table beyond EOD, truncated [ 1073.779712][T14747] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1073.812379][ T9092] usb 2-1: new high-speed USB device number 44 using dummy_hcd 04:03:25 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') r1 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={{r1}}) 04:03:25 executing program 0: bpf$MAP_CREATE(0x2, &(0x7f0000000500)=@bloom_filter, 0x48) 04:03:25 executing program 2: syz_read_part_table(0x4600000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000ffffffee0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) [ 1074.172880][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:03:25 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1074.362621][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.372086][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.380265][ T9092] usb 2-1: Product: syz [ 1074.384785][ T9092] usb 2-1: Manufacturer: syz [ 1074.389513][ T9092] usb 2-1: SerialNumber: syz [ 1074.538033][T14763] loop2: detected capacity change from 0 to 1 [ 1074.657637][T14763] ldm_validate_privheads(): Disk read failed. [ 1074.664866][T14763] Dev loop2: unable to read RDB block 1 [ 1074.670628][T14763] loop2: unable to read partition table [ 1074.708259][T14763] loop2: partition table beyond EOD, truncated [ 1074.715107][T14763] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1075.262307][ T9092] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1075.268528][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1076.495205][ T3561] usb 2-1: USB disconnect, device number 44 04:03:27 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x0, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:27 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, 0x0) 04:03:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'wg0\x00', @ifru_map}) 04:03:27 executing program 2: syz_read_part_table(0x4600000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000ffffffee0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) 04:03:27 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:27 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev}, 0x10) [ 1076.838015][T14794] loop2: detected capacity change from 0 to 1 04:03:28 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1076.915354][T14794] ldm_validate_privheads(): Disk read failed. [ 1076.922348][T14794] Dev loop2: unable to read RDB block 1 [ 1076.928092][T14794] loop2: unable to read partition table [ 1076.963452][T14794] loop2: partition table beyond EOD, truncated [ 1076.969955][T14794] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1077.022470][ T9091] usb 2-1: new high-speed USB device number 45 using dummy_hcd 04:03:28 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 04:03:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 04:03:28 executing program 2: syz_read_part_table(0x4600000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000ffffffee0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) 04:03:28 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1077.402269][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.593057][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.603199][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.611530][ T9091] usb 2-1: Product: syz [ 1077.615986][ T9091] usb 2-1: Manufacturer: syz [ 1077.620733][ T9091] usb 2-1: SerialNumber: syz [ 1077.682504][T14813] loop2: detected capacity change from 0 to 1 [ 1077.758720][T14813] ldm_validate_privheads(): Disk read failed. [ 1077.765858][T14813] Dev loop2: unable to read RDB block 1 [ 1077.771635][T14813] loop2: unable to read partition table [ 1077.825078][T14813] loop2: partition table beyond EOD, truncated [ 1077.831734][T14813] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1078.432542][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1078.438731][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1079.730733][ T9091] usb 2-1: USB disconnect, device number 45 04:03:31 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x0, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000040)="5351c9104bfede0ca82bf448396cd9", 0xf}, {&(0x7f0000000080)="7169d5", 0x3}, {&(0x7f00000000c0)="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", 0x59b}], 0x3, &(0x7f0000001540)=[@tclass={{0x10}}], 0x10}}], 0x1, 0x0) 04:03:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1}, 0x1c}}, 0x0) 04:03:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) 04:03:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 04:03:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x40}}, 0x0) 04:03:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) 04:03:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1080.282025][ T3561] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1080.358218][T14828] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:03:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000000080)='q', 0x1}], 0x2}}], 0x1, 0x0) 04:03:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}}, 0x0) [ 1080.653015][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.852470][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.862107][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.870286][ T3561] usb 2-1: Product: syz [ 1080.877445][ T3561] usb 2-1: Manufacturer: syz [ 1080.883089][ T3561] usb 2-1: SerialNumber: syz [ 1081.682425][ T3561] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1081.688635][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1083.042280][ T3561] usb 2-1: USB disconnect, device number 46 04:03:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x0, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff0093547ffe7abdce41667363000000001400020010000400"/44], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x44, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 04:03:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000000080)='q', 0x1}], 0x2}}], 0x1, 0x0) 04:03:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8912, &(0x7f0000000040)) 04:03:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:34 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}}, 0x0) [ 1083.454057][T14852] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 04:03:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x40049409, 0x0) 04:03:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:34 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) capset(0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x7, r0, &(0x7f0000000000)="98", 0x3e800007ed, 0x1000000, 0x0, 0x10}]) [ 1083.682385][ T9091] usb 2-1: new high-speed USB device number 47 using dummy_hcd 04:03:35 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0x9, 0x4) 04:03:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) [ 1084.052840][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.222418][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1084.231656][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.240158][ T9091] usb 2-1: Product: syz [ 1084.244741][ T9091] usb 2-1: Manufacturer: syz [ 1084.249470][ T9091] usb 2-1: SerialNumber: syz [ 1085.062217][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1085.068581][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1086.399126][ T3561] usb 2-1: USB disconnect, device number 47 04:03:37 executing program 4: eventfd(0x0) eventfd(0x0) 04:03:37 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:37 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0x9, 0x4) 04:03:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x0, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0x5}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) [ 1086.746107][T14879] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 04:03:38 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) 04:03:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 04:03:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) 04:03:38 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1087.032491][ T9091] usb 2-1: new high-speed USB device number 48 using dummy_hcd 04:03:38 executing program 4: syz_clone(0x20100, 0x0, 0x0, 0x0, 0x0, 0x0) 04:03:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xed, 0x27, 0x83, 0x20, 0x17ef, 0x7203, 0x9fb8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0xbf, 0xa2}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c77f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xb, 0x2, "80e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f00000012c0)={0x0, 0x0, 0x2, "97c3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, 'f~'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000003500)={0x2c, &(0x7f00000033c0)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:03:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:03:38 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1087.392870][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.572844][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.582363][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.590515][ T9091] usb 2-1: Product: syz [ 1087.595032][ T9091] usb 2-1: Manufacturer: syz [ 1087.599770][ T9091] usb 2-1: SerialNumber: syz [ 1087.832524][ T9092] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1088.072313][ T9092] usb 3-1: Using ep0 maxpacket: 32 [ 1088.359382][ T9092] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=9f.b8 [ 1088.368717][ T9092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.377315][ T9092] usb 3-1: Product: syz [ 1088.381610][ T9092] usb 3-1: Manufacturer: syz [ 1088.386466][ T9092] usb 3-1: SerialNumber: syz [ 1088.398734][ T9092] usb 3-1: config 0 descriptor?? [ 1088.417433][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1088.424106][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1089.102484][ T9092] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1089.704123][ T3561] usb 2-1: USB disconnect, device number 48 04:03:41 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x0, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121302, 0x0) 04:03:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x640000, 0x0) 04:03:41 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1089.967588][ T9092] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1089.978238][ T9092] asix: probe of 3-1:0.0 failed with error -71 04:03:41 executing program 4: pipe2$watch_queue(&(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_IRQFD(r0, 0x4020ae76, 0x0) [ 1090.093805][ T9092] usb 3-1: USB disconnect, device number 21 04:03:41 executing program 0: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 04:03:41 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1090.392217][ T9091] usb 2-1: new high-speed USB device number 49 using dummy_hcd 04:03:41 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 04:03:41 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x44100, 0x0) 04:03:41 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:03:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x2}]}]}}]}, 0x74}}, 0x0) [ 1090.752764][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.923714][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.933730][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.942033][ T9091] usb 2-1: Product: syz [ 1090.946332][ T9091] usb 2-1: Manufacturer: syz [ 1090.951054][ T9091] usb 2-1: SerialNumber: syz [ 1091.722494][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1091.729925][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1093.056197][ T3561] usb 2-1: USB disconnect, device number 49 04:03:44 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f0000000300)) 04:03:44 executing program 0: io_uring_setup(0x64a2, &(0x7f0000000500)) 04:03:44 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:03:44 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x0, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:44 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0) 04:03:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 04:03:44 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) process_mrelease(r0, 0x0) 04:03:44 executing program 0: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0}, 0x38) 04:03:44 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1093.602679][ T9092] usb 2-1: new high-speed USB device number 50 using dummy_hcd 04:03:44 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 04:03:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:03:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 1093.962957][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:03:45 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1094.133449][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.142988][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.151132][ T9092] usb 2-1: Product: syz [ 1094.155625][ T9092] usb 2-1: Manufacturer: syz [ 1094.160365][ T9092] usb 2-1: SerialNumber: syz [ 1094.932462][ T9092] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1094.938679][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1096.270959][ T9092] usb 2-1: USB disconnect, device number 50 04:03:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x0, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:47 executing program 4: socketpair(0x1e, 0x0, 0x371f, &(0x7f0000000040)) 04:03:47 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 04:03:47 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0) 04:03:47 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 04:03:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:47 executing program 2: syz_io_uring_setup(0x677b, &(0x7f00000000c0)={0x0, 0x63f0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 04:03:47 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 04:03:47 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 04:03:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_normal', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/150, 0x96}], 0x1, 0x7, 0x0) [ 1096.822091][ T9092] usb 2-1: new high-speed USB device number 51 using dummy_hcd 04:03:48 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) 04:03:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1097.203107][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.383666][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.393669][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.401970][ T9092] usb 2-1: Product: syz [ 1097.406268][ T9092] usb 2-1: Manufacturer: syz [ 1097.411012][ T9092] usb 2-1: SerialNumber: syz [ 1098.142376][ T9092] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1098.148595][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1099.528765][ T9092] usb 2-1: USB disconnect, device number 51 04:03:50 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x0, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:50 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002b80)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000002cc0), 0x0, &(0x7f0000002d00)={[{@hide}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 04:03:50 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x6000001d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 04:03:50 executing program 0: add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000940)="c5f8172623625f69f83f68df036d608869a625e5f78def99ea341d7d895265072c625e98f6248a94636bf316241a7882307058b55864", 0x36, 0x0) 04:03:50 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/class/nvme-generic', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f0000000580)={0x0, 0xf9}, 0x20) 04:03:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:03:51 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/class/nvme-generic', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f0000000580)={0x0, 0xf9}, 0x20) 04:03:51 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x600040, 0x0) 04:03:51 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a3542) 04:03:51 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) [ 1100.072244][ T3561] usb 2-1: new high-speed USB device number 52 using dummy_hcd 04:03:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000001180), &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002b80)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x2020020, &(0x7f0000002d00)) 04:03:51 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/class/nvme-generic', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f0000000580)={0x0, 0xf9}, 0x20) [ 1100.483205][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.664026][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.673516][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.681665][ T3561] usb 2-1: Product: syz [ 1100.686179][ T3561] usb 2-1: Manufacturer: syz [ 1100.690902][ T3561] usb 2-1: SerialNumber: syz [ 1101.412231][ T3561] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1101.418483][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1102.763404][ T3561] usb 2-1: USB disconnect, device number 52 04:03:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x0, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:54 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) 04:03:54 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000001300), &(0x7f0000001340)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002a80)=ANY=[]) 04:03:54 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/class/nvme-generic', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f0000000580)={0x0, 0xf9}, 0x20) 04:03:54 executing program 0: faccessat(0xffffffffffffff9c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:03:54 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 04:03:54 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002b80)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000002cc0), 0x0, &(0x7f0000002d00)={[{@hide}, {@utf8}], [{@uid_gt={'uid>', 0xee01}}]}) 04:03:54 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) 04:03:54 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x7f, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x510, 0x110, 0x110, 0x2f8, 0x428, 0x428, 0x428, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@random="3edc379a2c0f"}, {@mac=@random="a39c6e4c2305", {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'caif0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @loopback, @local}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:init_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "fcea489c1f3e61be00d93dd4596b65c00bb288146365f18ffec16c1c6b1d03b8decb20b6e4fb168b81f1c691cbdd52f8b73ac5a1523076d7339c8520e9659890"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x560) syz_open_dev$usbmon(&(0x7f0000000680), 0x5, 0x200) 04:03:54 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="a8e30f63", 0x4}], 0x0, 0x0) 04:03:54 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0) 04:03:54 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x121cf, &(0x7f0000001640)=[{&(0x7f00000005c0)="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", 0x1f7, 0x9}], 0x0, 0x0) 04:03:57 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0x0, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:03:57 executing program 5: syz_mount_image$nfs(&(0x7f0000000100), 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=')', 0x1}], 0x0, &(0x7f00000002c0)) 04:03:57 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 04:03:57 executing program 4: r0 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) r1 = dup(r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) 04:03:57 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000003070000000000000c240200e9fffff5ffffffff09240300000000050245240505"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @string={0x4, 0x3, "2ac6"}}}, 0x0) 04:03:57 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x121cf, &(0x7f0000001640)=[{&(0x7f00000005c0)="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", 0x1f7, 0x9}], 0x0, 0x0) 04:03:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 04:03:57 executing program 5: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000680), 0x5, 0x200) [ 1106.562465][ T9092] usb 1-1: new high-speed USB device number 71 using dummy_hcd 04:03:57 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x1}) 04:03:58 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000600)=""/183, 0xb7) 04:03:58 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 1106.923259][ T9092] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.933825][ T9092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.052494][ T9092] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1107.062185][ T9092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1107.070344][ T9092] usb 1-1: SerialNumber: syz 04:03:58 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9}) [ 1107.420646][ T9092] usb 1-1: 0:2 : does not exist [ 1107.848292][ T9092] usb 1-1: USB disconnect, device number 71 04:04:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0x0, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="75a9c15f786c61cad13be02284"]) 04:04:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8940, 0x0) 04:04:00 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x121cf, &(0x7f0000001640)=[{&(0x7f00000005c0)="3a090742aaeeb91e5ce43aa8de10ed179ee9c94844230ed36709acf4b7679c46dee12271f446b0e86df700f5ba3be1f8edfd7f3f440b0ee0a0e574add682a8a10d03670d626aa40091c8f19a7b4896f09bffe3b0f15fb89c3830904a1c7ad745da80ee0c73eba5710ecd725129d250a33c00f8062a6fb554651218277a487fa552e4b55a94fb10a979ea66ac37ab7c17554cb880839112d3fb70eba9f47c35073ffd38638451831d7a1475f1b25b4a2734a478d165e5c6f7278b3496921806248cc878fb52902061e8dc80d87ff03d299adc4f7241ddd9ebf58e173a895af16a8479f25631d7487fcbab0b2e46d9a54dedcf729c7de77bc8117eda3e851c1763d19b75299af0340d85c7d61021a8314d1dab459efcde400a083c34b5ab7c98dfceddeda30ebefa2f182ddb711fbab83435b0ab926a79d8d5bca9bd6561c205e3e9c72166486cb5dff1fc8c8765d573e2d11511e9f43de92b7785fb338f438e0df70274be22e62c1f8d11c060ba990e4abbab2633316a8068b2348daf874e0bd3e7d06b351802c0f2e7e9d01bf8dbf3b76fdae07244b7eccd87a35ae3a26d98db5d330c99dac7d596c6e787d2e16ec7fcf1ec6a1f8d34dec0869419dc6d97d3329f7d66717800caee5667c3e599d9f452f83bdea930332fb793fa85fbf24fbf7768957506edac3b0d42beabc1f7864037e59012ddf084de", 0x1f7, 0x9}], 0x0, 0x0) 04:04:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:00 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0xd155, 0x80040) 04:04:00 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000240)='nv\x00', 0x3) 04:04:00 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x24cc9c10}, 0x0) 04:04:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5404, 0x0) 04:04:01 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x24cc9c10}, 0x0) 04:04:01 executing program 0: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000100)) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x327, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{}, 0x0, 0x0, 0x120}) 04:04:01 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000380)=@raw=[@alu], &(0x7f00000003c0)='GPL\x00', 0x7, 0x87, &(0x7f0000000400)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:04:03 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x24cc9c10}, 0x0) 04:04:03 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:03 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 04:04:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 04:04:03 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x121cf, &(0x7f0000001640)=[{&(0x7f00000005c0)="3a090742aaeeb91e5ce43aa8de10ed179ee9c94844230ed36709acf4b7679c46dee12271f446b0e86df700f5ba3be1f8edfd7f3f440b0ee0a0e574add682a8a10d03670d626aa40091c8f19a7b4896f09bffe3b0f15fb89c3830904a1c7ad745da80ee0c73eba5710ecd725129d250a33c00f8062a6fb554651218277a487fa552e4b55a94fb10a979ea66ac37ab7c17554cb880839112d3fb70eba9f47c35073ffd38638451831d7a1475f1b25b4a2734a478d165e5c6f7278b3496921806248cc878fb52902061e8dc80d87ff03d299adc4f7241ddd9ebf58e173a895af16a8479f25631d7487fcbab0b2e46d9a54dedcf729c7de77bc8117eda3e851c1763d19b75299af0340d85c7d61021a8314d1dab459efcde400a083c34b5ab7c98dfceddeda30ebefa2f182ddb711fbab83435b0ab926a79d8d5bca9bd6561c205e3e9c72166486cb5dff1fc8c8765d573e2d11511e9f43de92b7785fb338f438e0df70274be22e62c1f8d11c060ba990e4abbab2633316a8068b2348daf874e0bd3e7d06b351802c0f2e7e9d01bf8dbf3b76fdae07244b7eccd87a35ae3a26d98db5d330c99dac7d596c6e787d2e16ec7fcf1ec6a1f8d34dec0869419dc6d97d3329f7d66717800caee5667c3e599d9f452f83bdea930332fb793fa85fbf24fbf7768957506edac3b0d42beabc1f7864037e59012ddf084de", 0x1f7, 0x9}], 0x0, 0x0) 04:04:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0x0, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:03 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x24cc9c10}, 0x0) 04:04:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1261, 0x0) 04:04:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000080)="75326aec53599f52714c0e3b239539b6", 0x10) 04:04:04 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:04:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x8c000000}, 0x0) 04:04:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) 04:04:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2a502) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 04:04:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000100)) 04:04:07 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xfffffffffffffff9}) 04:04:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x300}, 0x0) 04:04:07 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 04:04:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:07 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9}) 04:04:07 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000001400)) 04:04:07 executing program 4: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001000)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)) 04:04:07 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) [ 1116.262162][ T9091] usb 2-1: new high-speed USB device number 53 using dummy_hcd 04:04:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1262, 0x0) 04:04:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x540f, 0x0) [ 1116.452663][ T9091] usb 2-1: device descriptor read/64, error 18 [ 1116.722822][ T9091] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1116.912249][ T9091] usb 2-1: device descriptor read/64, error 18 [ 1117.032463][ T9091] usb usb2-port1: attempt power cycle [ 1117.442090][ T9091] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1117.612334][ T9091] usb 2-1: device descriptor read/8, error -61 [ 1117.882107][ T9091] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1118.052396][ T9091] usb 2-1: device descriptor read/8, error -61 [ 1118.172474][ T9091] usb usb2-port1: unable to enumerate USB device 04:04:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:10 executing program 4: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x40045564) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @network_terminal={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xef, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 04:04:10 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) 04:04:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5409, &(0x7f0000000080)) 04:04:10 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0xa5694b724ee3386}) 04:04:10 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x5a, 0x0, 0x4}, 0xc) 04:04:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 1119.542257][ T3561] usb 5-1: new high-speed USB device number 24 using dummy_hcd 04:04:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454ca, 0x0) [ 1119.582772][ T9092] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1119.590738][ T9091] usb 3-1: new high-speed USB device number 22 using dummy_hcd 04:04:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000003900)) [ 1119.772151][ T9092] usb 2-1: device descriptor read/64, error 18 [ 1119.832650][ T9091] usb 3-1: Using ep0 maxpacket: 32 [ 1119.832660][ T3561] usb 5-1: Using ep0 maxpacket: 32 [ 1119.873640][ T9120] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1119.905119][T15175] FAT-fs (loop5): bogus number of reserved sectors [ 1119.912932][T15175] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1119.962798][ T9091] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.962914][ T3561] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.974134][ T9091] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1119.985211][ T3561] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1119.985360][ T3561] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1119.995991][ T9091] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1119.996134][ T9091] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1119.996250][ T9091] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1120.047864][ T3561] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1120.064411][ T9092] usb 2-1: new high-speed USB device number 58 using dummy_hcd 04:04:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000003900)) [ 1120.206306][ T9120] usb 1-1: Using ep0 maxpacket: 8 [ 1120.263101][ T9091] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.272519][ T9091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.280683][ T9091] usb 3-1: Product: syz [ 1120.285288][ T9091] usb 3-1: Manufacturer: syz [ 1120.290021][ T9091] usb 3-1: SerialNumber: syz [ 1120.296415][ T9092] usb 2-1: device descriptor read/64, error 18 [ 1120.334549][T15177] FAT-fs (loop5): bogus number of reserved sectors [ 1120.341347][T15177] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1120.354204][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.365842][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.375990][ T9120] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1120.386180][ T9120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1120.396245][ T9120] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1120.408286][ T9120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1120.425024][ T9092] usb usb2-port1: attempt power cycle [ 1120.462891][ T3561] usb 5-1: string descriptor 0 read error: -22 [ 1120.469390][ T3561] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.478776][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:04:11 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0, 0x0) [ 1120.593326][ T9091] cdc_ncm 3-1:1.0: bind() failure [ 1120.608301][ T9091] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1120.615364][ T9091] cdc_ncm 3-1:1.1: bind() failure [ 1120.642481][ T9120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.652190][ T9120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.660355][ T9120] usb 1-1: Product: syz [ 1120.665137][ T9120] usb 1-1: Manufacturer: syz [ 1120.669876][ T9120] usb 1-1: SerialNumber: syz [ 1120.750911][ T9091] usb 3-1: USB disconnect, device number 22 [ 1120.782564][ T3561] cdc_ncm 5-1:1.0: bind() failure [ 1120.808672][ T3561] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1120.818839][ T3561] cdc_ncm 5-1:1.1: bind() failure [ 1120.855212][ T3561] usb 5-1: USB disconnect, device number 24 [ 1120.863214][ T9092] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1120.972822][ T9120] cdc_ncm 1-1:1.0: bind() failure [ 1120.987390][ T9120] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1120.994570][ T9120] cdc_ncm 1-1:1.1: bind() failure [ 1121.029625][ T9120] usb 1-1: USB disconnect, device number 72 [ 1121.033492][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1121.312678][ T9092] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1121.482742][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1121.602570][ T9092] usb usb2-port1: unable to enumerate USB device 04:04:13 executing program 2: openat$vcs(0xffffffffffffff9c, 0x0, 0x49a100, 0x0) 04:04:13 executing program 5: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:04:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 04:04:13 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:04:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:13 executing program 4: mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x7c54, &(0x7f00000004c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 04:04:13 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) 04:04:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000016c0)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="14000000840000002c0000008400000065a758b341b43ea098cc"], 0xe0}, 0x0) [ 1122.772798][ T9092] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1122.782960][T12911] usb 1-1: new high-speed USB device number 73 using dummy_hcd 04:04:14 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x50) [ 1122.962259][ T9092] usb 2-1: device descriptor read/64, error 18 04:04:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc, 0x1}, 0x14) 04:04:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) listen(r0, 0x0) [ 1123.023523][T12911] usb 1-1: Using ep0 maxpacket: 8 [ 1123.143125][T12911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.154469][T12911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.165404][T12911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1123.175641][T12911] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1123.185657][T12911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1123.195558][T12911] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 04:04:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) [ 1123.282060][ T9092] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1123.472868][ T9092] usb 2-1: device descriptor read/64, error 18 [ 1123.523389][T12911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.533074][T12911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.541241][T12911] usb 1-1: Product: syz [ 1123.545757][T12911] usb 1-1: Manufacturer: syz [ 1123.550498][T12911] usb 1-1: SerialNumber: syz [ 1123.593818][ T9092] usb usb2-port1: attempt power cycle [ 1123.933032][T12911] cdc_ncm 1-1:1.0: bind() failure [ 1123.946481][T12911] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1123.953594][T12911] cdc_ncm 1-1:1.1: bind() failure [ 1123.983293][T12911] usb 1-1: USB disconnect, device number 73 [ 1124.042156][ T9092] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1124.212282][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1124.482473][ T9092] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1124.652666][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1124.772612][ T9092] usb usb2-port1: unable to enumerate USB device 04:04:16 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000009c0), 0x4) 04:04:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 04:04:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:16 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:04:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), 0x98) 04:04:16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={0x0, 0x8001}, 0x8) 04:04:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000300)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="01003b7d", @ANYRES32=0x0], &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x14) 04:04:17 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) [ 1126.023020][ T9092] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1126.034523][ T9120] usb 1-1: new high-speed USB device number 74 using dummy_hcd 04:04:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x98) [ 1126.212148][ T9092] usb 2-1: device descriptor read/64, error 18 [ 1126.292167][ T9120] usb 1-1: Using ep0 maxpacket: 8 04:04:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) [ 1126.447352][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.458744][ T9120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.469231][ T9120] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1126.479225][ T9120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1126.482387][ T9092] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1126.489271][ T9120] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1126.506695][ T9120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 04:04:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000140), &(0x7f0000000180)=0x8) 04:04:17 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) [ 1126.692116][ T9092] usb 2-1: device descriptor read/64, error 18 [ 1126.812797][ T9092] usb usb2-port1: attempt power cycle [ 1126.862975][ T9120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1126.872387][ T9120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.880889][ T9120] usb 1-1: Product: syz [ 1126.885325][ T9120] usb 1-1: Manufacturer: syz [ 1126.890069][ T9120] usb 1-1: SerialNumber: syz [ 1127.223044][ T9092] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1127.242795][ T9120] cdc_ncm 1-1:1.0: bind() failure [ 1127.256519][ T9120] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1127.263589][ T9120] cdc_ncm 1-1:1.1: bind() failure [ 1127.291112][ T9120] usb 1-1: USB disconnect, device number 74 [ 1127.392744][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1127.662132][ T9092] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1127.832355][ T9092] usb 2-1: device descriptor read/8, error -61 [ 1127.955165][ T9092] usb usb2-port1: unable to enumerate USB device 04:04:20 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 04:04:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@sndrcv={0x2c}], 0x2c}, 0x0) 04:04:20 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000840)="87", 0x1, 0x188, &(0x7f0000000940)={0x1c, 0x1c, 0x2}, 0x1c) 04:04:20 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:04:20 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1d}, 0x10) 04:04:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)=0x8) 04:04:20 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x10}, 0x98) [ 1129.292420][ T9120] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1129.322739][ T3561] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1129.378771][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.385475][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 04:04:20 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000840)="87", 0x1, 0x0, &(0x7f0000000940)={0x1c, 0x1c, 0x2}, 0x1c) 04:04:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001780)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), &(0x7f0000000840)=0x8) [ 1129.483325][ T9120] usb 2-1: device descriptor read/64, error 18 [ 1129.572014][ T3561] usb 1-1: Using ep0 maxpacket: 8 [ 1129.692410][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.703899][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.714176][ T3561] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1129.726314][ T3561] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1129.736694][ T3561] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1129.746586][ T3561] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1129.758281][ T9120] usb 2-1: new high-speed USB device number 70 using dummy_hcd 04:04:21 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket(0x1c, 0x10000001, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c) [ 1129.933667][ T3561] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1129.943195][ T3561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.951343][ T3561] usb 1-1: Product: syz [ 1129.955887][ T3561] usb 1-1: Manufacturer: syz [ 1129.960662][ T3561] usb 1-1: SerialNumber: syz [ 1129.966979][ T9120] usb 2-1: device descriptor read/64, error 18 [ 1130.105399][ T9120] usb usb2-port1: attempt power cycle [ 1130.262557][ T3561] cdc_ncm 1-1:1.0: bind() failure [ 1130.277351][ T3561] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1130.284480][ T3561] cdc_ncm 1-1:1.1: bind() failure [ 1130.314758][ T3561] usb 1-1: USB disconnect, device number 75 [ 1130.532033][ T9120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1130.712333][ T9120] usb 2-1: device descriptor read/8, error -61 [ 1130.982194][ T9120] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1131.162289][ T9120] usb 2-1: device descriptor read/8, error -61 [ 1131.282678][ T9120] usb usb2-port1: unable to enumerate USB device 04:04:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:23 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000640), 0x8) 04:04:23 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000080)='T', 0x1, 0x20104, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) 04:04:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0}, 0x0) 04:04:23 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x8) 04:04:23 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:23 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) [ 1132.622023][ T9091] usb 2-1: new high-speed USB device number 73 using dummy_hcd 04:04:23 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 04:04:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x84}, 0x98) 04:04:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="b9", 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}], 0x1c}, 0x0) [ 1132.812709][ T9091] usb 2-1: device descriptor read/64, error 18 04:04:24 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0xa}, 0xa) 04:04:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x1ff, 0x0, 0x6}, 0x8) [ 1133.092238][ T9091] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1133.283057][ T9091] usb 2-1: device descriptor read/64, error 18 [ 1133.403191][ T9091] usb usb2-port1: attempt power cycle [ 1133.822128][ T9091] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1133.992187][ T9091] usb 2-1: device descriptor read/8, error -61 [ 1134.262103][ T9091] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1134.432550][ T9091] usb 2-1: device descriptor read/8, error -61 [ 1134.552523][ T9091] usb usb2-port1: unable to enumerate USB device 04:04:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 04:04:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@sndrcv={0x2c}], 0x2c}, 0x85) 04:04:26 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c, 0x3}, 0x1c) 04:04:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 04:04:26 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@init={0x14}, @sndrcv={0x2c}, @authinfo={0x10}, @dstaddrv4={0x10, 0x84, 0x9, @multicast2}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}, @init={0x14}, @init={0x14}, @authinfo={0x10}], 0xb4}, 0x0) 04:04:26 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x8b41, 0x10}, 0x98) 04:04:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000100)={0x0, 0x2, "c4e2"}, &(0x7f0000000040)=0xa) 04:04:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001780)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1}, 0x0) [ 1135.902836][ T9091] usb 2-1: new high-speed USB device number 77 using dummy_hcd 04:04:27 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40002) 04:04:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000840), &(0x7f0000000180)=0x98) [ 1136.262472][ T9091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.273850][ T9091] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1136.283192][ T9091] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1136.533182][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.542604][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.550749][ T9091] usb 2-1: Product: syz [ 1136.555195][ T9091] usb 2-1: Manufacturer: syz [ 1136.559984][ T9091] usb 2-1: SerialNumber: syz [ 1136.646134][ T9091] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1136.653212][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1138.562997][ T9091] usb 2-1: USB disconnect, device number 77 04:04:29 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:29 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) 04:04:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 04:04:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) 04:04:29 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10}, 0x10) 04:04:29 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@dstaddrv6={0x1c, 0x84, 0xa, @loopback}, @init={0x14}, @sndinfo={0x1c}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}, @sndrcv={0x2c}, @prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}], 0xb8}, 0x0) 04:04:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001cc0)='x', 0x1}], 0x1}, 0x0) 04:04:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x0, 0x1, "d0"}, 0x9) 04:04:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@init={0x14}, @sndrcv={0x2c}, @authinfo={0x10}, @dstaddrv4={0x10, 0x84, 0x9, @multicast2}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}, @authinfo={0x10}, @init={0x14}, @authinfo={0x10}], 0xb0}, 0x0) [ 1139.123048][ T9120] usb 2-1: new high-speed USB device number 78 using dummy_hcd 04:04:30 executing program 5: open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 04:04:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) [ 1139.492887][ T9120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.503350][ T9120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1139.512592][ T9120] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1139.782983][ T9120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.792468][ T9120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.800642][ T9120] usb 2-1: Product: syz [ 1139.805079][ T9120] usb 2-1: Manufacturer: syz [ 1139.809811][ T9120] usb 2-1: SerialNumber: syz [ 1139.895753][ T9120] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1139.902907][ T9120] cdc_ncm 2-1:1.0: bind() failure [ 1141.828054][ T9120] usb 2-1: USB disconnect, device number 78 04:04:33 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000200)=0x1ff, 0x4) 04:04:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 04:04:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/176, 0x2e, 0xb0, 0x1}, 0x20) 04:04:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000000)="cbcfaac1b5da56493f82af7d6fe3", 0xe, 0x0, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80) 04:04:33 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:33 executing program 0: pselect6(0x3, &(0x7f0000000000)={0x202}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000240), 0x8}) 04:04:33 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='($\x00', 0x3) 04:04:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x3}, 0x14}}, 0x0) 04:04:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000080)=""/133, 0x3e, 0x85, 0x1}, 0x20) [ 1142.432679][ T9120] usb 2-1: new high-speed USB device number 79 using dummy_hcd 04:04:33 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4564de6980d15b413314c0846e91b6acb1254dbc24a927352851356a52f8786cbe28259043f71539bf61ecd26511b0da9298aa4ae1ce7357159de67cc47cd7", 0x29}, 0x60) 04:04:33 executing program 5: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/193, 0x0, 0xc1}, 0x20) [ 1142.805242][ T9120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.815782][ T9120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.827230][ T9120] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1143.072569][ T9120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.081949][ T9120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.090097][ T9120] usb 2-1: Product: syz [ 1143.094613][ T9120] usb 2-1: Manufacturer: syz [ 1143.099325][ T9120] usb 2-1: SerialNumber: syz [ 1143.145686][ T9120] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1143.152801][ T9120] cdc_ncm 2-1:1.0: bind() failure [ 1145.117685][ T9091] usb 2-1: USB disconnect, device number 79 04:04:36 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3094c0, 0x0) 04:04:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 04:04:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 04:04:36 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) 04:04:36 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:36 executing program 0: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/193, 0x0, 0xc1}, 0x20) 04:04:36 executing program 5: bpf$BPF_BTF_LOAD(0x18, 0x0, 0x0) 04:04:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 04:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x1, 0x6, 0x101}, 0x14}}, 0x0) [ 1145.682810][ T9091] usb 2-1: new high-speed USB device number 80 using dummy_hcd 04:04:36 executing program 0: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/193, 0x0, 0xc1}, 0x20) 04:04:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 1146.042232][ T9091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.053184][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.247659][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.257127][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.265696][ T9091] usb 2-1: Product: syz [ 1146.269996][ T9091] usb 2-1: Manufacturer: syz [ 1146.274854][ T9091] usb 2-1: SerialNumber: syz [ 1146.335984][ T9091] usb 2-1: selecting invalid altsetting 1 [ 1146.762181][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1146.768342][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1148.398090][ T9120] usb 2-1: USB disconnect, device number 80 04:04:39 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/193, 0x0, 0xc1, 0x1000000}, 0x20) 04:04:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000080)=""/133, 0x32, 0x85, 0x1}, 0x20) 04:04:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='P', 0x1, 0x0, 0x0, 0x0) 04:04:39 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}], 0x1, 0x0) 04:04:39 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14"], 0x74c}}, 0x0) 04:04:39 executing program 0: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/193, 0x0, 0xc1}, 0x20) 04:04:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) 04:04:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000180)=""/176, 0x3c, 0xb0, 0x1}, 0x20) [ 1148.962300][ T9091] usb 2-1: new high-speed USB device number 81 using dummy_hcd 04:04:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x74c}}, 0x0) 04:04:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mq_open(&(0x7f0000001440)='.(]}\x00', 0x0, 0x0, 0x0) [ 1149.333919][ T9091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.344691][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.368512][T15465] netlink: 816 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1149.543148][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.552623][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.560777][ T9091] usb 2-1: Product: syz [ 1149.565294][ T9091] usb 2-1: Manufacturer: syz [ 1149.570017][ T9091] usb 2-1: SerialNumber: syz [ 1149.656006][ T9091] usb 2-1: selecting invalid altsetting 1 [ 1150.082310][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1150.088571][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1151.668066][ T9120] usb 2-1: USB disconnect, device number 81 04:04:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:43 executing program 5: syz_open_dev$vcsn(&(0x7f0000000080), 0xff, 0x101440) 04:04:43 executing program 0: r0 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 04:04:43 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000000)) 04:04:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x23f, 0x0, 0x0, {}, [{@pci={{0xfffffe52}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) 04:04:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:43 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) syz_read_part_table(0x3, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="02c684cdf6dc00988b136fb740a7b9605232e7ccf76312f000aca1c4921a2500d9caa447c63f82f3af6f8f40fd006ed75f4f", 0x32, 0x8}]) [ 1151.933235][T15477] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 04:04:43 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x8, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 04:04:43 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1152.174713][ T9091] usb 2-1: new high-speed USB device number 82 using dummy_hcd 04:04:43 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) 04:04:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 04:04:43 executing program 4: openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 1152.553254][ T9091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.563701][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.793104][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.802981][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.811214][ T9091] usb 2-1: Product: syz [ 1152.815759][ T9091] usb 2-1: Manufacturer: syz [ 1152.820495][ T9091] usb 2-1: SerialNumber: syz [ 1152.945535][ T9091] usb 2-1: selecting invalid altsetting 1 [ 1153.382135][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1153.388456][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1154.880413][ T9120] usb 2-1: USB disconnect, device number 82 04:04:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x2, &(0x7f0000000d40)=@raw=[@cb_func], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0xa, &(0x7f0000000dc0)=""/10, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:04:46 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 04:04:46 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0}], 0x0, 0x0) 04:04:46 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="0a67047eb415c55cbf911a815d353187f07d0e6638f01fa128a79c179f5b9e6dfb70ffb5", 0x24}], 0x0, 0x0) 04:04:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:46 executing program 0: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000240)) 04:04:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 04:04:46 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)="a0", 0x1}, {&(0x7f00000000c0)="b3", 0x1, 0x6518}], 0x0, 0x0) 04:04:46 executing program 4: setitimer(0x1, &(0x7f0000000100)={{0xe887}, {0x6}}, 0x0) [ 1155.412423][ T3561] usb 2-1: new high-speed USB device number 83 using dummy_hcd 04:04:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 1155.638322][T15522] loop5: detected capacity change from 0 to 101 04:04:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) [ 1155.812649][ T3561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.823046][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.836357][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1155.847420][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.153048][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.162365][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.170617][ T3561] usb 2-1: Product: syz [ 1156.175028][ T3561] usb 2-1: Manufacturer: syz [ 1156.179746][ T3561] usb 2-1: SerialNumber: syz [ 1157.392498][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:04:49 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000080)=0x98) 04:04:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)="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", 0x801}, {0x0}, {0x0}], 0x3, &(0x7f00000034c0)=[@cred], 0x60}, 0x20004) 04:04:49 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x98) 04:04:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000000)={@loopback, @remote={0xac, 0x14, 0x0}}, 0xc) 04:04:49 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000200)=0x98) 04:04:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x28, &(0x7f0000000080), &(0x7f00000002c0)=0x4) 04:04:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f00000000c0)={@multicast1}, 0xa) 04:04:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[{0xc}, {0xc}], 0x18}, 0x0) [ 1158.666299][ T3561] usb 2-1: USB disconnect, device number 83 04:04:50 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x56, 0x0, &(0x7f0000000480)={0xb, 0x2}, 0xfffffffffffffccf) 04:04:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 04:04:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x48, &(0x7f0000000080)="64ff7e15cb5141b37773f738", 0xc) 04:04:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 1159.264042][ T9091] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1159.644058][ T9091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.655051][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.666418][ T9091] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1159.677282][ T9091] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.852647][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.862230][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.870384][ T9091] usb 2-1: Product: syz [ 1159.874853][ T9091] usb 2-1: Manufacturer: syz [ 1159.879587][ T9091] usb 2-1: SerialNumber: syz [ 1161.022331][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:04:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10, 0x2}, 0x10) 04:04:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000080), 0x8) 04:04:53 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)='7', 0x1}], 0x1, &(0x7f0000000680)=[@init={0x14}], 0x14}, 0x0) 04:04:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x2, "ed0f"}, &(0x7f0000000080)=0xa) 04:04:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 04:04:53 executing program 4: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 1162.254887][ T9091] usb 2-1: USB disconnect, device number 84 04:04:53 executing program 5: getresuid(0x0, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 04:04:53 executing program 2: socket$inet6(0x1c, 0x3, 0x0) 04:04:53 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:04:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x42, 0x0, 0x0) [ 1162.912909][ T3561] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1163.314711][ T3561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.325161][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.336317][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1163.346969][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1163.532388][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.541643][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.550051][ T3561] usb 2-1: Product: syz [ 1163.554419][ T3561] usb 2-1: Manufacturer: syz [ 1163.559143][ T3561] usb 2-1: SerialNumber: syz 04:04:55 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000040)="138e3ee71b795c8c5d1f1edc00", 0xd) 04:04:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000040)="5a132d7b72ab0c22000add01", 0xc) [ 1164.704064][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:04:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:04:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 04:04:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x1) 04:04:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000000c0)="c7937defa81fa5c91209faf1d6a9b9e710c17eb3cbdd9838392ccd26926189dd27480502cd3ba423ecf4b521268ef18f80f7d04f4f4e24fc8938d773079c389619798a8bae5f894958b2c22b0de450fc68d60b2ebd722b72e3553e0fa87fff53a71c2a75c6f40b3fd5ac2092d167a56ce3b6ada9018b582b306dc1dbbdc453ebb115892cf4", 0x85, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 04:04:57 executing program 5: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x2) [ 1165.920660][ T3561] usb 2-1: USB disconnect, device number 85 04:04:57 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 04:04:57 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x800) 04:04:57 executing program 0: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x232dfa6350dc47af) 04:04:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x104, 0x0, 0x0) [ 1166.492973][ T9092] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1166.852639][ T9092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.863099][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.874312][ T9092] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.042419][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1167.052027][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.060170][ T9092] usb 2-1: Product: syz [ 1167.064782][ T9092] usb 2-1: Manufacturer: syz [ 1167.069505][ T9092] usb 2-1: SerialNumber: syz 04:04:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:04:59 executing program 0: r0 = epoll_create(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 04:04:59 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) [ 1168.222450][ T9092] cdc_ncm 2-1:1.0: bind() failure 04:05:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:00 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r1, &(0x7f0000000100)) 04:05:00 executing program 5: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) 04:05:00 executing program 4: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0xffffffffffffffc6) 04:05:00 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fstat(r0, &(0x7f0000003340)) [ 1169.455777][ T9092] usb 2-1: USB disconnect, device number 86 04:05:00 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0xee01) 04:05:00 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1c0, 0x12) 04:05:00 executing program 5: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) 04:05:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x200, 0x4, 0x10}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) [ 1170.003772][ T3561] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1170.412458][ T3561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.422950][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.434206][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.612441][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1170.621696][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.629996][ T3561] usb 2-1: Product: syz [ 1170.634504][ T3561] usb 2-1: Manufacturer: syz [ 1170.639236][ T3561] usb 2-1: SerialNumber: syz 04:05:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:02 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0xee01) 04:05:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000042) [ 1171.752452][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:04 executing program 5: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) 04:05:04 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xfd3678f9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:05:04 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 04:05:04 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0xee01) [ 1172.979279][ T3561] usb 2-1: USB disconnect, device number 87 04:05:04 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0xee01) 04:05:04 executing program 5: mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) 04:05:04 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000100)) 04:05:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="bc56cbabb1eeb8ece6a726014691885b82c40078d4bab7dbee796c54b786eca3dd3516c6590500903c89aa9dce58df252ba2f1fce8348d1aef7af575cca5596eacfaf03aeb7ad5253a73218ddf66a34de25d275ea1469fe969a8a8c2cdc4ef94a56afc9b45df63361b93d1561da22582140f14848a2b454745b2adfcdb57d77cd4ab7dbbffd883cdc74d51de81d3ee56479cbec7fca8266ba9dc818a344b29548f64401bf3fbba52", 0xa8}, {&(0x7f0000000440)="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", 0xe18}, {&(0x7f0000000100)="d2", 0x1}], 0x3}, 0x0) recvmsg(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 1173.572513][ T3561] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1173.943538][ T3561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.954043][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.967497][ T3561] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1174.152848][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.162286][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.170444][ T3561] usb 2-1: Product: syz [ 1174.174847][ T3561] usb 2-1: Manufacturer: syz [ 1174.179569][ T3561] usb 2-1: SerialNumber: syz 04:05:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:05 executing program 5: socketpair(0x2, 0x2, 0x88, &(0x7f00000004c0)) 04:05:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x6, 0x2, [], "6fdf"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "51aa"}]}}, &(0x7f0000000900)=""/4096, 0x36, 0x1000, 0x1}, 0x20) [ 1175.342419][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 04:05:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:05:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') 04:05:07 executing program 5: poll(0x0, 0x0, 0xfffffff9) [ 1176.585215][ T9091] usb 2-1: USB disconnect, device number 88 04:05:07 executing program 2: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0xfc010551a3b0ee3e) 04:05:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000000c0), &(0x7f0000000080)=0x10) 04:05:08 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="9e42e176e31458dc8c5845f20d285df93d8e7d692a9e0411398d0b3d218fd85918186609b54206d0d87da623bfa4929c29e149c53bd23aad0e6f3d59d84db3", 0x2}, {&(0x7f0000000280)="89d916fe8283aa5ee5c67f6a86d9acb9ed50868b8a4217d708119832593a591bb4c06c1a9cab4bf7ff2df4490955e8d1a740206b7ed632701982c76978438448c5402bed577ebf2db159630c09f9c9d28cc3a0b889c8ebe79403ae8fd8e2941485cf63ca7ebec35d985e23cc6b529b05e909c9c1c20b7040a54b580feb1a39a8269cee439b87f74af69a4398756f3c9646b76382a24047560f40d951ccf635df17679757777846c25773f7aed232d952e86f966262030e1577eb9900a9b155ec53e41366397c587d3319d5aa82a85e9d3c4f873e714af67b6200"/232, 0xffffffffffffff0c}, {&(0x7f0000000200)="ffbe654a2df0b151fc5ddd905d93c07820be14279c3521b1cd42c88ce8100f6130be5c6a9f46e70023ee9ea1c5a7342c3afede1558a16ab847dcafce5af6372bc76a03"}], 0x10000000000002a2) 04:05:08 executing program 2: semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, 0x0) [ 1177.252701][ T9091] usb 2-1: new high-speed USB device number 89 using dummy_hcd 04:05:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:08 executing program 0: getpgrp(0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) 04:05:08 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) close(r1) [ 1177.613079][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.624337][ T9091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1177.802490][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.812392][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.820553][ T9091] usb 2-1: Product: syz [ 1177.825013][ T9091] usb 2-1: Manufacturer: syz [ 1177.829750][ T9091] usb 2-1: SerialNumber: syz [ 1178.982188][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:11 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 04:05:11 executing program 5: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x4) 04:05:11 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4) read(r0, &(0x7f0000000000)=""/3, 0x3) 04:05:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) [ 1180.208070][ T3561] usb 2-1: USB disconnect, device number 89 04:05:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)='?', 0x1}, {&(0x7f00000001c0)="da", 0x1}], 0x2) 04:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r1) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x1158}, 0x0) 04:05:11 executing program 4: socketpair(0x2, 0x3, 0x2, &(0x7f0000000040)) 04:05:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="800000000000000013010000b9a40000bc396c20f9b83d76241084c415fce20e9ff09bee2a41abd9117f29655af165c717d837362e210ffa4fce73f72d1c178a1f237eda5cc019be62011e5cd532545051abea0c147a5d6051b105943312bb31ec55429cf3c4bd49702e3e7408f779f006a54ae69404ee4a64b2d410084b0000c80000000000000084000000380600002c35a0ea13d5f266484280ac6346e90f419a10d494533c5a81dc04b777b476e8b2dcb91aca215f233b3d6049e19e73280378444fb2dd41273a49d26533d3bd45c55e746c0ded2cccf2010e8aaed2fa90961b7743d97ad575566ce8625a22db2b73e43db5c3b8722d6347dfffd773e2c95a22fc4971bd87952f251f424adac365e6c946b5b5f335f6e32f9520464e27158214377e36f08e8533d785789ce671bdec0500cd7751354a3d8370f31bf2fa091017d891000000001010"], 0x1158}, 0x0) 04:05:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:05:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x0, 0x0, 0x0, 0x400}, 0x48) [ 1180.782613][ T3561] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1181.155274][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.166931][ T3561] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1181.342356][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1181.351598][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.359972][ T3561] usb 2-1: Product: syz [ 1181.364454][ T3561] usb 2-1: Manufacturer: syz [ 1181.369178][ T3561] usb 2-1: SerialNumber: syz [ 1182.502299][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000940)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 04:05:14 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000f80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20000f90, 0x0, 0x0, &(0x7f0000001080)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 04:05:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x22) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)='2', 0x1}], 0x1}, 0x0) 04:05:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1183.720037][ T9091] usb 2-1: USB disconnect, device number 90 04:05:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:05:15 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 04:05:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:05:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x22) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)='2', 0x1}], 0x1}, 0x0) 04:05:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 04:05:15 executing program 0: socketpair(0x10, 0x3, 0x4, &(0x7f0000000000)) 04:05:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000140)=@raw=[@call], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffddf, 0x10, 0x0}, 0x80) [ 1184.322566][ T9091] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1184.722404][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.733903][ T9091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1184.932464][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1184.941957][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.950105][ T9091] usb 2-1: Product: syz [ 1184.954541][ T9091] usb 2-1: Manufacturer: syz [ 1184.959260][ T9091] usb 2-1: SerialNumber: syz [ 1186.097143][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:18 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905820200020000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x22) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)='2', 0x1}], 0x1}, 0x0) 04:05:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000080)=@abs, 0x6e, 0x0}, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="d9", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x1158}, 0x0) 04:05:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0xfffffffffffffffe}], 0x1}, 0x0) 04:05:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1187.321133][ T3561] usb 2-1: USB disconnect, device number 91 04:05:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:05:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) close(r0) close(r1) 04:05:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x22) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)='2', 0x1}], 0x1}, 0x0) 04:05:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)='2', 0x1}], 0x1}, 0x0) 04:05:19 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 04:05:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000480)=""/4096, 0x26, 0x1000, 0x2}, 0x20) [ 1187.952237][ T9091] usb 2-1: new high-speed USB device number 92 using dummy_hcd 04:05:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x9, 0x1, &(0x7f0000000100)=@raw=[@call], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1188.333287][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.344983][ T9091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1188.355039][ T9091] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1188.542806][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1188.552116][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.560252][ T9091] usb 2-1: Product: syz [ 1188.564633][ T9091] usb 2-1: Manufacturer: syz [ 1188.569363][ T9091] usb 2-1: SerialNumber: syz [ 1189.732459][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1190.818224][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.824982][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 04:05:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905820200020000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40) 04:05:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045006, &(0x7f00000003c0)=0x6) 04:05:22 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0x11, 0x0, 0x0) 04:05:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local}], 0xf) 04:05:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1190.961962][ T9091] usb 2-1: USB disconnect, device number 92 04:05:22 executing program 5: getrandom(&(0x7f0000000000)=""/4096, 0xcab, 0x0) 04:05:22 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/clocksource', 0x7f3c01, 0x0) 04:05:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000100)) 04:05:22 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 04:05:22 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0x6, 0x0, 0x0) 04:05:22 executing program 2: fanotify_mark(0xffffffffffffffff, 0x29, 0x10, 0xffffffffffffffff, 0x0) [ 1191.582854][ T9091] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1191.972512][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.984604][ T9091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1191.994780][ T9091] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1192.183091][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.192425][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.200581][ T9091] usb 2-1: Product: syz [ 1192.205240][ T9091] usb 2-1: Manufacturer: syz [ 1192.209953][ T9091] usb 2-1: SerialNumber: syz [ 1193.322357][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:25 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d00000905820200020000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:25 executing program 0: socket$inet6_sctp(0xa, 0x5466c97c56826154, 0x84) 04:05:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x71, 0x0, 0x0) 04:05:25 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000200)) 04:05:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, 0x0, 0x0) 04:05:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1194.573355][ T3561] usb 2-1: USB disconnect, device number 93 04:05:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x5460, 0x0) 04:05:25 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x40) 04:05:25 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0xe00) 04:05:25 executing program 5: syz_mount_image$affs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x7ff, 0x1}], 0x0, &(0x7f0000001300)={[{'\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}) 04:05:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/82, 0xfffffffffffffef9) [ 1195.069097][T15850] loop5: detected capacity change from 0 to 4 [ 1195.130501][T15850] affs: No valid root block on device loop5 [ 1195.142597][ T9091] usb 2-1: new high-speed USB device number 94 using dummy_hcd 04:05:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/213, 0xd5}, 0x0) [ 1195.522536][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.534147][ T9091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1195.544133][ T9091] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1195.732460][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.742073][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.750235][ T9091] usb 2-1: Product: syz [ 1195.754710][ T9091] usb 2-1: Manufacturer: syz [ 1195.759438][ T9091] usb 2-1: SerialNumber: syz [ 1196.892464][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}, 0x0) poll(&(0x7f0000000480)=[{r0, 0x1}], 0x1, 0x0) 04:05:29 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:29 executing program 4: socketpair(0x21, 0x0, 0x54, 0x0) 04:05:29 executing program 5: syz_mount_image$affs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x7ff, 0x1}], 0x0, &(0x7f0000001300)={[{'\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}) 04:05:29 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x3}, 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, 0x0) 04:05:29 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1198.119672][ T9091] usb 2-1: USB disconnect, device number 94 04:05:29 executing program 2: syz_emit_ethernet(0x400e, &(0x7f0000000040)={@broadcast, @random="1c4b8f512aad", @val, {@generic={0x0, "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"}}}, 0x0) 04:05:29 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="f9ae09e05018", @remote, @val, {@ipv4}}, 0x0) [ 1198.254951][T15863] loop5: detected capacity change from 0 to 4 04:05:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) [ 1198.313073][T15863] affs: No valid root block on device loop5 04:05:29 executing program 5: syz_mount_image$affs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x7ff, 0x1}], 0x0, &(0x7f0000001300)={[{'\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}) 04:05:29 executing program 2: select(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 04:05:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000040), 0xc) 04:05:29 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="16", 0x1}], 0x2}, 0x0) [ 1198.792317][ T9091] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1198.939845][T15876] loop5: detected capacity change from 0 to 4 [ 1199.040904][T15876] affs: No valid root block on device loop5 [ 1199.182811][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.382619][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.391956][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.400123][ T9091] usb 2-1: Product: syz [ 1199.404889][ T9091] usb 2-1: Manufacturer: syz [ 1199.409617][ T9091] usb 2-1: SerialNumber: syz [ 1200.152353][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1200.158578][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:32 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:32 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(0x0) 04:05:32 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 04:05:32 executing program 5: syz_mount_image$affs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x7ff, 0x1}], 0x0, &(0x7f0000001300)={[{'\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}) 04:05:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="c84735cbf219603fa6f862abcdedcb2a53d03b5d1224c6f4e411d5a3ac15a6c05244a6f0003e85494982b9bbe4e317ec90a6b154f9aa2e68d0fd3def7e9ecca53d0c742948ae596b7fb6da6cc0dcadb1dc5bb2c597977e3e5390f4e9c2", 0x5d}, {&(0x7f0000000100)="a9789c8c20a2b209ecd6805222e7a122bdf1f1b79bebcba7cfe95025ebd59781d073883e", 0x24}, {&(0x7f0000000140)="a841219e4953d2ae9758bf2fbb5822472cfb05e699cf6fe11123c4e55f464c7fad9d2b96e8a69210093025c6032bc6ea9076f3d84ed7543b44c0ac71135e6e5a58da2c4c2f9f237994bd533a3805867b90dc1ab38046dcb56e877b5635871ad4bc37637ef3e1d1cd9924a360dbceaac799ef46374eca61316cee668c228d2cf6c0", 0x81}, {&(0x7f0000000200)="696b3ff02af829b7974b648bacc9928b5199", 0x12}, {&(0x7f0000000240)="eda8890108b9904c2cbdaed7e6ed68d9d5d3c1381c449ac08cbe768875c62236c81cc9f23ddf59b3eb14fb6f66b89174b83195d298dff07f73119738b7613c2990fe6604a18d45dbc5f3156410bc9844c20eab8f6bf9fec79cedf5a1b7", 0x5d}], 0x5, 0x0, 0x50}, 0x0) 04:05:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1201.371488][ T9091] usb 2-1: USB disconnect, device number 95 [ 1201.489998][T15893] loop5: detected capacity change from 0 to 4 04:05:32 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="f9ae09e05018", @remote, @val, {@ipv4}}, 0x0) 04:05:32 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0xa6a}, 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, 0x0) 04:05:32 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) [ 1201.593656][T15893] affs: No valid root block on device loop5 04:05:33 executing program 5: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x1011, 0xffffffffffffffff, 0x0) 04:05:33 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000280)) 04:05:33 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0xa6a}, 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, 0x0) [ 1202.012994][ T9091] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1202.382429][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.582395][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1202.591623][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.599909][ T9091] usb 2-1: Product: syz [ 1202.604441][ T9091] usb 2-1: Manufacturer: syz [ 1202.609175][ T9091] usb 2-1: SerialNumber: syz [ 1203.292386][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1203.298757][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:35 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:35 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 04:05:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0, 0x4f}], 0x3, 0x0, 0x100000001}, 0x0) 04:05:35 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0xa6a}, 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, 0x0) 04:05:35 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40c) 04:05:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1204.661537][ T3561] usb 2-1: USB disconnect, device number 96 04:05:36 executing program 2: select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0xa6a}, 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, 0x0) 04:05:36 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) 04:05:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 04:05:36 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40) 04:05:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa) 04:05:36 executing program 5: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)) [ 1205.313685][ T9091] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1205.722408][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.902286][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1205.913225][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.921385][ T9091] usb 2-1: Product: syz [ 1205.925993][ T9091] usb 2-1: Manufacturer: syz [ 1205.930728][ T9091] usb 2-1: SerialNumber: syz [ 1206.624703][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1206.631020][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:05:39 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:39 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="c84735cbf219603fa6f862abcdedcb2a53d03b5d1224c6f4e411d5a3ac15a6c05244a6f0003e85494982b9bbe4e317ec90a6b154f9aa2e68d0fd3def7e9ecca53d0c742948ae596b7fb6da6cc0dcadb1dc5bb2c597977e3e5390f4e9c2", 0x5d}, {&(0x7f0000000100)="a9786c73c24ea2b44bf610c115279c8c20a2b209ecd6805222e7a122bdf1f1b79bebcba7", 0x24}, {&(0x7f0000000140)="a841219e4953d2ae9758bf2fbb582247", 0x10}], 0x10000000000001d5, 0x0, 0x50}, 0x0) 04:05:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000480)=""/113, 0x71}, 0x1) 04:05:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 04:05:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgrp(0x0) fcntl$setown(r0, 0x6, r1) fcntl$setown(r0, 0x6, r1) 04:05:39 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1207.932004][ T9091] usb 2-1: USB disconnect, device number 97 04:05:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) 04:05:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891c, 0x0) 04:05:39 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x30, 0xffffffffffffffff, 0x10000000) 04:05:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891a, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:05:39 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) 04:05:39 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]}) [ 1208.573264][ T9091] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1208.982679][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.994796][ T9092] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1209.172260][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1209.182223][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.190506][ T9091] usb 2-1: Product: syz [ 1209.195373][ T9091] usb 2-1: Manufacturer: syz [ 1209.200186][ T9091] usb 2-1: SerialNumber: syz [ 1209.412389][ T9092] usb 6-1: language id specifier not provided by device, defaulting to English [ 1209.552552][ T9092] usb 6-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 1209.561985][ T9092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.570157][ T9092] usb 6-1: Product: syz [ 1209.574656][ T9092] usb 6-1: Manufacturer: syz [ 1209.579390][ T9092] usb 6-1: SerialNumber: syz [ 1209.863365][ T9092] usbhid 6-1:1.0: can't add hid device: -22 [ 1209.869656][ T9092] usbhid: probe of 6-1:1.0 failed with error -22 [ 1209.888050][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1209.894358][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1209.923068][ T9092] usb 6-1: USB disconnect, device number 29 04:05:42 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:42 executing program 2: socket$inet(0x2, 0x2, 0x11) 04:05:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r3, 0x407, 0x8000000000) dup2(r1, r2) 04:05:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891a, 0x0) 04:05:42 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$tipc(0x1e, 0x0, 0x0) 04:05:42 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1211.135592][ T3561] usb 2-1: USB disconnect, device number 98 04:05:42 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 04:05:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r3, 0x407, 0x0) dup2(r1, r2) 04:05:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 04:05:42 executing program 2: socket$inet(0x5, 0x0, 0x0) 04:05:43 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$tipc(0x1e, 0x0, 0x0) 04:05:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x203020, &(0x7f0000000340)) [ 1211.803087][ T9092] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1212.200149][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.442102][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.451458][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.459891][ T9092] usb 2-1: Product: syz [ 1212.464294][ T9092] usb 2-1: Manufacturer: syz [ 1212.469141][ T9092] usb 2-1: SerialNumber: syz [ 1213.172347][ T9092] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1213.179707][ T9092] cdc_ncm 2-1:1.0: bind() failure 04:05:45 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r3, 0x407, 0x0) dup2(r1, r2) 04:05:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 04:05:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8980, 0x0) 04:05:45 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$tipc(0x1e, 0x0, 0x0) 04:05:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1214.473730][ T3561] usb 2-1: USB disconnect, device number 99 04:05:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8955, 0x0) 04:05:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 04:05:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r3, 0x407, 0x0) dup2(r1, r2) 04:05:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a1, 0x0) 04:05:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f00000000c0)) [ 1215.073040][ T3561] usb 2-1: new high-speed USB device number 100 using dummy_hcd 04:05:46 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$tipc(0x1e, 0x0, 0x0) [ 1215.452900][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.622485][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.634060][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.642793][ T3561] usb 2-1: Product: syz [ 1215.647076][ T3561] usb 2-1: Manufacturer: syz [ 1215.651850][ T3561] usb 2-1: SerialNumber: syz [ 1216.372316][ T3561] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1216.378627][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:48 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:48 executing program 4: syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x210300) 04:05:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r3, 0x407, 0x0) dup2(r1, r2) 04:05:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000), 0x4) 04:05:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x228}}, 0x0) 04:05:48 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1217.748481][ T3561] usb 2-1: USB disconnect, device number 100 04:05:49 executing program 5: r0 = getpid() ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 04:05:49 executing program 4: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) 04:05:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8917, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:05:49 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e, &(0x7f0000000000)=0xea, 0x4) 04:05:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 04:05:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) [ 1218.342312][ T3561] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1218.732700][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.942449][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.951684][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.960020][ T3561] usb 2-1: Product: syz [ 1218.964461][ T3561] usb 2-1: Manufacturer: syz [ 1218.969200][ T3561] usb 2-1: SerialNumber: syz [ 1219.682329][ T3561] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1219.688654][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:52 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:52 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getdents64(r0, 0x0, 0x0) 04:05:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='p', 0x1}], 0x1, &(0x7f00000002c0)=[{0x10}, {0x10}, {0x10, 0x1}], 0x30}, 0x0) 04:05:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000cc0)={'ip_vti0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) 04:05:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x8000000) 04:05:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1220.944613][ T3561] usb 2-1: USB disconnect, device number 101 04:05:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009700), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r3, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r3, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x2, 0x3, 0x3, 0xc, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff0}, @generic={0x62, 0x5, 0x6, 0x2}, @alu={0x4, 0x1, 0x6, 0x7, 0x7, 0x1}], &(0x7f0000000180)='GPL\x00', 0x7, 0x3a, &(0x7f00000001c0)=""/58, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x7, 0x200, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4]}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x84}}, 0x4000080) 04:05:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 04:05:52 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 04:05:52 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@string={0x4, 0x3, '\x00*'}}, {0x6, &(0x7f0000000180)=@string={0x6, 0x3, "67a78287"}}]}) [ 1221.289558][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8953, 0x0) [ 1221.553348][ T3561] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1221.692242][ T9120] usb 5-1: new high-speed USB device number 25 using dummy_hcd 04:05:52 executing program 5: personality(0x450000b) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) [ 1221.792502][T12635] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1221.922966][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.938901][ T9120] usb 5-1: Using ep0 maxpacket: 32 [ 1222.063987][T12635] usb 3-1: Using ep0 maxpacket: 32 [ 1222.102714][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.112399][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.120651][ T3561] usb 2-1: Product: syz [ 1222.125159][ T3561] usb 2-1: Manufacturer: syz [ 1222.129904][ T3561] usb 2-1: SerialNumber: syz [ 1222.212883][T12635] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1222.332559][ T9120] usb 5-1: string descriptor 0 read error: -22 [ 1222.339156][ T9120] usb 5-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 1222.348905][ T9120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.393580][T12635] usb 3-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 1222.403062][T12635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.411226][T12635] usb 3-1: Product: syz [ 1222.415850][T12635] usb 3-1: Manufacturer: ꝧ螂 [ 1222.420839][T12635] usb 3-1: SerialNumber: syz [ 1222.435196][ T9120] usbhid 5-1:1.0: can't add hid device: -22 [ 1222.441481][ T9120] usbhid: probe of 5-1:1.0 failed with error -22 [ 1222.509910][T12635] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1222.599738][ T9091] usb 5-1: USB disconnect, device number 25 [ 1222.719287][T12635] usb 3-1: USB disconnect, device number 23 [ 1222.832535][ T3561] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1222.838766][ T3561] cdc_ncm 2-1:1.0: bind() failure 04:05:55 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:55 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x1, &(0x7f0000001c80)=[{0x0, 0x0, 0x3b9}]) 04:05:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001b80)='ns/ipc\x00') 04:05:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 04:05:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000005380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005340)={&(0x7f0000000440)={0x1e84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x1e70, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x331, 0xe, {@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x8, {0x0, 0x0, 0x0, "f930f1b51e"}}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x8, "c2ef548880ed9d58"}, {0xdd, 0xe, "26ff026c59475a0f672d213f95cf"}, {0xdd, 0xdf, "362c6ee30023f6c2af80ea9a212fa7b949643a3e761db0755d55c25d66d977a718290c1e2fc76e1fa2bd3ddb455b872ffecf80476927c228e3fab8b2e0d1f8635d5bddea3a34e2fe3cd98935facd4dbe307f32d8192777a7fbe6d8866ff519a631afdfc22d2fff6496fa9805320a457c2330db95b2b6013f20516decc25c82d7e08cf78d7ff10d1a73e57167ce3f897210a486e06b0604f304e957a58d9cc1205dd97f820cc6b486441f96f722b06ff676efbe734a85345f4e496eed2bf7427ddd81fe1e50d46830b1b5676b313ff7ad7b5e61fcb5966ce9f734e9ccb55068"}, {0xdd, 0xa4, "001b7873c92d596491d6d00ef884b19bd704f5d22036756745ada07e68c0b47a217bf89d40af877b64ea4a399bd1399280498830b9301051fbe8428b6fd722666cd7db7999f114b6213783fc12669a1ff3f9eff8fe9b039466d6aa0f5b32bd76eacb5f5d5999b851415c76917da7ccb1c902f3f611d9cdd250c0ec9f8caeb06f984d8828aad4fa316b6526d0bccf456984af8d0bb6dd47a4c526be5d93a52c91dee8bff1"}, {0xdd, 0xb9, "1a5fe71c0abab9867a76018ccae5002a0a8ca462ff42c0a41ecc2ed6159d11ebd061cb6fb766b1f19fc243fa45f7afdfd89ba483c12b7eb0b50ff0ce90aef2f91c48641bb6570c8fb7241771b3f6d697d60f7f4a1875a5c0bd4e562310b8a9e3dc607ef3c011c95dede2a859b350f64294ff113c1372de78758e6614e0169b2e70549eaed4906ab9e46bd79ae164f5f68adc240c85d6892bc863c0bbdeabf2e3c6aa6ef0d274c8923057c067edbda092d5e5348dcb098554a5"}, {0xdd, 0x81, "43817f88a0ec04aad5355b352ad031256fc587baf7e6119d0c64b4d33a94c926e9b9c15ab76d71f09459d612eaad0f6a389d0729bc8ed23e9d78d5f95188b376fc2a599a84800b81468d9174add848108119c2da70cd40b9146d18156365b0356ec921dab33f8672b0bd723fd6f7e6554ebc99f7c357d0c0895d9761d062ef72f9"}, {0xdd, 0x8, "78decdafc83d4faf"}]}}, @NL80211_ATTR_BEACON_TAIL={0x11, 0xf, [@mesh_config={0x71, 0x7}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0xad, 0xf, [@fast_bss_trans={0x37, 0xa7, {0x0, 0x5, "d033311b160423abb642854fbb212caa", "7af6e6ce4e8c821395ead556a5c9ce661e4d021fe2314a39de9e4753841df9df", "569faffc606b7b3d7fc18988042ab2be4af412ce510412f5ed4b77ac75972eed", [{0x0, 0x4, "d1141ccc"}, {0x0, 0x6, "a7474896f42a"}, {0x0, 0x28, "800e0022b6ca63287da07d59a201e57ff0fb29d7f1326f9e9c2a426d6ae08e740ab386b087e9a34d"}, {0x0, 0x1, 'o'}, {0x0, 0x18, "942fa5167575cffa39ef8df406f1a58166d20e6421693365"}]}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x6d, 0x2a, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a}, @tim={0x5, 0x1a, {0x0, 0x0, 0x0, "a37f81ded8d759b7ffa335bb2df420cfd90505ff5138ae"}}, @mic={0x8c, 0x10, {0x0, "5035ec8f755e", @short="09a24d619b64c17e"}}, @supported_rates={0x1, 0x1, [{}]}, @challenge={0x10, 0x1}, @cf={0x4, 0x6}, @mesh_config={0x71, 0x7}]}, @NL80211_ATTR_IE_PROBE_RESP={0x111, 0x7f, [@random_vendor={0xdd, 0x2f, "b5d8f33d0c96b229989d14b25ff23aaef040102ccc65e70076663b0140c49cbc5ba8b3bc193f363627f693d39e3100"}, @supported_rates={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @random_vendor={0xdd, 0xd2, "df335ac1062e94f98562ff2c3f3523daee1d668818953b0d051ba25f05c7b9f3f4ab2c79a32ed333e3f97ba16b5c2a1bf8ed1197c52cfa13f019197093e25ec696686b04b9202b483f3f01456b84546f73d1dd97fd5c02dc4191f27ceea79d5da7c3fab43ff6bd5c4bdd6f660688ce048320e1f420af0856ad2a1d0ccbe6425d94db626644d3a51bad22604fbd3acf26d630e9a96e458c1d68bbf4525539bf5422edb04e3d6ed8d8a4f13a25c6723580df60c9769fa8e20509af23c03a491b595aedf11ce8a1d34e29bd258f0e70d588f0b3"}]}, @NL80211_ATTR_BEACON_TAIL={0x65, 0xf, [@measure_req={0x26, 0x4b, {0x0, 0x0, 0x0, "6e7c1c6635c1510e14809bdd83e17a13eb7a3970c88215a93c540ba21c20ca9de8f783ef07ae141b24776af6c4a91820dfcce4de8b155c19c89b96e50b4f345b4d9261dc91d13899"}}, @link_id={0x65, 0x12, {@initial, @device_b}}]}, @NL80211_ATTR_BEACON_HEAD={0xcd, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="725fa4234979"}}, 0x0, @default, 0x0, @val={0x0, 0xd, @random="b70b06f4ebd2d1db4ff063b07b"}, @val={0x1, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x4e, "3d27ad98be194e63b93e00901cff4b93eadae2e6c24047c38cef22ef495577aee109927828d08dcba8e597c85492f66d33a0f845ba15648611e3f9fbfe0b81c17b99b3d883e0f06c8553aa1eb024"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x71, 0x7f, [@fast_bss_trans={0x37, 0x6b, {0x0, 0x1, "bb8bba710f29a16dd26027aa91f14b79", "ac58ba398631967219f4c1843bf59a21111a8f9335e84f5b6f3534176627dc98", "ef5a789d86582e9144eea4c3963e32a4aaac67e937b3f83d6266addd1468ac03", [{0x0, 0x17, "8557fe03df086cab8e198d28494e63ffe276edf999ee94"}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x91, 0x80, [@link_id={0x65, 0x12, {@random="85b71796ea79", @broadcast, @broadcast}}, @ssid={0x0, 0x10, @random="d9ed200590665ec25fb16d434e708200"}, @tim={0x5, 0x5d, {0x0, 0x0, 0x0, "ad12189fdce086a0c4b34e79c23d41f943e1a14891879f433bdec4e802df18f9273467f087a2774c87798298e36e23b8a00d11045a7a5715094e382853691875e375686f0ed0aa756167146d896e8390909940b5c2c2c3069da4"}}, @cf={0x4, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x211, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0xcf, "cc3869eb343f0dfe909ab7ea36b3dfaff496ddf900c7d9e5c31ceda30e8fa246c60a405057c8e029c8c252e59a0cf90a72a346b289096eeff7ac809ef266f9850820c1455b4bb6aa467b2c3d0603c75004eb9757619c38130b392c58bca7025892fe1affec0f491d000297541e5b42264d8a1756fd0bd8c47249dcc91af0800e3d53cb48784e1644970fdb45905166b8a184c48b62f582052e6100e1a051057b000a329bde4720ad2830ff36ea60de8839ced76ca3e396c507c51029b9629d8b9a36edb37f7cc2e8f66a4eb0065453"}, {0xdd, 0xfd, "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"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x12a4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x61, 0x2, "f9405b0a32906b4bb967b4dfc6c0e2a31e2a8e48e917f1eba53137dce97fcd329207e84c1b7571f903bbdbfa5fb6fbcf15bbee59cb4879e02f490f220b8e50057cfc7f5f67567192f0110b6e8a228234bf28a1c46854b17f2c29ad9d9b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd, 0x3, "ae2cca564d94107466"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "f266a7f789296457d219d879856053f59990b153066e97a74dd362309a6b984683bd423cbdfc4e31b7f7e69722680d1c0de97969f6a7936452ceae2795e72fca1777f49f575ca3b1ec872328356af607e92872fafb9e77a62c74dff7ce7f1af15aacca50fb6b12ae290e9ba0938a5961531165aa6ba44c10b5acb400dfeb1251632c6252d281e98bcfe3c385956c18f2e248241fa6c86470f7091ba19a83f623ed3e2c3f41bc42e8d27f2a6fe93a1c6cecb064d2bb309f7b5ac3061e367b54fa32d293479d424cc1d7dbcb17122ee5057a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xbd, 0x2, "aac4df204aa3a4264a3aa1b8b0c3fccdb4d5d7b5867dcccf0955754815530ff28c0b28ffad1a2393fd97068159ea3c1f0d18223016857827ce480f7b874acdfe39918fae187d3e1d24929f775caeec545353c8b4bb83d8cd6a4b6abcbd26e19060734bef8bcd4c159fbccf8817b824c6dea22449e7d01ffb665783bd21c4ccb9374e4f50f9a184a55bb15173d897b0650e41569d6900c5475feca81d22740b68d0389a6bb1445da62d586cf7a88f359e8fe5ff4ffab5879475"}, @NL80211_FTM_RESP_ATTR_LCI={0x1001, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x89, 0x2, "b156424c3c8d2660baae08ffbbfcbc949c92dc44a179ac80c2587498c2051fc3facd904d0116a3ce5867b69a0c9a697b40f6edfb731560387cf6ee624c2808528ac684645a7364565dd62833ddd7c57e57f217f95692478aa4d47a970bc90bdd6fc0f52b7690a08205238c9aee44e07c195102c9466327c74abd54463d682b330663cd43b8"}]}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "0c338fe37938c9575c539cc020fbc0452212b88c66303a84f2b16c639afb29ac2a14bc5c3448278801ede922d4150fb3df7b60d4058d2a7def72521f121c48c3ec74af2a86b9f07e7677e983df5db90c404725cfb76e7427bb9c5af663be1a3730b8484c5704c114b07d8b2fcc2b035bd0a41db76a511a21763d47323b3ea3eba6bebc806d61e4ae810ac1e927c8369b214219799ea9463dfd5122e808082df3ad95444f2c5aaea293c0ff9a4145bdb0ac61c36b8ecb10402fb8125f612a10cfd5ed66547ce520c4b7778da9e5cfe8bf8c0576e6d1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x8d, 0x2a, [@mic={0x8c, 0x10, {0x0, "99c9c5f6014a", @short="357a15501e19daba"}}, @preq={0x82, 0x46, @not_ext={{}, 0x0, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x0, 0x4, [{{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {{}, @device_b}]}}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6}, @dsss={0x3, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @broadcast, 0x0, "", 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@mesh_chsw={0x76, 0x6}, @ext_channel_switch={0x3c, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_BEACON_TAIL={0x35, 0xf, [@perr={0x84, 0x2f, {0x0, 0x3, [@ext={{}, @device_b, 0x0, @device_b}, @not_ext={{}, @broadcast}, @not_ext={{}, @broadcast}]}}]}]]}]}, 0x1e84}}, 0x0) 04:05:55 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x0, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1224.248369][ T9091] usb 2-1: USB disconnect, device number 102 04:05:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8916, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:05:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) 04:05:55 executing program 0: syz_open_dev$usbmon(&(0x7f0000000100), 0x1f, 0x6800) 04:05:55 executing program 4: socketpair(0x10, 0x0, 0x6, &(0x7f0000000600)) 04:05:56 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x3359cf5b) [ 1224.752996][T12635] usb 2-1: new high-speed USB device number 103 using dummy_hcd 04:05:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x20, 0x5e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x20}], 0x1}, 0x0) [ 1225.097339][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.123197][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.292453][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.301733][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.310420][T12635] usb 2-1: Product: syz [ 1225.314817][T12635] usb 2-1: Manufacturer: syz [ 1225.319533][T12635] usb 2-1: SerialNumber: syz [ 1226.022191][T12635] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1226.028508][T12635] cdc_ncm 2-1:1.0: bind() failure 04:05:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:05:58 executing program 0: socket(0xa, 0x0, 0x8ae) 04:05:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x6, 0x0, &(0x7f00000000c0)) 04:05:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x80108907, 0x0) 04:05:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 04:05:58 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x0, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1227.462736][ T9091] usb 2-1: USB disconnect, device number 103 04:05:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x890b, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:05:58 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5f9}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 04:05:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8934, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:05:58 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x40080) 04:05:59 executing program 0: clock_nanosleep(0x7, 0x0, &(0x7f0000000280), 0x0) 04:05:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000002c0), 0x4) [ 1228.062773][ T9091] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1228.442386][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.612355][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1228.621605][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.629984][ T9091] usb 2-1: Product: syz [ 1228.634504][ T9091] usb 2-1: Manufacturer: syz [ 1228.639904][ T9091] usb 2-1: SerialNumber: syz [ 1229.342312][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1229.348613][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:06:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:01 executing program 4: syz_read_part_table(0x7fff, 0x0, 0x0) 04:06:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a16d1872f652b357465b9d88107a493cebb5065bcdd4739883c51ef16895f4764d2459a9f920d5917ea4c716971cb7915d7756b475f59354c09e2c28a8dd223d", "ad5d49579d01b9d750c69ee5041b70df1e2e3ae7cc039c5ce9c026c85f4e2fc119f08853626ec9ea78d3bf9ddb1293c1720ce5bab6dc50cd4ea9b0493591131c", "e9131796ef65953e4fa2f8ce39be9087e7b4f15cd65b746332f1c8a79edbbfc5"}}) 04:06:01 executing program 5: getresuid(&(0x7f00000001c0), 0x0, 0x0) 04:06:01 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 04:06:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x0, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1230.724406][T12635] usb 2-1: USB disconnect, device number 104 [ 1230.831389][T16158] loop4: detected capacity change from 0 to 63 04:06:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@deltclass={0x24}, 0x24}}, 0x0) 04:06:02 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) 04:06:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) [ 1231.092693][ T3561] usb 3-1: new high-speed USB device number 24 using dummy_hcd 04:06:02 executing program 0: syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) 04:06:02 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]}) 04:06:02 executing program 4: ioprio_set$uid(0x0, 0x0, 0x4000) [ 1231.342527][ T3561] usb 3-1: Using ep0 maxpacket: 32 [ 1231.372787][T12635] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1231.463269][ T3561] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1231.716244][ T3561] usb 3-1: string descriptor 0 read error: -22 [ 1231.723081][ T3561] usb 3-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 1231.732716][ T3561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.742679][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.782452][ T9091] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1231.800401][ T3561] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1231.922408][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.931650][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.940118][T12635] usb 2-1: Product: syz [ 1231.944650][T12635] usb 2-1: Manufacturer: syz [ 1231.949378][T12635] usb 2-1: SerialNumber: syz [ 1231.999655][ T3561] usb 3-1: USB disconnect, device number 24 [ 1232.052269][ T9091] usb 6-1: Using ep0 maxpacket: 32 [ 1232.232435][ T9091] usb 6-1: language id specifier not provided by device, defaulting to English [ 1232.372453][ T9091] usb 6-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 1232.382039][ T9091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.390194][ T9091] usb 6-1: Product: syz [ 1232.394769][ T9091] usb 6-1: Manufacturer: syz [ 1232.399501][ T9091] usb 6-1: SerialNumber: syz [ 1232.652312][T12635] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1232.658606][T12635] cdc_ncm 2-1:1.0: bind() failure [ 1232.693423][ T9091] usbhid 6-1:1.0: can't add hid device: -22 [ 1232.699719][ T9091] usbhid: probe of 6-1:1.0 failed with error -22 [ 1232.727023][ T9091] usb 6-1: USB disconnect, device number 30 04:06:05 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200600) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 04:06:05 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) faccessat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) 04:06:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x48}}, 0x0) 04:06:05 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x105880) 04:06:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x0, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1233.957958][ T9091] usb 2-1: USB disconnect, device number 105 04:06:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 04:06:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) 04:06:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:06:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x7fff, 0x2, &(0x7f0000001c80)=[{0x0}, {0x0}]) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x41) 04:06:05 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x6800) 04:06:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x0, 0x0) [ 1234.695893][T16204] loop2: detected capacity change from 0 to 63 [ 1234.703520][ T9091] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1235.083039][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.282663][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1235.292958][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.301119][ T9091] usb 2-1: Product: syz [ 1235.305734][ T9091] usb 2-1: Manufacturer: syz [ 1235.310487][ T9091] usb 2-1: SerialNumber: syz [ 1236.013323][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1236.019537][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:06:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) faccessat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) 04:06:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f00000000c0)) 04:06:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891b, 0x0) 04:06:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x0, 0x0) 04:06:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x0, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1237.144583][ T9091] usb 2-1: USB disconnect, device number 106 04:06:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, 0x0}, 0x2000c015) 04:06:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a1, &(0x7f0000000140)={'tunl0\x00', 0x0}) 04:06:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x0, 0x0) 04:06:08 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x7b7a81, 0x0) 04:06:08 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 04:06:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x0, 0x0) [ 1237.912287][ T9091] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1238.303217][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.502614][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.512023][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.520380][ T9091] usb 2-1: Product: syz [ 1238.524863][ T9091] usb 2-1: Manufacturer: syz [ 1238.529681][ T9091] usb 2-1: SerialNumber: syz [ 1239.242376][ T9091] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1239.248679][ T9091] cdc_ncm 2-1:1.0: bind() failure 04:06:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:11 executing program 4: faccessat(0xffffffffffffffff, 0x0, 0x178) 04:06:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) 04:06:11 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) faccessat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) 04:06:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) 04:06:11 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x0, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1240.429975][ T9091] usb 2-1: USB disconnect, device number 107 04:06:11 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000ff1000/0xf000)=nil, 0x930, 0x4, 0x10, r0, 0x0) 04:06:11 executing program 5: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "717ffb35d6e1e887f0c182e1e1c3e3066ae5734f04588b6096db9a30bc1bcb3bcf3d60cb632e42afc2fd30f70bc426a7e6fa6d2ba979dcd5a00735d5d905bb79"}, 0x48, 0xfffffffffffffffb) 04:06:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000f00)=""/202, 0x2b, 0xca, 0x1}, 0x20) 04:06:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000280)) 04:06:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={0x0}}, 0x0) [ 1240.993793][T12635] usb 2-1: new high-speed USB device number 108 using dummy_hcd 04:06:12 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs2\x00', 0x0, 0x0, 0x0) [ 1241.364015][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.550904][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.560457][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.568925][T12635] usb 2-1: Product: syz [ 1241.573527][T12635] usb 2-1: Manufacturer: syz [ 1241.578263][T12635] usb 2-1: SerialNumber: syz [ 1242.282282][T12635] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1242.288517][T12635] cdc_ncm 2-1:1.0: bind() failure 04:06:14 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:14 executing program 4: syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) syz_mount_image$msdos(&(0x7f00000017c0), 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=ANY=[]) 04:06:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x8000000) 04:06:14 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) faccessat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) 04:06:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0)) 04:06:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x0, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1243.668365][T12635] usb 2-1: USB disconnect, device number 108 04:06:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 04:06:15 executing program 5: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x8) 04:06:15 executing program 4: syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) syz_mount_image$msdos(&(0x7f00000017c0), 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=ANY=[]) 04:06:15 executing program 2: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x1ffff000) 04:06:15 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x1, 0x0) 04:06:15 executing program 4: syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) syz_mount_image$msdos(&(0x7f00000017c0), 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=ANY=[]) [ 1244.432356][T12635] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1244.792950][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.963149][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1244.972490][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.980783][T12635] usb 2-1: Product: syz [ 1244.985231][T12635] usb 2-1: Manufacturer: syz [ 1244.989959][T12635] usb 2-1: SerialNumber: syz [ 1245.722408][T12635] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1245.728640][T12635] cdc_ncm 2-1:1.0: bind() failure 04:06:18 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:18 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={0x0}) 04:06:18 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001e00)) 04:06:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5601, 0x0) 04:06:18 executing program 4: syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) syz_mount_image$msdos(&(0x7f00000017c0), 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=ANY=[]) 04:06:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x0, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1247.021054][T12635] usb 2-1: USB disconnect, device number 109 04:06:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5601, 0x0) 04:06:18 executing program 5: pipe2(0x0, 0x84080) 04:06:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x215}, 0x1c}}, 0x0) 04:06:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b30, 0x0) 04:06:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5601, 0x0) 04:06:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b31, 0x0) [ 1247.672585][T12635] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1248.032231][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.202366][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.211602][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.219909][T12635] usb 2-1: Product: syz [ 1248.224249][T12635] usb 2-1: Manufacturer: syz [ 1248.228964][T12635] usb 2-1: SerialNumber: syz [ 1249.352727][T12635] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1249.359420][T12635] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1249.367173][T12635] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1249.572393][T12635] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1249.585379][T12635] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1249.779524][T12635] usb 2-1: USB disconnect, device number 110 [ 1249.787554][T12635] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:21 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r1, 0x9, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 04:06:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r1, 0x9, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 04:06:21 executing program 0: syz_mount_image$romfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='mode=50000000000000000004000']) 04:06:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5601, 0x0) 04:06:21 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x0, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) [ 1250.427549][T16347] bpf: Bad value for 'mode' 04:06:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5424, 0x0) 04:06:21 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:06:21 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0xc8401, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 04:06:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5412, 0x0) 04:06:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1250.903340][T12635] usb 2-1: new high-speed USB device number 111 using dummy_hcd 04:06:22 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1251.262296][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.432876][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1251.442357][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.450536][T12635] usb 2-1: Product: syz [ 1251.455612][T12635] usb 2-1: Manufacturer: syz [ 1251.460349][T12635] usb 2-1: SerialNumber: syz [ 1252.257988][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.264613][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.682437][T12635] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1252.689232][T12635] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1252.697070][T12635] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1252.902444][T12635] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1252.919214][T12635] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1253.108420][T12635] usb 2-1: USB disconnect, device number 111 [ 1253.118562][T12635] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:24 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x560b, 0x0) 04:06:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5607, 0x0) 04:06:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 04:06:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:24 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x0, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x560f, 0x0) 04:06:25 executing program 0: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x20}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 04:06:25 executing program 5: syz_clone(0x1c864000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:06:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1254.131997][ T9091] usb 2-1: new high-speed USB device number 112 using dummy_hcd 04:06:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1254.503357][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.713005][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1254.722505][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.730648][ T9091] usb 2-1: Product: syz [ 1254.735654][ T9091] usb 2-1: Manufacturer: syz [ 1254.740383][ T9091] usb 2-1: SerialNumber: syz [ 1255.912508][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1255.919121][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1255.926926][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1256.152458][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1256.165422][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1256.361263][T12635] usb 2-1: USB disconnect, device number 112 [ 1256.369456][T12635] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:28 executing program 5: sigaltstack(0x0, &(0x7f00000016c0)={0x0}) 04:06:28 executing program 0: syz_read_part_table(0x4600000000000000, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af5404140000000000000000550000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) 04:06:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0007}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x0, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) 04:06:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x540f, 0x0) 04:06:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xfffffffffffffe43, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf250600000020000180000003000400000000000100", @ANYRES32, @ANYBLOB="0c00018008000300000000003ffd018008000100", @ANYRES32=0x0, @ANYBLOB="ba678fac2c4bb92b858e2b7d546d3d9e8cdf0f2d", @ANYRES32, @ANYBLOB="64000180"], 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 04:06:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b46, 0x0) [ 1257.413347][ T9091] usb 2-1: new high-speed USB device number 113 using dummy_hcd 04:06:28 executing program 5: pipe2(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x1, &(0x7f0000001300)=@raw=[@ldst], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 04:06:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @loopback}}) [ 1257.773222][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.963061][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.972929][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.981076][ T9091] usb 2-1: Product: syz [ 1257.985492][ T9091] usb 2-1: Manufacturer: syz [ 1257.990253][ T9091] usb 2-1: SerialNumber: syz [ 1259.262348][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1259.269032][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1259.276755][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1259.472500][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1259.485349][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1259.676427][T12635] usb 2-1: USB disconnect, device number 113 [ 1259.684286][T12635] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7, 0x7}) 04:06:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b2f, 0x0) 04:06:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1, 0x1}}) 04:06:31 executing program 5: pselect6(0x7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 04:06:31 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x0, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b2f, 0x0) 04:06:31 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000b2000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000066c0)={0x50, 0x0, r2, {0x7, 0x21}}, 0x50) 04:06:31 executing program 0: pipe2(&(0x7f00000014c0)={0xffffffffffffffff}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x0) 04:06:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7, 0x7}) 04:06:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b2f, 0x0) [ 1260.763522][ T9091] usb 2-1: new high-speed USB device number 114 using dummy_hcd 04:06:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 1261.162850][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.353170][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1261.362500][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.370655][ T9091] usb 2-1: Product: syz [ 1261.375075][ T9091] usb 2-1: Manufacturer: syz [ 1261.379817][ T9091] usb 2-1: SerialNumber: syz [ 1262.512563][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1262.519185][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1262.526885][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1262.732351][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1262.746925][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1262.945329][T12635] usb 2-1: USB disconnect, device number 114 [ 1262.953352][T12635] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7, 0x7}) 04:06:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x90}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}}], 0x1, 0x0) 04:06:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b2f, 0x0) 04:06:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 04:06:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 04:06:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4bfa, 0x0) 04:06:34 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000480)=@raw=[@alu], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:06:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x7, 0x7}) 04:06:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 1264.052571][T12635] usb 2-1: new high-speed USB device number 115 using dummy_hcd 04:06:35 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000029c0), &(0x7f0000002a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) [ 1264.412960][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.494333][T16662] fuse: Unknown parameter 'rootcontext' [ 1264.584488][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.593872][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.602347][T12635] usb 2-1: Product: syz [ 1264.606646][T12635] usb 2-1: Manufacturer: syz [ 1264.611386][T12635] usb 2-1: SerialNumber: syz [ 1265.782537][T12635] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1265.789207][T12635] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1265.796962][T12635] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1266.002479][T12635] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1266.019535][T12635] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1266.235123][ T9091] usb 2-1: USB disconnect, device number 115 [ 1266.243318][ T9091] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:06:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:37 executing program 4: fchmodat(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xb, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private}]}, 0x24}}, 0x0) 04:06:37 executing program 2: syz_clone3(&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 04:06:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}, 0x8}, 0x0) 04:06:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:38 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a80)) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x1402e0000, 0x0, 0x0, &(0x7f0000000080), {}, &(0x7f00000000c0)=""/216, 0xd8, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 04:06:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x7, 0x1, '$[\x00'}]}, 0x1c}}, 0x0) 04:06:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0xfd98}}, 0x0) 04:06:38 executing program 2: select(0x40, &(0x7f0000002940), 0x0, &(0x7f00000029c0)={0x8000000000000000}, 0x0) [ 1267.342000][ T9091] usb 2-1: new high-speed USB device number 116 using dummy_hcd 04:06:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '$[\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) 04:06:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000440)) [ 1267.772899][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.963632][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.973296][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.981450][ T9091] usb 2-1: Product: syz [ 1267.985937][ T9091] usb 2-1: Manufacturer: syz [ 1267.990677][ T9091] usb 2-1: SerialNumber: syz [ 1269.282221][ T9091] cdc_ncm 2-1:1.0: failed to get mac address [ 1269.312665][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1269.342447][ T9091] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1269.372710][ T9091] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1269.402422][ T9091] usbtest: probe of 2-1:1.1 failed with error -71 [ 1269.426332][ T9091] usb 2-1: USB disconnect, device number 116 04:06:40 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:41 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:41 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x18000, 0x0) 04:06:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xf, 0x6, 0x101}, 0x14}}, 0x0) 04:06:41 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x10000020) 04:06:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) 04:06:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 04:06:41 executing program 0: syz_clone3(&(0x7f0000000280)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:06:41 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff90}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:06:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4d}]}}, &(0x7f0000001280)=""/156, 0x2a, 0x9c, 0x1}, 0x20) [ 1270.312048][ T9091] usb 2-1: new high-speed USB device number 117 using dummy_hcd 04:06:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) 04:06:41 executing program 2: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) [ 1270.692700][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.873164][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.882872][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.891082][ T9091] usb 2-1: Product: syz [ 1270.895594][ T9091] usb 2-1: Manufacturer: syz [ 1270.900330][ T9091] usb 2-1: SerialNumber: syz [ 1272.082506][ T9091] cdc_ncm 2-1:1.0: failed to get mac address [ 1272.102210][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1272.132520][ T9091] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1272.158565][ T9091] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1272.185892][ T9091] usbtest: probe of 2-1:1.1 failed with error -71 [ 1272.201063][ T9091] usb 2-1: USB disconnect, device number 117 04:06:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000200)={'batadv_slave_1\x00', @ifru_data=0x0}) 04:06:44 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:44 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) wait4(0x0, 0x0, 0x0, 0x0) 04:06:44 executing program 5: getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB=',huge=never,nr_inodes=k']) 04:06:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:44 executing program 4: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af54041400000000000000000f0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) 04:06:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000080"]) [ 1273.307431][T16793] loop4: detected capacity change from 0 to 1 [ 1273.343633][T16793] ldm_validate_privheads(): Disk read failed. [ 1273.350641][T16793] loop4: p2 < > p4 [ 1273.354717][T16793] loop4: partition table partially beyond EOD, truncated [ 1273.362493][T16793] loop4: p2 size 2 extends beyond EOD, truncated [ 1273.374285][T16793] loop4: p4 start 7 is beyond EOD, truncated 04:06:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:44 executing program 4: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af54041400000000000000000f0000000000000000000500000000004200000000000000000000000000007f81000000070000000000200055aa", 0x40, 0x1c0}]) [ 1273.572572][ T9092] usb 2-1: new high-speed USB device number 118 using dummy_hcd 04:06:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1273.866730][T13186] udevd[13186]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1273.928397][T16811] loop4: detected capacity change from 0 to 1 [ 1273.944057][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:06:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1274.117850][T16811] ldm_validate_privheads(): Disk read failed. [ 1274.125370][T16811] loop4: p2 < > p4 [ 1274.129365][T16811] loop4: partition table partially beyond EOD, truncated [ 1274.137274][T16811] loop4: p2 size 2 extends beyond EOD, truncated [ 1274.146328][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.155717][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.164385][ T9092] usb 2-1: Product: syz [ 1274.168688][ T9092] usb 2-1: Manufacturer: syz [ 1274.173615][ T9092] usb 2-1: SerialNumber: syz [ 1274.192147][T16811] loop4: p4 start 7 is beyond EOD, truncated [ 1274.528752][T13186] udevd[13186]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1275.332261][ T9092] cdc_ncm 2-1:1.0: failed to get mac address [ 1275.354848][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1275.392382][ T9092] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1275.412168][ T9092] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1275.442279][ T9092] usbtest: probe of 2-1:1.1 failed with error -71 [ 1275.465288][ T9092] usb 2-1: USB disconnect, device number 118 04:06:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 04:06:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:47 executing program 4: ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0) 04:06:47 executing program 2: r0 = getpid() r1 = syz_clone(0x40100400, &(0x7f0000000040)="d3cd6b3222d99bbdefb1cb49e8dfcd2c1ba65c56e056c465631c20b8b618719cddf21fe1f5bd6a4ae2c71f558345a6a082170a25bc1e3e1a2fb4743189b2936b3cc5def3fe3467bb75c03b68a899de1cee0a03555f26af46523981b03f32548c1750080d8e561becb414694e10466937543f20d288580f3eaa3c81f79f7de1fa240e679aefb834bbe13a2e105164a2f49025baed9422831f93d06fed5c68096a2e75dd119a52493f748a087a266eb5", 0xaf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8f18d1152d05c0894c7557f0b9e9e27e3537117e7b8bd1cca9aad89455576a8faedecddfc50684ec32924c902058a806dc519288fcb0ba1f6c2a68038dfff01abfe2e5d3ea7ddce45fa0adcfda6c462d59e11d3649ede5b66d3596e520e48543dc62530f2ef15f064fc81c02") socket$inet(0x2, 0x5, 0x7) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x5, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r3, &(0x7f0000000200)={r2, r4, 0xfffffffa}) 04:06:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8001}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="ce", 0x1010c, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 1276.772349][ T9092] usb 2-1: new high-speed USB device number 119 using dummy_hcd 04:06:48 executing program 4: sched_rr_get_interval(0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="2a59dbeed2f81c61fc46811f0cd68e230d62430e608312d6066c96fc1b3c7115a34c03a95f26466bd94d8e1b4c8eac8eb0bd219518633b57b95ad31fb499360a388e7c57ca4ca700d0147486ef83ed33b14a1775d70f66436c4c97a137da568e58779fd7c12a5a68a7c11cdc3cdb44d3685e910af0f4559dcf243742ad71c42c84f5d6be8829a9118a979db330e02f48c9f164031fb415aa1daa766a180b069af8916159f65527fc", 0xa8, &(0x7f0000000100), &(0x7f0000000140), 0x0) [ 1277.156027][ T9092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:06:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1277.383819][ T9092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.393251][ T9092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.401409][ T9092] usb 2-1: Product: syz [ 1277.406613][ T9092] usb 2-1: Manufacturer: syz [ 1277.411358][ T9092] usb 2-1: SerialNumber: syz [ 1278.682454][ T9092] cdc_ncm 2-1:1.0: failed to get mac address [ 1278.712291][ T9092] cdc_ncm 2-1:1.0: bind() failure [ 1278.752162][ T9092] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1278.782128][ T9092] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1278.813420][ T9092] usbtest: probe of 2-1:1.1 failed with error -71 [ 1278.847252][ T9092] usb 2-1: USB disconnect, device number 119 04:06:50 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:50 executing program 2: r0 = getpid() r1 = syz_clone(0x40100400, &(0x7f0000000040)="d3cd6b3222d99bbdefb1cb49e8dfcd2c1ba65c56e056c465631c20b8b618719cddf21fe1f5bd6a4ae2c71f558345a6a082170a25bc1e3e1a2fb4743189b2936b3cc5def3fe3467bb75c03b68a899de1cee0a03555f26af46523981b03f32548c1750080d8e561becb414694e10466937543f20d288580f3eaa3c81f79f7de1fa240e679aefb834bbe13a2e105164a2f49025baed9422831f93d06fed5c68096a2e75dd119a52493f748a087a266eb5", 0xaf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8f18d1152d05c0894c7557f0b9e9e27e3537117e7b8bd1cca9aad89455576a8faedecddfc50684ec32924c902058a806dc519288fcb0ba1f6c2a68038dfff01abfe2e5d3ea7ddce45fa0adcfda6c462d59e11d3649ede5b66d3596e520e48543dc62530f2ef15f064fc81c02") socket$inet(0x2, 0x5, 0x7) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x5, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r3, &(0x7f0000000200)={r2, r4, 0xfffffffa}) 04:06:50 executing program 4: sched_rr_get_interval(0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="2a59dbeed2f81c61fc46811f0cd68e230d62430e608312d6066c96fc1b3c7115a34c03a95f26466bd94d8e1b4c8eac8eb0bd219518633b57b95ad31fb499360a388e7c57ca4ca700d0147486ef83ed33b14a1775d70f66436c4c97a137da568e58779fd7c12a5a68a7c11cdc3cdb44d3685e910af0f4559dcf243742ad71c42c84f5d6be8829a9118a979db330e02f48c9f164031fb415aa1daa766a180b069af8916159f65527fc", 0xa8, &(0x7f0000000100), &(0x7f0000000140), 0x0) 04:06:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:50 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:51 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1280.074343][ T9091] usb 2-1: new high-speed USB device number 120 using dummy_hcd 04:06:51 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10010000130001a8e8cb67a522a32cfafb0ebe2965edf882f5a26c71c0eb1a679323c5fe5fd9d909b549841bfc2c991240afe80fc835ac451ac816b6a06178d405c0334475a4d9587274979261c5b5e6"], 0x110}}, 0x0) 04:06:51 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1280.473394][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.672704][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1280.682085][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.690239][ T9091] usb 2-1: Product: syz [ 1280.694714][ T9091] usb 2-1: Manufacturer: syz [ 1280.699450][ T9091] usb 2-1: SerialNumber: syz 04:06:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1280.750661][T16902] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:52 executing program 2: r0 = getpid() r1 = syz_clone(0x40100400, &(0x7f0000000040)="d3cd6b3222d99bbdefb1cb49e8dfcd2c1ba65c56e056c465631c20b8b618719cddf21fe1f5bd6a4ae2c71f558345a6a082170a25bc1e3e1a2fb4743189b2936b3cc5def3fe3467bb75c03b68a899de1cee0a03555f26af46523981b03f32548c1750080d8e561becb414694e10466937543f20d288580f3eaa3c81f79f7de1fa240e679aefb834bbe13a2e105164a2f49025baed9422831f93d06fed5c68096a2e75dd119a52493f748a087a266eb5", 0xaf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8f18d1152d05c0894c7557f0b9e9e27e3537117e7b8bd1cca9aad89455576a8faedecddfc50684ec32924c902058a806dc519288fcb0ba1f6c2a68038dfff01abfe2e5d3ea7ddce45fa0adcfda6c462d59e11d3649ede5b66d3596e520e48543dc62530f2ef15f064fc81c02") socket$inet(0x2, 0x5, 0x7) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x5, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r3, &(0x7f0000000200)={r2, r4, 0xfffffffa}) [ 1281.982312][ T9091] cdc_ncm 2-1:1.0: failed to get mac address [ 1282.012619][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1282.044043][ T9091] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1282.067632][ T9091] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1282.097522][ T9091] usbtest: probe of 2-1:1.1 failed with error -71 [ 1282.119242][ T9091] usb 2-1: USB disconnect, device number 120 04:06:54 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) keyctl$reject(0x13, 0x0, 0x6, 0x9, 0x0) 04:06:54 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) 04:06:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:54 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:54 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:06:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 04:06:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:54 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1283.392666][T12635] usb 2-1: new high-speed USB device number 121 using dummy_hcd 04:06:54 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0xf, 0x0, 0x0) 04:06:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) [ 1283.753554][T12635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:06:55 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1283.923032][T12635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.934939][T12635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.944067][T12635] usb 2-1: Product: syz [ 1283.948374][T12635] usb 2-1: Manufacturer: syz [ 1283.953212][T12635] usb 2-1: SerialNumber: syz 04:06:55 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) r1 = dup2(r0, r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) [ 1285.189829][T12635] cdc_ncm 2-1:1.0: failed to get mac address [ 1285.212327][T12635] cdc_ncm 2-1:1.0: bind() failure [ 1285.242408][T12635] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1285.262194][T12635] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1285.302540][T12635] usbtest: probe of 2-1:1.1 failed with error -71 [ 1285.318529][T12635] usb 2-1: USB disconnect, device number 121 04:06:57 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:06:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)="99", 0x1, 0x0, &(0x7f0000000240)={0x1c, 0x1c}, 0x1c) 04:06:57 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'wlan1\x00'}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:57 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/176, 0xb0}, 0x0) 04:06:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:57 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:57 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:06:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 04:06:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000000)="f7", 0x1, 0x80, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) [ 1286.742319][ T3561] usb 2-1: new high-speed USB device number 122 using dummy_hcd 04:06:58 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:06:58 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1287.102196][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.273079][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1287.282827][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.290981][ T3561] usb 2-1: Product: syz [ 1287.295462][ T3561] usb 2-1: Manufacturer: syz [ 1287.300188][ T3561] usb 2-1: SerialNumber: syz [ 1288.572582][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1288.592494][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1288.624837][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1288.660276][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1288.682145][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1288.707574][ T3561] usb 2-1: USB disconnect, device number 122 04:07:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) 04:07:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f00000000c0)={0x0, 0xfffffe00}, 0x8) 04:07:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:00 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:07:00 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1289.962717][ T9091] usb 2-1: new high-speed USB device number 123 using dummy_hcd 04:07:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000040), 0x108) 04:07:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000440)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000380)="a6", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000010"], 0x14}, 0x0) 04:07:01 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1290.352550][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.532652][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.542211][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.550372][ T9091] usb 2-1: Product: syz [ 1290.554872][ T9091] usb 2-1: Manufacturer: syz [ 1290.559730][ T9091] usb 2-1: SerialNumber: syz [ 1291.832497][ T9091] cdc_ncm 2-1:1.0: failed to get mac address [ 1291.852458][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1291.882649][ T9091] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1291.902191][ T9091] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1291.922185][ T9091] usbtest: probe of 2-1:1.1 failed with error -71 [ 1291.947890][ T9091] usb 2-1: USB disconnect, device number 123 04:07:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:04 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 04:07:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:07:04 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:07:04 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:04 executing program 2: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000680)='./file\x00', 0x0, 0x0) [ 1293.262279][ T3561] usb 2-1: new high-speed USB device number 124 using dummy_hcd 04:07:04 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000840)) 04:07:04 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1293.632774][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.813518][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1293.822934][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.831078][ T3561] usb 2-1: Product: syz [ 1293.835878][ T3561] usb 2-1: Manufacturer: syz [ 1293.840610][ T3561] usb 2-1: SerialNumber: syz [ 1295.142517][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1295.162628][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1295.194841][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1295.222249][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1295.242134][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1295.254684][ T3561] usb 2-1: USB disconnect, device number 124 04:07:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20105, 0x0, 0x0) 04:07:07 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) r1 = dup2(r0, r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x88) 04:07:07 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:07:07 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:07 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[@cred], 0x68}, 0x0) 04:07:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1296.643270][ T9091] usb 2-1: new high-speed USB device number 125 using dummy_hcd 04:07:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000080)="ef", 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 04:07:08 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10}, 0x10) r2 = dup2(r1, r0) connect$inet(r2, &(0x7f0000000000)={0x10}, 0x10) 04:07:08 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000140), 0x0, 0x4000) [ 1297.022844][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:07:08 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x1000, 0x0, &(0x7f0000000040)) [ 1297.243589][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1297.253824][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.262267][ T9091] usb 2-1: Product: syz [ 1297.266569][ T9091] usb 2-1: Manufacturer: syz [ 1297.271290][ T9091] usb 2-1: SerialNumber: syz [ 1298.502460][ T9091] cdc_ncm 2-1:1.0: failed to get mac address [ 1298.529238][ T9091] cdc_ncm 2-1:1.0: bind() failure [ 1298.562485][ T9091] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1298.582248][ T9091] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1298.602457][ T9091] usbtest: probe of 2-1:1.1 failed with error -71 [ 1298.625749][ T9091] usb 2-1: USB disconnect, device number 125 04:07:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:10 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000001680), 0x4) 04:07:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:10 executing program 2: semget$private(0x0, 0x2, 0x20) 04:07:10 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:07:10 executing program 4: clock_gettime(0x7, &(0x7f0000000180)) 04:07:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:10 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x40, &(0x7f0000000040)) 04:07:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1299.813751][ T3561] usb 2-1: new high-speed USB device number 126 using dummy_hcd 04:07:11 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 04:07:11 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1300.183481][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.363735][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1300.373408][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.381545][ T3561] usb 2-1: Product: syz [ 1300.386031][ T3561] usb 2-1: Manufacturer: syz [ 1300.390755][ T3561] usb 2-1: SerialNumber: syz [ 1301.604544][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1301.622651][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1301.652356][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1301.672205][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1301.702616][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1301.718167][ T3561] usb 2-1: USB disconnect, device number 126 04:07:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) utimensat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 04:07:13 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 04:07:13 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) 04:07:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:07:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, 0x0, 0x2b, 0x0, 0x0, 0x0) 04:07:14 executing program 4: statx(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x10, &(0x7f0000000040)) 04:07:14 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa5}) [ 1303.063199][ T3561] usb 2-1: new high-speed USB device number 127 using dummy_hcd 04:07:14 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x100) 04:07:14 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000140)=@framed={{}, [@map_idx, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd, @map_fd, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xa1, &(0x7f0000000240)=""/161, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1303.452497][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:07:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) [ 1303.572162][ T24] audit: type=1804 audit(201326834.759:48): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1842109179/syzkaller.IuDix9/910/file0" dev="sda1" ino=1172 res=1 errno=0 04:07:14 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1303.642911][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1303.652232][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.660380][ T3561] usb 2-1: Product: syz [ 1303.664912][ T3561] usb 2-1: Manufacturer: syz [ 1303.669650][ T3561] usb 2-1: SerialNumber: syz [ 1304.952309][ T3561] cdc_ncm 2-1:1.0: failed to get mac address [ 1304.972372][ T3561] cdc_ncm 2-1:1.0: bind() failure [ 1305.002314][ T3561] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1305.022151][ T3561] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1305.052517][ T3561] usbtest: probe of 2-1:1.1 failed with error -71 [ 1305.065094][ T3561] usb 2-1: USB disconnect, device number 127 04:07:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:17 executing program 4: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4}) 04:07:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, "89e76acc559a9eb8dea4f0fe49bfab76a356f2b5d458b9c79156c6f03142b9b4"}) syz_open_dev$evdev(&(0x7f0000000040), 0x84, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000080)={0x53, 0x81, 0x81, {0x1, 0x1}, {0x80, 0x236}, @ramp={0x3, 0x79, {0x1d1f, 0x1, 0x8, 0x3f}}}) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000440)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000800)=""/132, 0x84}], 0x4}, 0x400800}], 0x1, 0x122, 0x0) recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003b00)="3d0baf97d21066cbc219773d293e0b06bd3783030e3bf1e4d5cc062a51a57cb2cee5e17c166cdcd3f3a8923727e73c0b469869fecc822dcdc1d92d08839ec3b99ed510dd1d134a832d742f7e0b235cf8f9de3da3ab5af3d015798fa664988dfd013c102bc7db21fd3d3eeb4344ab9df41a4e030d74734a54be0a4e9f33a1189cb3ebf4d82bfbfedafe88199f0184e075babec1de9f257aedcae78db5cb843e033e9b711bfee561178b1028cfefd9ff489d06cd9eed1c6ebf49a620681b734434e367daf12d55b967ea589ee63503e870f802ccc705a5a8377ad81152a35f8bc9117b0758599c8ed10fd76ef81d75cc74bcfdee261e4a37995adfb804348f4fc80826890c9839ee227a0c39f4d3450219f8710479a89ede7cd0a38e1599b4d7a6688fc42d1c77cdcf91ff165a0d01e3c3b14f79dc5b436fce7ed4f512784c39b3d5e6eee40c1279f2093780901acb5168161df9a4a58cc7ad5bd380d80d0ab2eb2963d752748dbfd4ad412a9545884db1ffb2067618f0e936ec997b5649ce650c2122b141378c4d8a8728039ff377fd174690c725226553e5635d5e36dbe550d49f0265bc4f5c54d627bb0e86705fe169f7e9885b3d9482cb60f3e298a2f9d8c2eb637d9ed0cc0e02cd71e782c5e73872be38d03cc38f186680ba234607521b598f2352d13c62c393", 0x1e8}], 0x1}}], 0x1, 0x0) 04:07:17 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) 04:07:17 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 04:07:17 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:17 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000140)='\r', 0x1}, {&(0x7f0000000280)='V', 0x1, 0x7fffffff}], 0x0, 0x0) [ 1306.242490][ T9091] usb 2-1: new high-speed USB device number 2 using dummy_hcd 04:07:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) 04:07:17 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1306.396135][T17177] loop4: detected capacity change from 0 to 264192 04:07:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x0, 0x320a}, 0x48) [ 1306.622900][ T9091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:07:18 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) [ 1306.793688][ T9091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.803254][ T9091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.811531][ T9091] usb 2-1: Product: syz [ 1306.816165][ T9091] usb 2-1: Manufacturer: syz [ 1306.820896][ T9091] usb 2-1: SerialNumber: syz [ 1308.082320][ T9091] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1308.089072][ T9091] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1308.096835][ T9091] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1308.302260][ T9091] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1308.316419][ T9091] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1308.334185][ T9091] usb 2-1: USB disconnect, device number 2 [ 1308.341993][ T9091] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:07:20 executing program 2: set_mempolicy(0x0, &(0x7f0000001a00), 0x0) 04:07:20 executing program 4: statx(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x400, &(0x7f0000000040)) 04:07:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}) 04:07:20 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:20 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, &(0x7f00000000c0)) 04:07:20 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 04:07:20 executing program 4: syz_emit_ethernet(0x9a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "20a34c", 0x64, 0x88, 0x0, @private0, @mcast2, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "485ed7984777951c166104d79fe6ebd2b7e7a0048cc6fc4dbd7052fadbae458f", "e930fb547426a6363c5da245b405e06b", {"0600", "9a6c9b5d28908adc45d102cf5d54ecef"}}}}}}}}, 0x0) 04:07:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000140)=@framed={{}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xa1, &(0x7f0000000240)=""/161, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:20 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f00000000c0)) 04:07:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}) [ 1309.452307][ T3561] usb 2-1: new high-speed USB device number 3 using dummy_hcd 04:07:20 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) umount2(&(0x7f0000000240)='./bus\x00', 0x0) 04:07:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7666ed", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:07:20 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f00000000c0)) [ 1309.835061][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:07:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)='L', 0x1}], 0x1}}], 0x1, 0x0) [ 1310.083116][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1310.092742][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.100896][ T3561] usb 2-1: Product: syz [ 1310.105329][ T3561] usb 2-1: Manufacturer: syz [ 1310.110051][ T3561] usb 2-1: SerialNumber: syz [ 1311.322405][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1311.329056][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1311.336920][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1311.552314][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1311.565480][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1311.598493][ T3561] usb 2-1: USB disconnect, device number 3 [ 1311.609786][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:07:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}) 04:07:23 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) umount2(&(0x7f0000000240)='./bus\x00', 0x0) 04:07:23 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f00000000c0)) 04:07:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x0, 0x0, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:23 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010020000904000001020d0000052406000105240000000d240f0100000000000000080006241a0000000905810300020007200904010000024d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 04:07:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x2, &(0x7f0000001480)=@raw=[@cb_func], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:07:23 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, 0x0) 04:07:23 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) umount2(&(0x7f0000000240)='./bus\x00', 0x0) [ 1312.732722][ T3561] usb 2-1: new high-speed USB device number 4 using dummy_hcd 04:07:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a4000000000901010000000000000000020000000800064000000000080005400000001908000640000000000900010073797a31000000004c0002000600034000f9ff002c00018014000300fc00000000000000000000000000000114000400fc0100000000000080000000000000000c0002"], 0xa4}}, 0x0) 04:07:24 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, 0x0) [ 1313.102240][ T3561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.126463][T17251] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1313.136485][T17251] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1313.145177][T17251] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1313.153526][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1313.293486][ T3561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1313.303325][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.311485][ T3561] usb 2-1: Product: syz [ 1313.315941][ T3561] usb 2-1: Manufacturer: syz [ 1313.320676][ T3561] usb 2-1: SerialNumber: syz [ 1313.697767][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.704574][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.532419][ T3561] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1314.539009][ T3561] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1314.546797][ T3561] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1314.749039][ T3561] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1314.765544][ T3561] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1314.785393][ T3561] usb 2-1: USB disconnect, device number 4 [ 1314.793276][ T3561] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 04:07:26 executing program 2: socket$inet(0x2, 0x0, 0x80000000) 04:07:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:07:26 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, 0x0, 0x0) 04:07:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:26 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) umount2(&(0x7f0000000240)='./bus\x00', 0x0) 04:07:26 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) 04:07:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0xd5, 0x0, 0x0) 04:07:26 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/86, 0x56}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4e) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 04:07:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 04:07:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:07:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 04:07:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) poll(&(0x7f00000024c0)=[{}, {r0, 0xa334}], 0x2, 0x1) 04:07:27 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @random="fdc9b5e63967", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}, @echo={0x3}}}}}, 0x0) 04:07:27 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x963}}, 0x24) 04:07:30 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:30 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000004c0)=[{r0}], 0x1, 0x0) 04:07:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8}}}]}]}, 0x38}}, 0x0) 04:07:30 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/86, 0x56}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4e) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 04:07:30 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/86, 0x56}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4e) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 04:07:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x10}], {0x14}}, 0x3c}}, 0x0) 04:07:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) 04:07:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 04:07:30 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 04:07:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) poll(&(0x7f00000024c0)=[{}, {r0, 0xa334}, {}], 0x3, 0x1) 04:07:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 04:07:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 04:07:33 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x0, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:33 executing program 0: socket(0x3, 0x0, 0x4db0) 04:07:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 04:07:33 executing program 2: r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x5, r4, 0x8}, 0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x1, @local, 0x5}, {0xa, 0x4e21, 0x0, @mcast2, 0x1}, 0x1, {[0x200a4e, 0x5, 0xfffffffd, 0x9, 0x10001, 0x401, 0x0, 0x7ff]}}, 0x5c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', r3, 0x8000, 0x1, 0x7, 0x9, {{0x18, 0x4, 0x3, 0x0, 0x60, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xac, [@multicast2, @private=0xa010102, @broadcast, @remote]}, @ssrr={0x89, 0x7, 0x46, [@empty]}, @lsrr={0x83, 0x7, 0x71, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x4, [{@multicast2, 0x6}, {@private=0xa010102, 0xffffffe1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x20}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400a00c000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r9, @ANYBLOB="4000248701006c625fe9617070696e670000000000ff0404000003000000080004000000", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x218}, 0x1, 0x0, 0x0, 0x40041}, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {}, 0x200}) 04:07:33 executing program 4: bpf$MAP_CREATE(0x4800000000000000, &(0x7f0000000040)=@base={0x9, 0xff, 0x8001, 0xa01}, 0x48) 04:07:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 04:07:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}]}, 0x6}}, 0x0) 04:07:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xfffffffffffffdee) 04:07:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40}, 0x0) 04:07:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000280)) 04:07:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x2, &(0x7f0000000000)=@raw=[@generic={0x7}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x8, 0x10, 0x0}, 0x80) 04:07:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELSET={0x28}], {0x14}}, 0x3c}}, 0x0) 04:07:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 04:07:36 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x0, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:36 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) 04:07:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x30}}, 0x0) 04:07:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x2, &(0x7f0000001480)=@raw=[@cb_func], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:36 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}], 0x3, 0x8) 04:07:36 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') 04:07:36 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002080)='./cgroup/syz0\x00', 0x200002, 0x0) 04:07:36 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/102389) 04:07:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006780)) 04:07:37 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 04:07:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 04:07:39 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x0, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 04:07:39 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', 0x0, 0x0, &(0x7f0000004540)) 04:07:39 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x103000, 0x80) 04:07:39 executing program 4: getresgid(&(0x7f00000054c0), &(0x7f0000005500)=0x0, &(0x7f0000005540)) setregid(r0, 0x0) 04:07:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/126, 0x7e}], 0x1}}], 0x1, 0x0, 0x0) 04:07:39 executing program 2: semget(0x3, 0x1, 0x31a) 04:07:39 executing program 1: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x26, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:39 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 04:07:40 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x8, 0x0) 04:07:40 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x40, 0x0) 04:07:40 executing program 4: msgget$private(0x0, 0x102) 04:07:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x0, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:43 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 04:07:43 executing program 5: open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x3) 04:07:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000000), &(0x7f00000000c0)=0xb0) 04:07:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x41}, 0x8) 04:07:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x81) 04:07:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000001140), &(0x7f0000001180)=0x4) 04:07:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x10}, 0x10, 0x0}, 0x0) 04:07:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)=')', 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 04:07:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000001c0), &(0x7f0000000280)=0x8c) 04:07:43 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) 04:07:43 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 04:07:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x0, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 04:07:46 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:07:46 executing program 1: socket(0x2, 0x3, 0x0) r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32], 0x3ef) 04:07:46 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/216) 04:07:46 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000300)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x14) 04:07:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x100, &(0x7f0000000180), &(0x7f0000000000)=0xb0) 04:07:46 executing program 5: open$dir(0x0, 0xc0e01, 0x0) 04:07:46 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:07:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x35, 0x0, 0x41}, 0x8) 04:07:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000380)='O', 0x1, 0x0, &(0x7f0000000480)={0x10, 0x2}, 0x10) 04:07:47 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8000, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:07:49 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x0, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000180)={0x0, 0x2, "62d5"}, &(0x7f00000001c0)=0xa) 04:07:49 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) 04:07:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000140)={0x1, [0x3]}, 0x6) 04:07:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000580), 0xc) 04:07:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000040), &(0x7f0000000100)=0x98) 04:07:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1016, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:07:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000)={0x1c}, 0x1c) 04:07:49 executing program 2: open$dir(&(0x7f0000000300)='./file0\x00', 0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 04:07:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f00000003c0), 0x4) 04:07:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x3}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @multicast}) 04:07:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 04:07:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x400, &(0x7f0000000000), &(0x7f00000001c0)=0xfcd3) 04:07:52 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f00000000c0)='N', 0x1) 04:07:52 executing program 1: r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x50a88, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2000) 04:07:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0xb) 04:07:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x3}) ioctl$SIOCSIFHWADDR(r0, 0x800454e0, &(0x7f0000000080)={'macvlan1\x00', @multicast}) 04:07:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x3}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 04:07:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000040)={'ip6_vti0\x00'}) 04:07:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x7, 0x0, 0x0, 0x101}, 0x48) 04:07:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:07:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x3, [@dev, @empty, @random="86851c472542"]}) 04:07:56 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d9, &(0x7f0000000080)={0x0, 0x3, [@dev, @empty, @random="86851c472542"]}) 04:07:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28}, {0x6}]}) 04:07:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 04:07:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x28}, {0x6}]}) 04:07:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x60}]}) 04:07:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaaaaaaaa0180c200001c91"]) close(r0) 04:07:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x8}, {0x4}, {0x6}]}) 04:07:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x400454c9, 0x0) 04:07:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaaaaaa0180c20000004d3e51"]) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 04:07:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaaaaaaaa0180c200001c91c2"]) close(r0) 04:07:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x300, &(0x7f0000000080)=[{}]}) 04:07:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:07:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x8}, {0x4}, {0x6}]}) 04:07:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x400454c9, 0x0) 04:07:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181, 0xb5}, 0x3) 04:07:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaaaaaaaa0180c200001c91c2"]) close(r0) 04:07:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) 04:07:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x2000, 0x0, &(0x7f0000000100), 0xc) 04:07:59 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000400), 0xc) 04:07:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaaaaaaaa0180c200001c91c2"]) close(r0) 04:07:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x8}, {0x4}, {0x6}]}) 04:07:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x400454c9, 0x0) 04:07:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x7001, 0x0, &(0x7f0000000100), 0xc) 04:08:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:02 executing program 1: open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) 04:08:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaaaaaaaa0180c200001c91c2"]) close(r0) 04:08:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x8}, {0x4}, {0x6}]}) 04:08:02 executing program 5: pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) readv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/242, 0xf2}], 0x1) 04:08:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300aaaaaaaeaaaa01a24200000002"]) ioctl$TUNATTACHFILTER(r0, 0x400454c9, 0x0) 04:08:02 executing program 1: poll(0x0, 0x24, 0x0) 04:08:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 04:08:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000}) close(r0) 04:08:03 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/210, 0xffffffffffffff21}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/97, 0x65}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000480)=""/30, 0xe}, {&(0x7f0000000500)=""/188, 0xbc}], 0x9) 04:08:03 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/35, 0x23}], 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 04:08:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 04:08:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000001180)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 04:08:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func, @restrict]}, {0x0, [0x0, 0x0]}}, &(0x7f00000000c0)=""/231, 0xfe86, 0xe7, 0x1}, 0x20) 04:08:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x8, 0x5, 0x1, 0x10, 0x1}, 0x48) 04:08:05 executing program 5: socketpair(0xa, 0x3, 0x1, &(0x7f0000000000)) 04:08:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x7}}, &(0x7f0000000600)=""/154, 0x1a, 0x9a, 0x1}, 0x20) 04:08:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000700)=""/4096, 0x28, 0x1000, 0x1}, 0x20) 04:08:06 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000700000000000061"], &(0x7f0000000080)=""/183, 0x28, 0xb7, 0x1}, 0x20) close(r0) 04:08:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @var]}}, &(0x7f0000000700)=""/4096, 0x42, 0x1000, 0x1}, 0x20) 04:08:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x8, 0x5, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x80) 04:08:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x207, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 04:08:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000680)=@raw=[@jmp={0x3}], &(0x7f00000006c0)='GPL\x00', 0x6, 0x8a, &(0x7f0000000700)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x25000000}]}}, &(0x7f0000000080)=""/221, 0x26, 0xdd, 0x1}, 0x20) 04:08:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x8, 0x5, 0x3400, 0x0, 0x1}, 0x48) 04:08:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0xff, 0x8006, 0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) 04:08:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 04:08:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000700)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 04:08:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x8, 0x5, 0x1, 0x2, 0x1}, 0x48) 04:08:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x160, 0x0) 04:08:09 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 04:08:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x82}, 0x0) 04:08:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 04:08:09 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'ip6tnl0\x00'}) 04:08:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={0x0, 0x82510000}}, 0x0) 04:08:12 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 04:08:12 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x5c, 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) 04:08:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 04:08:12 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 04:08:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 04:08:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25110000000600b500090200deab"], 0x74}}, 0x0) 04:08:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_FLAGS={0x8}]}, {0x208, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "52c23b36b55c9f442ef9e363f7c566c979ded3494ffd9dc90a5ca8967ddff861"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x33c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2e4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4f0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x444, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "11999302f0e988ee774aaa9d9183efba5917bec602c578548dbb98871efdab39"}]}, {0x458, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x454, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 04:08:12 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0xffffffffffffffff) 04:08:12 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 04:08:12 executing program 2: socketpair(0x1d, 0x0, 0x8, &(0x7f0000000000)) [ 1361.667292][T17700] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:15 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) 04:08:15 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 04:08:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 04:08:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100ddb282"], 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 04:08:15 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:08:15 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1456ff7678bb768f8d467e3651f2f4360a9d39ba19144beeca8415bc603844010e8c263540d3ef50e0b0f8de322c6655061343bcb7dd5cbb4bdc982dcc5be5c3"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000180)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0) 04:08:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 04:08:15 executing program 5: process_vm_readv(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/211, 0xd3}], 0x1, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0) 04:08:15 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:08:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 04:08:16 executing program 5: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:08:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 04:08:18 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:08:18 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) 04:08:18 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1456ff7678bb768f8d467e3651f2f4360a9d39ba19144beeca8415bc603844010e8c263540d3ef50e0b0f8de322c6655061343bcb7dd5cbb4bdc982dcc5be5c3"}, 0x48, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 04:08:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee01, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) 04:08:18 executing program 5: socketpair(0x26, 0x5, 0x7ff, &(0x7f0000000000)) 04:08:19 executing program 0: r0 = socket(0xa, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 04:08:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:08:19 executing program 1: r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, 0x0) 04:08:19 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:08:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000140)) 04:08:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:22 executing program 0: socket$inet(0x2, 0x6, 0x3f) 04:08:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 04:08:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 04:08:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 04:08:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) 04:08:22 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '403W'}, 0x0, 0x3, {0x0}}) 04:08:22 executing program 4: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="11", 0x1, 0xffffffffffffffff) 04:08:22 executing program 1: socketpair(0x38, 0x0, 0x0, &(0x7f0000003c80)) 04:08:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x5602, &(0x7f0000000540)) 04:08:22 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002100)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x4, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000037c0)=@abs, &(0x7f0000003840)=0x6e) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003980), 0x400882, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000003a40)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003a80), 0x640002, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003ac0), 0x4000, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000003cc0), 0x0) 04:08:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}, 0x8}, 0x0) 04:08:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffd91}}, 0x0) 04:08:25 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 04:08:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 04:08:25 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xe081, 0x0) 04:08:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:08:25 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r0, 0x9) 04:08:25 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) 04:08:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x82}, 0x0) 04:08:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, &(0x7f0000000700)=""/4096, 0x4a, 0x1000, 0x1}, 0x20) 04:08:25 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0x0) 04:08:26 executing program 2: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 1375.147940][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1375.154710][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 04:08:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:28 executing program 0: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 04:08:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x60}, 0x0) 04:08:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)) 04:08:28 executing program 5: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000003880)) 04:08:28 executing program 2: socketpair(0x0, 0x300, 0x0, 0x0) 04:08:28 executing program 2: add_key(&(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 04:08:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000300", @ANYBLOB='\f'], 0x28}}, 0x0) 04:08:28 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x48000) 04:08:28 executing program 5: ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0x31) 04:08:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xee01, r0) 04:08:29 executing program 2: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) 04:08:31 executing program 5: syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x4002) 04:08:31 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)=ANY=[]}) 04:08:31 executing program 0: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="11", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 04:08:31 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'permhat ', 0x0, 0x5e, ['@,\x00']}, 0x1e) 04:08:31 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x0, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:31 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) [ 1377.894494][T17829] AppArmor: change_hat: Invalid input '0' [ 1380.791114][ T24] audit: type=1400 audit(201326911.979:49): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17841 comm="syz-executor.1" 04:08:32 executing program 4: mknod(&(0x7f00000010c0)='./file0\x00', 0x0, 0x0) geteuid() 04:08:32 executing program 5: socket(0x0, 0x0, 0x40) 04:08:32 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="70023d020b"], 0x1) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) connect$unix(r0, &(0x7f0000000000)=ANY=[], 0x10) recvfrom$unix(r0, &(0x7f0000000040)=""/48, 0x30, 0x0, 0x0, 0x0) 04:08:32 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$inet6(0x22, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9001d507", 0x190, 0x0, 0x0, 0x0) 04:08:32 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) r1 = socket$inet6(0x22, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9001d502", 0x190, 0x0, 0x0, 0x0) 04:08:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:32 executing program 2: r0 = syz_clone(0xd0108000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x2, &(0x7f0000000040)={'team0\x00'}) 04:08:32 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2, [], 0x68}}, &(0x7f0000000180)=""/230, 0x1a, 0xe6, 0x1}, 0x20) 04:08:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, &(0x7f0000000180)=""/230, 0x32, 0xe6, 0x1}, 0x20) 04:08:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000180)=""/230, 0x26, 0xe6, 0x1}, 0x20) 04:08:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x0, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x6, 0x0, 0x0, 0x200}, 0x48) 04:08:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3f, 0x7, 0x8e9}, 0x48) close(r0) 04:08:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000a00)='cgroup.kill\x00', 0x0, 0x0) 04:08:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/152, 0xfd88, 0x98, 0x1}, 0x20) 04:08:35 executing program 2: r0 = syz_clone(0xd0108000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x2, &(0x7f0000000040)={'team0\x00'}) 04:08:35 executing program 5: syz_clone(0xd0108000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:08:35 executing program 0: syz_clone(0xd0108000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 04:08:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3f, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 04:08:35 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x3, &(0x7f0000001fc0)=@framed={{0x21}}, &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1384.486501][T17900] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:36 executing program 2: pipe(&(0x7f0000000b40)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 04:08:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x0, 0x1, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, 0x0, 0x0) 04:08:38 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000440)) 04:08:38 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1e, 0x0, &(0x7f0000000400)) 04:08:38 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x1d, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 04:08:38 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:38 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x3, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x7}}, &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x3, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8510}}, &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 04:08:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback}}}}) 04:08:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) [ 1389.331372][T17926] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1389.395605][T17917] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:41 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:41 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ea000000e1a40b0813e8a30850001837a7585e4c638bcc6000000000000098ff7ff9ad5e571bc6562a7efa9efe65e6fc7948399dd63200000000bb3294a367594afb", @ANYRESHEX], 0x38}}, 0x240400a0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="e5"], 0x14}}, 0x0) 04:08:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 04:08:41 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:41 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001940)='highspeed\x00', 0xa) 04:08:42 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r0, 0x88, 0x0, 0x0, 0x0) [ 1390.885241][T17951] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) 04:08:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x3, &(0x7f0000001fc0)=@framed={{}, [], {0x95, 0x5}}, &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001100)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) write(r0, &(0x7f00000000c0)="240000001a005f0214f9f4070009040800000000000000000000000008000f0000000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000008a00a5050000000077e9d8f3b423cdacfa7e32fe023136f9f65515b0e1a38d8d65522be08bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d8a7535f76907dc6751dfb265a0ae669e173a649c1cf96574d452d64e3cc957d77578f4c15235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfec2efd045b5b50922dca79afb7eeb73ec79c66c54c33283ba58d31a20a2251258f8a97db00fab5e2658d496c01085c8e09aa88100002aefce2cff42cf5558624bbddf18b041c7ccdd904b158094737d54202c06dccdd7854115b2ca8600fb1e4e37b082701756d6b2464a86590506587d60f382c2de2b4ccbbf7747d8b4ded75135857e5afdf1cbcecf39e97e0e9927ff7f0000f94931b632f1810bd098ec9255d4997c5fccd4f4e68dafb59d6af5e99ba0c7735965611c62f397b14b58f81da8f92d48c264663ed40e0573029b660549419bfb941482094840e6e04c56424da000ec3d28f148db3454345477e4f33ed978c173c8cba700000000000000fcf17148e2080000009c86ab0b4f138b5f932bf92d0b5a765051b1496e7ce9710e8c50752d4e251af4b631ba0bf50748395febcb907cb130fe6bcd4c6fd440b99af906706c3ffc315e37f3dc39a16814324c39d1fd364ea635a69061290e2a871f2d906442ba5f467bea5cfe5efbdbc015402884ed26d2f807829b076ff1ba237fc86dc673ed884ce96c044c808e03310ffa1fb199d2558beab87556ca320afa12680fa80505dedb3d964ad17597fe0d2a6f93fbe748b73842abced00f0d08726725f69ed669023d565054a8981f21466a110d2ffe85fa9813a632ed42832c589f18165b2c3e67c2bddc51e1d6332b362148000000000000000000000004dde5942dc8af812192d41d078080f02e2afac29e54488bf7ba12590c23ec7a34ca80c5955e22095961b635a097915ca1ace06b2f8cd3d9657ab6725aa30c0314e3760c2623b29ead4ed2464704a96bd77d8932fdd197e5948581814b33e7706081c0d2d7a4bcd000000000009c36bebd44ba2c310989f7b8f1e4b6e119058e24c08e46ddf684ede5937fe3f95afd93dc89c3abf1d2bc703efd75bc17165259ace44ca36843d15d16ac3f1f0c9f3082"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='9p_client_req\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f000000a080)={'veth1_to_batadv\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @nfc={0x27, 0x0, 0x1, 0x5}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xa}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="4b273cdfbed20b64bfca3b04d8bf8caa506421a8b628c95dc205e18223d1d80129d60fff7f1910cab9286b10db7607baa600d3b1093e8429b2f3dbcd21eae77b77c56b1c37e7c52044b9809b9e0000008000000000ae69c8f52c35684fda09d689c2a406031bb09376eb0000fab82d02fbe5df1979f39dd60cfd7bc9036a3519d052a7000000000000000000000000000000000000000000000da13643753cb539aa262ad0bbdde66a8dfd84df43244b2ec0b15d23a69c3eba07c38018a2652251e724cb70b8aa4462eda5335609f2f036e979fe44fe15a73927f1c56f"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000029c0)={{}, r6, 0xc, @unused=[0x3, 0x1, 0x10001, 0x7fffffffffffffff], @name="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"}) 04:08:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x1, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4}}}]}]}, 0x4c}}, 0x0) [ 1393.030626][T17947] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1393.251023][T17946] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x0) 04:08:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x0) 04:08:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001100)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) write(r0, &(0x7f00000000c0)="240000001a005f0214f9f4070009040800000000000000000000000008000f0000000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='9p_client_req\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f000000a080)={'veth1_to_batadv\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @nfc={0x27, 0x0, 0x1, 0x5}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xa}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="4b273cdfbed20b64bfca3b04d8bf8caa506421a8b628c95dc205e18223d1d80129d60fff7f1910cab9286b10db7607baa600d3b1093e8429b2f3dbcd21eae77b77c56b1c37e7c52044b9809b9e0000008000000000ae69c8f52c35684fda09d689c2a406031bb09376eb0000fab82d02fbe5df1979f39dd60cfd7bc9036a3519d052a7000000000000000000000000000000000000000000000da13643753cb539aa262ad0bbdde66a8dfd84df43244b2ec0b15d23a69c3eba07c38018a2652251e724cb70b8aa4462eda5335609f2f036e979fe44fe15a73927f1c56f"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000029c0)={{}, r6, 0xc, @unused=[0x3, 0x1, 0x10001, 0x7fffffffffffffff], @name="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"}) 04:08:45 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:46 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44880) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c) unshare(0x12000200) sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0xc0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x3f, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xdd6e426b6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000440)) 04:08:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 04:08:46 executing program 2: io_uring_setup(0x1584, &(0x7f00000001c0)={0x0, 0x51d1, 0x0, 0x1, 0x3b1}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/53, 0x35}, {0x0}, {&(0x7f0000000ac0)=""/104, 0x68}, {0x0}, {&(0x7f0000000d00)=""/197, 0xc5}], 0x5) 04:08:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001100)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) write(r0, &(0x7f00000000c0)="240000001a005f0214f9f4070009040800000000000000000000000008000f0000000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='9p_client_req\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f000000a080)={'veth1_to_batadv\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @nfc={0x27, 0x0, 0x1, 0x5}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xa}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="4b273cdfbed20b64bfca3b04d8bf8caa506421a8b628c95dc205e18223d1d80129d60fff7f1910cab9286b10db7607baa600d3b1093e8429b2f3dbcd21eae77b77c56b1c37e7c52044b9809b9e0000008000000000ae69c8f52c35684fda09d689c2a406031bb09376eb0000fab82d02fbe5df1979f39dd60cfd7bc9036a3519d052a7000000000000000000000000000000000000000000000da13643753cb539aa262ad0bbdde66a8dfd84df43244b2ec0b15d23a69c3eba07c38018a2652251e724cb70b8aa4462eda5335609f2f036e979fe44fe15a73927f1c56f"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000029c0)={{}, r6, 0xc, @unused=[0x3, 0x1, 0x10001, 0x7fffffffffffffff], @name="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"}) 04:08:46 executing program 2: r0 = io_uring_setup(0x1584, &(0x7f00000001c0)) io_uring_enter(r0, 0x2d23, 0x0, 0x0, 0x0, 0x0) 04:08:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 04:08:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001100)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) write(r0, &(0x7f00000000c0)="240000001a005f0214f9f4070009040800000000000000000000000008000f0000000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='9p_client_req\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f000000a080)={'veth1_to_batadv\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @nfc={0x27, 0x0, 0x1, 0x5}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xa}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="4b273cdfbed20b64bfca3b04d8bf8caa506421a8b628c95dc205e18223d1d80129d60fff7f1910cab9286b10db7607baa600d3b1093e8429b2f3dbcd21eae77b77c56b1c37e7c52044b9809b9e0000008000000000ae69c8f52c35684fda09d689c2a406031bb09376eb0000fab82d02fbe5df1979f39dd60cfd7bc9036a3519d052a7000000000000000000000000000000000000000000000da13643753cb539aa262ad0bbdde66a8dfd84df43244b2ec0b15d23a69c3eba07c38018a2652251e724cb70b8aa4462eda5335609f2f036e979fe44fe15a73927f1c56f"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000029c0)={{}, r6, 0xc, @unused=[0x3, 0x1, 0x10001, 0x7fffffffffffffff], @name="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"}) [ 1396.946457][T17993] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:08:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 04:08:48 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x3, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:48 executing program 5: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 1397.750945][T18006] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0), 0x14) 04:08:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 04:08:49 executing program 5: r0 = io_uring_setup(0x1584, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/248, 0xf8}, {0x0}], 0x2) 04:08:49 executing program 1: r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 04:08:49 executing program 2: socketpair(0x18, 0x0, 0x3, &(0x7f0000000080)) 04:08:49 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 04:08:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1800, &(0x7f00000000c0)=@raw=[@ldst], &(0x7f0000000140)='GPL\x00', 0x6, 0xa5, &(0x7f0000000180)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:50 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 04:08:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x3, 0x200fff, 0x0, 0x1}, 0x48) 04:08:51 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x0, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000380), 0x4) 04:08:51 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 04:08:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) 04:08:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x11) 04:08:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1800, &(0x7f00000000c0)=@raw=[@ldst], &(0x7f0000000140)='GPL\x00', 0x6, 0xa5, &(0x7f0000000180)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:51 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0xb) 04:08:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x36647a8d0af755f6, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 04:08:51 executing program 0: socketpair(0x3, 0x0, 0x180000, &(0x7f0000002900)) 04:08:51 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002500)=ANY=[@ANYBLOB="10010000130001", @ANYRESDEC=r1, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES32, @ANYBLOB="6e9f8b9860ac71654a8ace1ebf005387e5561e9c1b04a483660ed6bfbb40a5c5a9bd8fb238767ab824821adb6df366f5727792be49e667764f268a3364c18b201742cccbb7e356cb3cb275bc17f20fe6f9fed0bc43898bae39050ee2c2c3127a08199d61e23b45b4e18ac803925dcd1f11b6067b0174f3dd40b17b9adb920704a72c41390415f076754a9ac1aae3e8c88f932e0a9e782515cb3dae819e66448a68fcf3bee0"], 0x110}}, 0x0) 04:08:51 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x19, 0x0, 0x0) 04:08:52 executing program 5: r0 = socket(0x22, 0x2, 0x3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20008000) [ 1400.980018][T18072] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x0, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:54 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x77359400}, 0x0) 04:08:54 executing program 0: r0 = socket(0x1e, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/67, 0x43}], 0x1}, 0x0) 04:08:54 executing program 1: bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0) 04:08:54 executing program 2: socket(0x23, 0x0, 0x10000) 04:08:54 executing program 5: r0 = socket(0x1e, 0x1, 0x0) recvmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 04:08:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r4, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:08:55 executing program 5: r0 = socket(0x1e, 0x1, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) 04:08:55 executing program 2: bpf$BPF_GET_PROG_INFO(0xc, 0x0, 0x0) 04:08:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 04:08:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r4, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:08:55 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x404580, 0x0) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 04:08:58 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x0, 0x3, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:08:58 executing program 5: select(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0x7fff}, 0x0) 04:08:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r4, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:08:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002140)={0x14}, 0x14}}, 0x0) 04:08:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009cb0ab05fd5c2f8da26a4fd624cf65195aa96a20b4e982b6587c00000000d7c0d1131bf7205461"], 0x53) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:08:58 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:08:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) 04:08:58 executing program 5: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 04:08:58 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r0) 04:08:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r4, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:08:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}}, 0x0) 04:08:58 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x404580, 0x0) 04:09:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) 04:09:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:09:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:09:01 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x8040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 04:09:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 04:09:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009cb0ab05fd5c2f8da26a4fd624cf65195aa96a20b4e982b6587c00000000d7c0d1131bf7205461"], 0x53) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:09:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009cb0ab05fd5c2f8da26a4fd624cf65195aa96a20b4e982b6587c00000000d7c0d1131bf7205461"], 0x53) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:09:01 executing program 0: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000780)=""/195) 04:09:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 04:09:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:09:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 04:09:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) 04:09:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x9, 0x1, 0x4, 0x8000, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x0, 0x2, 0x6, 0x7, 0xe, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x800, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x2, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 04:09:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:09:04 executing program 0: socketpair(0x10, 0x3, 0x1c, &(0x7f0000000500)) 04:09:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009cb0ab05fd5c2f8da26a4fd624cf65195aa96a20b4e982b6587c00000000d7c0d1131bf7205461"], 0x53) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:09:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000540)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 04:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009cb0ab05fd5c2f8da26a4fd624cf65195aa96a20b4e982b6587c00000000d7c0d1131bf7205461"], 0x53) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:09:04 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000500)) 04:09:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r3, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:09:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 04:09:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x11a, 0x4, 0xa}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 04:09:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000030000000050033000700000008000200", @ANYRES32=r3, @ANYBLOB="0500360000000000050035"], 0x34}}, 0x0) 04:09:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b0ff07c66b0d698cb89e07e007ca", 0x0, 0x30, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1414.381163][T18189] ===================================================== [ 1414.388515][T18189] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x476/0x3610 [ 1414.395844][T18189] ip_tunnel_xmit+0x476/0x3610 [ 1414.400658][T18189] ipgre_xmit+0xd4c/0xe20 [ 1414.405141][T18189] xmit_one+0x1de/0x6a0 [ 1414.409355][T18189] dev_hard_start_xmit+0xe5/0x370 [ 1414.414524][T18189] __dev_queue_xmit+0x1df2/0x2ed0 [ 1414.419599][T18189] dev_queue_xmit+0x2b/0x30 [ 1414.424248][T18189] __bpf_redirect+0xc91/0x1420 [ 1414.429088][T18189] bpf_clone_redirect+0x324/0x470 [ 1414.434346][T18189] ___bpf_prog_run+0x7f7/0xac10 [ 1414.439297][T18189] __bpf_prog_run512+0xc2/0x110 [ 1414.444302][T18189] bpf_test_run+0x592/0xd20 [ 1414.448902][T18189] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1414.457158][T18189] bpf_prog_test_run+0x6a0/0x730 [ 1414.462325][T18189] __sys_bpf+0x7e3/0xe90 [ 1414.466626][T18189] __ia32_sys_bpf+0x9c/0xe0 [ 1414.471202][T18189] __do_fast_syscall_32+0x95/0xf0 [ 1414.476450][T18189] do_fast_syscall_32+0x33/0x70 [ 1414.481358][T18189] do_SYSENTER_32+0x1b/0x20 [ 1414.486064][T18189] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.492543][T18189] [ 1414.494878][T18189] Uninit was created at: [ 1414.499190][T18189] __kmalloc_node_track_caller+0x86c/0x1230 [ 1414.505442][T18189] pskb_expand_head+0x1aa/0x1a00 [ 1414.510474][T18189] skb_ensure_writable+0x3ce/0x460 [ 1414.515814][T18189] bpf_clone_redirect+0x17b/0x470 [ 1414.521078][T18189] ___bpf_prog_run+0x7f7/0xac10 [ 1414.526198][T18189] __bpf_prog_run512+0xc2/0x110 [ 1414.531118][T18189] bpf_test_run+0x592/0xd20 [ 1414.535831][T18189] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1414.541337][T18189] bpf_prog_test_run+0x6a0/0x730 [ 1414.546470][T18189] __sys_bpf+0x7e3/0xe90 [ 1414.550756][T18189] __ia32_sys_bpf+0x9c/0xe0 [ 1414.555473][T18189] __do_fast_syscall_32+0x95/0xf0 [ 1414.560542][T18189] do_fast_syscall_32+0x33/0x70 [ 1414.565642][T18189] do_SYSENTER_32+0x1b/0x20 [ 1414.570192][T18189] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.576732][T18189] [ 1414.579070][T18189] CPU: 0 PID: 18189 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 1414.589427][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.599629][T18189] ===================================================== [ 1414.606829][T18189] Disabling lock debugging due to kernel taint [ 1414.613099][T18189] Kernel panic - not syncing: kmsan.panic set ... [ 1414.619635][T18189] CPU: 0 PID: 18189 Comm: syz-executor.0 Tainted: G B 5.18.0-syzkaller-16269-geb5e8c791e57 #0 [ 1414.631221][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.641654][T18189] Call Trace: [ 1414.644957][T18189] [ 1414.647917][T18189] dump_stack_lvl+0x1c8/0x256 [ 1414.656993][T18189] dump_stack+0x1a/0x1c [ 1414.661179][T18189] panic+0x4d3/0xc69 [ 1414.665182][T18189] ? get_taint+0x1/0x50 [ 1414.669410][T18189] ? add_taint+0x104/0x1a0 [ 1414.673861][T18189] ? console_unlock+0x1c70/0x20c0 [ 1414.678975][T18189] kmsan_report+0x2cc/0x2d0 [ 1414.683528][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.688705][T18189] ? kmsan_get_shadow_origin_ptr+0x85/0xf0 [ 1414.694554][T18189] ? __msan_warning+0x92/0x110 [ 1414.699407][T18189] ? ip_tunnel_xmit+0x476/0x3610 [ 1414.704392][T18189] ? ipgre_xmit+0xd4c/0xe20 [ 1414.709204][T18189] ? xmit_one+0x1de/0x6a0 [ 1414.713585][T18189] ? dev_hard_start_xmit+0xe5/0x370 [ 1414.718824][T18189] ? __dev_queue_xmit+0x1df2/0x2ed0 [ 1414.724138][T18189] ? dev_queue_xmit+0x2b/0x30 [ 1414.728846][T18189] ? __bpf_redirect+0xc91/0x1420 [ 1414.733834][T18189] ? bpf_clone_redirect+0x324/0x470 [ 1414.739262][T18189] ? ___bpf_prog_run+0x7f7/0xac10 [ 1414.744348][T18189] ? __bpf_prog_run512+0xc2/0x110 [ 1414.749412][T18189] ? bpf_test_run+0x592/0xd20 [ 1414.754287][T18189] ? bpf_prog_test_run_skb+0x1625/0x20b0 [ 1414.759955][T18189] ? bpf_prog_test_run+0x6a0/0x730 [ 1414.765096][T18189] ? __sys_bpf+0x7e3/0xe90 [ 1414.769536][T18189] ? __ia32_sys_bpf+0x9c/0xe0 [ 1414.774257][T18189] ? __do_fast_syscall_32+0x95/0xf0 [ 1414.779508][T18189] ? do_fast_syscall_32+0x33/0x70 [ 1414.784565][T18189] ? do_SYSENTER_32+0x1b/0x20 [ 1414.789278][T18189] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.795838][T18189] ? __module_address+0x49/0x5b0 [ 1414.800907][T18189] ? ip_tunnel_xmit+0x7e/0x3610 [ 1414.805875][T18189] ? filter_irq_stacks+0x5c/0x1a0 [ 1414.810930][T18189] ? __stack_depot_save+0x21/0x4b0 [ 1414.816114][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.821373][T18189] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1414.827666][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.832829][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.837987][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.844013][T18189] __msan_warning+0x92/0x110 [ 1414.848643][T18189] ip_tunnel_xmit+0x476/0x3610 [ 1414.853432][T18189] ? do_SYSENTER_32+0x1b/0x20 [ 1414.858147][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.863296][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.869151][T18189] ? kmsan_get_shadow_origin_ptr+0x71/0xf0 [ 1414.875009][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.880161][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.886014][T18189] ipgre_xmit+0xd4c/0xe20 [ 1414.890390][T18189] ? ipgre_close+0x240/0x240 [ 1414.895207][T18189] xmit_one+0x1de/0x6a0 [ 1414.899390][T18189] dev_hard_start_xmit+0xe5/0x370 [ 1414.904443][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.909592][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.915449][T18189] __dev_queue_xmit+0x1df2/0x2ed0 [ 1414.920511][T18189] ? skb_release_data+0xf5f/0x1130 [ 1414.925674][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.930939][T18189] dev_queue_xmit+0x2b/0x30 [ 1414.935480][T18189] __bpf_redirect+0xc91/0x1420 [ 1414.940383][T18189] bpf_clone_redirect+0x324/0x470 [ 1414.945471][T18189] ___bpf_prog_run+0x7f7/0xac10 [ 1414.950384][T18189] __bpf_prog_run512+0xc2/0x110 [ 1414.955280][T18189] ? should_fail+0x3f/0x7e0 [ 1414.959828][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.964977][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.970830][T18189] ? should_fail+0x3f/0x7e0 [ 1414.975352][T18189] ? bpf_test_run+0xf0/0xd20 [ 1414.979967][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.985117][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1414.990973][T18189] ? kmsan_get_metadata+0x33/0x220 [ 1414.996121][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1415.002579][T18189] ? kmsan_get_metadata+0x4d/0x220 [ 1415.007732][T18189] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1415.013603][T18189] ? __bpf_prog_run480+0x110/0x110 [ 1415.018779][T18189] bpf_test_run+0x592/0xd20 [ 1415.023336][T18189] bpf_prog_test_run_skb+0x1625/0x20b0 [ 1415.028846][T18189] ? __bpf_prog_test_run_raw_tp+0x380/0x380 [ 1415.034791][T18189] bpf_prog_test_run+0x6a0/0x730 [ 1415.039783][T18189] __sys_bpf+0x7e3/0xe90 [ 1415.044048][T18189] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1415.050348][T18189] __ia32_sys_bpf+0x9c/0xe0 [ 1415.054902][T18189] __do_fast_syscall_32+0x95/0xf0 [ 1415.060049][T18189] do_fast_syscall_32+0x33/0x70 [ 1415.064931][T18189] do_SYSENTER_32+0x1b/0x20 [ 1415.069462][T18189] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.075837][T18189] RIP: 0023:0xf7f11549 [ 1415.079915][T18189] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1415.099553][T18189] RSP: 002b:00000000f7f0c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1415.107999][T18189] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 1415.115988][T18189] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.123973][T18189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.131960][T18189] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1415.139943][T18189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.147942][T18189] [ 1415.151182][T18189] Kernel Offset: disabled [ 1415.157134][T18189] Rebooting in 86400 seconds..