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", 0x1000}], 0x4, &(0x7f0000006b80)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff801}}], 0x60}}], 0x6, 0x40000) sendmsg$nl_route(r4, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)=@newlink={0x30, 0x10, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x400, 0x8000}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 3536.125760][T23876] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 3536.218304][T23888] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3536.252260][T23890] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:04 executing program 0: syz_emit_vhci(0x0, 0x18) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x81, 0x0, 0x804, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_emit_vhci(0x0, 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6655737400000600050000000000"], 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x6, 0x1000, {{0x11, 0x4, 0x3, 0x37, 0x44, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x18, 0x96, 0x0, 0x4, [0x6b2, 0x3ff, 0x5, 0x5, 0x8000]}, @cipso={0x86, 0x16, 0x0, [{0x7, 0x5, "947262"}, {0x7, 0x6, "74bc6f42"}, {0x0, 0x5, "a38599"}]}]}}}}}) (async, rerun: 64) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x20, 0x1097, 0x59, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x0, 0x0, 0x1}}) (async, rerun: 32) r9 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@RTM_NEWMDB={0xf8, 0x54, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x11}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x3, {@ip4=@private=0xa010100, 0x86dd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10000841}, 0xc0) [ 3536.385336][ T5020] Bluetooth: hci5: Unable to find connection with handle 0x00c8 04:04:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r7, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r8, @ANYBLOB="02"], 0x20}}, 0x0) sendto$inet6(r4, &(0x7f0000001400)="5f8b200c5ff3786401e63fc32f0b337f18e3866a951d16d28aa1c05f756fdd2b1ca4b8069fca406d4258cb7b78a363d1455c4ede72d8f9b82fdb6af595e987ca77d8761cd736e1", 0x47, 0x20008000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000010000104000000004b1c32637af281b3bf720000000000480000", @ANYRES32=r8, @ANYBLOB="0b2a020000000000"], 0x20}, 0x1, 0x1000000000000}, 0x0) [ 3536.583144][T23898] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3536.803345][T23903] sctp: [Deprecated]: syz-executor.3 (pid 23903) Use of int in maxseg socket option. [ 3536.803345][T23903] Use struct sctp_assoc_value instead [ 3536.852094][T23903] sctp: [Deprecated]: syz-executor.3 (pid 23903) Use of int in maxseg socket option. [ 3536.852094][T23903] Use struct sctp_assoc_value instead [ 3536.878365][T23903] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:07 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_disconnect(r0) (async, rerun: 32) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xf4, &(0x7f0000001080)={[{0xda, 0x4e00, "d572e2369c006f374bbd0946375455196026abee368039604dc1d8850ce1014f4aee47211118e1ae8848977458c9226e1c02aac47a6d9a64b8278d1c995760a61eaa632222b37b808969b3c6e51ff9da162aff2f2dd843da275f18bdef25a4d533fdc8bb5729bc7b87eba48372e3d82094a4991febaa5a5ca3171eda7eecde191259fab1217be19348b8d477033db6875ffe6bfe2f2a5792b2e34eac4457fe95e6f57e658fe887669171b1ef3b76d7d1ade6849e0e580ffb3a8d4893468e22720e964c35dfaeb7a9b478ed1a70ed195a26708d1d9ca3bbf50093"}, {0xd, 0x4e00, "a256e7e9ee8baaec206261be95"}]}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3fc, &(0x7f0000000bc0)={[{0x79, 0x4e00, "04f7764fb39c7b999a8f0015b2e8a64af95f81a3a7a74fc937152db025b6eb0ae8d37fb18bd5913f3cdeb10e550ba800053d9a17269eb44ef3b8ad219e62ad9cf1caf2d74a3bd94695e8be43a186d649867225858af4228b7eb808b327f7306c39b3d9d8affbedba1df8bd1709bd877983ddd07e20fbd4e808"}, {0x6, 0x4e00, "81b961fe369b"}, {0x25, 0x4e00, "67fd5ca5c186d182eb31e2ac70e04c668c49f7aa9bfe272fe34e66fd1cce68c36e94d6d38e"}, {0x79, 0x4e00, "3f0997daa397d3c09729c126ba2d747308a906775b04689eefd8d6332af3a80c2b5411528e4ee6601b0b1d6e22161fbbeaad890a96f89de6ec0868408e6cd70e18aa438069f3229b1335eab1d8bf2537c3fb83c8e6e615674c6a1e0aadb05321024147dd5dd2edca27a2c76eee4bfc93eecbafc5c123288678"}, {0xa0, 0x4e00, "45925619724c756d4dd78853e64b9d4b811d1938423900c4a7d2e9010c9b3cba0545a5c663423897fe541c5e80aa99eb087e677896f301619f5a4f3d7a1a770c016dda8e765599d0167fa762e45b648a7c5310e9cd079ac9cce91c71421fa198a1cda96f3531267686d68c6480fa62480288cb162b5ad80cbc30fb3359c90b2b0a94ff575816797572ba258a2cdc9a7f5a9d5b283a7902596986dbf9007199d2"}, {0xeb, 0x4e00, "ffb39764e53c07660d032be72ab396b800a53cca260ea7bcc88bc3d2b9c66a180bd0a4e35fe6cc21c5af3e1bbc27bdf02e14dbf713b384c64f9257f91b38466f5283b22c23fb8560f35c863b042e9684df8930db97ea319b986f3bd7f0889f19c16239af20edbb49fba9592b0df43963a47392ae65c57279bd26ea8fdbbde8741ef69f877e80895f72e69cdee029cceb170eb814a7671b785913d4d05e3667a119f678aca5ea07e953aebe1ec11e5bcba4f0bc267a4fbb20677be196e6391bbc8fef9bdc5ca672cdef590c5a453f4cefc0611d56cf892422c7575758449e22481db4d56ffb5fe306b66e58"}, {0x53, 0x4e00, "ff4d9612b85f0b3d71a6def3d964058b966d15bb53e65282bfe0e209b9c97e9194a7eff388b9181d473b3d02d82993e48758573ed12828fb08bb189d15f24f1bb070051732008731c5e4e9ef2d73acb093fa4b"}, {0xa7, 0x4e00, "54e48fee571c9a0f2a80bb41f374e3c58c5c329b5689c8924c5f113858892decb485ecea798081f98b47f45faab5397c4ce6382a84b3e6e29662944d82a53bb38b3cf2e62f659b5839207a8c96a79956b99a0b47666f74da3306fcead77c3f3810f95b85c4ed65233b7797cc24b29eade4445b6aab2b12d9278dbe07b0b2e4163c3193c82644744ec67ee1675735f4d2289ca104795bcefbf548154b85f2b623a455eecede4080"}, {0x2, 0x4e00, "f043"}, {0x1d, 0x4e00, "8ac0b4a7d7d19bb932433188cfeb556d2824880df8db54f04e40d835c8"}]}) (async, rerun: 32) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1477, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x439}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x5, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x70, 0x9, 0x20}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x2, 0x7, 0x8, 0x9}, 0xee, &(0x7f0000000080)={0x5, 0xf, 0xee, 0x2, [@ptm_cap={0x3}, @generic={0xe6, 0x10, 0xa, "3481048db0021aaa7c49dff6852b544dd99a5a685cc3113dcc793de1f1629a97a9c054fb22aeabc7efe954543d6d026d3f2e872e229c14b7a67d437ae534dd40b2a0a66d0902a8ea080f3c962263321d41367c42ac45cb8fc28ca11d4dc4f8e57ae95b4210da827b26638e274231870d4aaf49c1ea3ce34fd25c9caf1f5ddfb1270a5ad8050763694ab5a94fd4b30bb847204f90f11e060c68eb2de30c665c232ef215e8b12b624e1bc2c81498ba524acf00a7712b844e6422463f8669aed9b17086ed066d1e78d70f902786871664a05ed7fe37e2c4855cf5d78ce8bb7371c956a157"}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x404}}, {0x5e, &(0x7f0000000240)=@string={0x5e, 0x3, "476493dab0aabefff664d4646eccdc94fd1478e8331f4cafd6a236022bb36256ed8850aa060eab02ebda8528a74b38ac2cf36006715eb31fdae5161066912fbc89018e1f65b902846a8d60ebddedefc7c1fd261a3b0052c0f4b49c3b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x80, &(0x7f0000000340)=@string={0x80, 0x3, "e8ec77933652eac7cacf35ee1975f6289d8bd614308a3a9d50e13d08c3e7d5a69f0d1719d1335aba0a49b81e1286920981253fe547c279703f1d1bd4bfadd3fc0c0743d783ffa7810d8095ef42a80725df5280755aed052d12bfb14a174ce092d52c8308ea4264c9321f0efc6c6febbca9e81c4a63b75a4073d79f2f4c24"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "62d3c3ac2f144737116cdd7e5fcb0965832459f27b664ce79428f2a250e00b658782da40c72ca8deb0744807a7750284a64c5070486ad1bc4839440991a024ca8c1bcbbb03e6bcf25f6515f98aaceba7d2c87b09a1d393e09ffedd5587da69488427d7d2ff59968f989ec290e4ceee840b0764b398f076c29db5caf2ceecf645d4c12ab3fe5f5545f88b99ef923db39bcabe4ffb893bf30f5091f94ee751fc03777e4143d79f6ca72aa1c1bcc2e0c01daf0e47b7ba8b52b41937a3c1539cee40bdea2552f814724e796a150aec"}}, {0x42, &(0x7f00000004c0)=@string={0x42, 0x3, "1830e3c70d83de84688c974b041d7aa74b5f84aa2f91363bd4e607068411a6f3f074519509b71f357e932400993614f6ef93357fe0742f672623d6559d8a405a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41e}}, {0xdf, &(0x7f0000000580)=@string={0xdf, 0x3, "5dfc846b33f5926731c04f9f953ffd7dd91d049efbce2d9c1b959311fca986229fcc560c9849c32cb5ff4afada58aa4fa7638269b0b4f113a3e220a34594f09648da7fe6a2c234bb84ee7b6a293438163844c3b6d9d9aec51b1e3793334739579eb9f5b9325c51e79c62c811d8a9e2e964a09505ef21f93717173b4f0a5c53a48e84ca17655ae7026a7befea42646e04b1d433fe616394a73bca4565bed2602c252b4922cb9e0a9ed609b4e1a68eb56cf89875f0d857fcf2b6c174bc086f3766e1a9403fac54d9b34d1efd3d04ac7b103ea0c7d53fbaca888867479104"}}, {0xbd, &(0x7f0000000680)=@string={0xbd, 0x3, "ffd839decbb03da892641b9cc1a15abd796cc213a653140a67f42cb3703b6e6afb5954450c4eda4797b960f08047d922d2577271610752187bd79b7f27152901e2084703c5004dab170103fdb8536e3ee9300e66d8bc9acce54c6f0629767940dba40d191288b5bfd2f667db5701ce14a7a5884b25e78eaeff55c752be5d2ab88925ce1b615c8906e34bdf71e4bb825f462ef73dd9a8a258e4cc99cd21e327f3f641b9cf7c3cc4f31afdf8416ac2699e1831b5be3823630c0c4f83"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000b00)={0x24, &(0x7f0000001180)={0x0, 0x24, 0xe5, {0xe5, 0xf, "7123bc0afa37a7d7a56f00000000a343437f5fc7856c35ac1826a5b521c90101fbd05673e7f3db761229afd75af04d543e93d181f6ac5a8fcdb02d4b5e8ce4657dbcb76d0497e5098f0d529ff90528551241506fdce8a690a050845adfb94c963606bca0e9ea954ca8bb693056d94557d16e5847f4472e22ea1e634789f0e1801aabc3184b0120ad74c1886af0e0e036b557dbdcf2c34b19a1b09d8e181e7405db78f2c11b2dcac5493045bb4b104b34c122ebd69c1a850f4363460d906d995658c7691c05f73b36fc0f0b3aefc2ff31016436f1bb635680e5feb816da121979673832"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000800)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x2, "b788266b"}, @local=@item_4={0x3, 0x2, 0x5, "68906cce"}, @local=@item_012={0x2, 0x2, 0x5, "1d12"}, @local=@item_4={0x3, 0x2, 0x1, "3f74e9d3"}, @main=@item_4={0x3, 0x0, 0x8, "8622f1dc"}, @local=@item_4={0x3, 0x2, 0x8, "4021b922"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc000, 0x4, 0x1, {0x22, 0x612}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x40, 0x10, 0x30, "5fcb9913d87dde8d184efd9eea074f3b3648bd27209c49fd771e99f54788f8065a4fb552c74000065ea1a2dfa7f17870"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a00)={0x20, 0x1, 0x3c, "000a431dfed378f3f4a751877779b802f79c911dee8777f6aba78ab1cd58232faf0fdcb1c32c94f8bf41d11a80d1d4862da820f4cc748d2ee42f3de0"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x40}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc0, &(0x7f0000000fc0)={[{0x6a, 0x4e00, "173262515e29b9e08fa31ec8a282d28cdce70f246e6a2c0035b738b64bf6dffd7a2545705d6f497afda47f09741b090e2c0a3056740a21573df87433159a80c452c22df2277a2a71993901648df47a7712a7f0582f6ab6da9394a7420c45cb440d5f78b586de60abcd05"}, {0x49, 0x4e00, "6325fd5289523eb0ba16ab9ff076ac7ff8f2525459c0fbe92b4c82dd9690a75accfb153834936fb6067014a8e48d205d5ca1fa2c0036e6e514d75c053217b3a7d56c053582f86b5525"}]}) syz_usb_disconnect(r2) 04:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xa, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:07 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x2401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000300)="2d5c0be8b011f066ee1e0a2d857c182a3b4a14228e6cec721d963453e73f23780beae0b8f1aead828a2c8b1d91107b6db916d3b9de41954d8c764a4ec10efe60b44be891627104c0875ee77d7ca3484835113a74c8484a848833943d0c5c1a3f454acc6576e9185d289a959429dc606fdf57784533a7f7d62b4c6a4c0fb613826a87d73b28ca612bfbfaec5e59b72b7533e5bc4e02333030577a85041380bae00f9aba3a7efac4d40c525499793401ace73820c0b5e19d1c2cae9554498881f293a460244d5b95378566da03ea980d2133b8a0969462413a3815665f108ed3e158ea873d901df7d1071a5a9d85189fb183dfa13066", &(0x7f0000000480)=@udp6=r5, 0x4}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000000a40), 0xebb0, 0x20000) sendmsg$nl_route(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getanyicast={0x14, 0x3e, 0xe04, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x841) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000010000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b82a4f188466efbafc0ced66d9ffbaf80c66b85a9b508866efbafc0cb80058eff3f2f23ef0ff8c0e000f07baf80c66b825cd0b8666efbafc0cecf20f5cb3835165640fc76f01baf80c66b824edb28466efbafc0ceddbe0", 0x5b}], 0x1, 0x14, &(0x7f0000000100), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000005c0)={0x0, 0x6, 0x10001}) syz_emit_vhci(0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:04:07 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x4, 0x9, 0x7, 0x9, 0x1}}}}, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff3d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r7, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r8, @ANYBLOB="02"], 0x20}}, 0x0) sendto$inet6(r4, &(0x7f0000001400)="5f8b200c5ff3786401e63fc32f0b337f18e3866a951d16d28aa1c05f756fdd2b1ca4b8069fca406d4258cb7b78a363d1455c4ede72d8f9b82fdb6af595e987ca77d8761cd736e1", 0x47, 0x20008000, 0x0, 0x0) [ 3538.820261][T23905] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3538.954397][ T5020] Bluetooth: Unexpected continuation frame (len 18) [ 3538.995778][T23914] sctp: [Deprecated]: syz-executor.3 (pid 23914) Use of int in maxseg socket option. [ 3538.995778][T23914] Use struct sctp_assoc_value instead [ 3539.043952][T23914] sctp: [Deprecated]: syz-executor.3 (pid 23914) Use of int in maxseg socket option. [ 3539.043952][T23914] Use struct sctp_assoc_value instead 04:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x14, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:07 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x4, 0x9, 0x7, 0x9, 0x1}}}}, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xffffff3d) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3539.150435][T23914] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r7, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r8, @ANYBLOB="02"], 0x20}}, 0x0) [ 3539.368119][T23920] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1b, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:07 executing program 0: syz_emit_vhci(0x0, 0x18) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (rerun: 32) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (rerun: 32) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x2401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000300)="2d5c0be8b011f066ee1e0a2d857c182a3b4a14228e6cec721d963453e73f23780beae0b8f1aead828a2c8b1d91107b6db916d3b9de41954d8c764a4ec10efe60b44be891627104c0875ee77d7ca3484835113a74c8484a848833943d0c5c1a3f454acc6576e9185d289a959429dc606fdf57784533a7f7d62b4c6a4c0fb613826a87d73b28ca612bfbfaec5e59b72b7533e5bc4e02333030577a85041380bae00f9aba3a7efac4d40c525499793401ace73820c0b5e19d1c2cae9554498881f293a460244d5b95378566da03ea980d2133b8a0969462413a3815665f108ed3e158ea873d901df7d1071a5a9d85189fb183dfa13066", &(0x7f0000000480)=@udp6=r5, 0x4}, 0x20) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000a40), 0xebb0, 0x20000) sendmsg$nl_route(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getanyicast={0x14, 0x3e, 0xe04, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x841) (async) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000010000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b82a4f188466efbafc0ced66d9ffbaf80c66b85a9b508866efbafc0cb80058eff3f2f23ef0ff8c0e000f07baf80c66b825cd0b8666efbafc0cecf20f5cb3835165640fc76f01baf80c66b824edb28466efbafc0ceddbe0", 0x5b}], 0x1, 0x14, &(0x7f0000000100), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000005c0)={0x0, 0x6, 0x10001}) (async) syz_emit_vhci(0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 3539.491446][ T5020] Bluetooth: Unexpected continuation frame (len 18) [ 3539.580384][T23927] sctp: [Deprecated]: syz-executor.3 (pid 23927) Use of int in maxseg socket option. [ 3539.580384][T23927] Use struct sctp_assoc_value instead [ 3539.675364][T23927] sctp: [Deprecated]: syz-executor.3 (pid 23927) Use of int in maxseg socket option. [ 3539.675364][T23927] Use struct sctp_assoc_value instead [ 3539.731473][T23927] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:04:10 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async, rerun: 64) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x4, 0x9, 0x7, 0x9, 0x1}}}}, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff3d) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xc, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x64, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:10 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x2401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000300)="2d5c0be8b011f066ee1e0a2d857c182a3b4a14228e6cec721d963453e73f23780beae0b8f1aead828a2c8b1d91107b6db916d3b9de41954d8c764a4ec10efe60b44be891627104c0875ee77d7ca3484835113a74c8484a848833943d0c5c1a3f454acc6576e9185d289a959429dc606fdf57784533a7f7d62b4c6a4c0fb613826a87d73b28ca612bfbfaec5e59b72b7533e5bc4e02333030577a85041380bae00f9aba3a7efac4d40c525499793401ace73820c0b5e19d1c2cae9554498881f293a460244d5b95378566da03ea980d2133b8a0969462413a3815665f108ed3e158ea873d901df7d1071a5a9d85189fb183dfa13066", &(0x7f0000000480)=@udp6=r5, 0x4}, 0x20) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000a40), 0xebb0, 0x20000) sendmsg$nl_route(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getanyicast={0x14, 0x3e, 0xe04, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x841) (async) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)}, 0x10) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000010000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b82a4f188466efbafc0ced66d9ffbaf80c66b85a9b508866efbafc0cb80058eff3f2f23ef0ff8c0e000f07baf80c66b825cd0b8666efbafc0cecf20f5cb3835165640fc76f01baf80c66b824edb28466efbafc0ceddbe0", 0x5b}], 0x1, 0x14, &(0x7f0000000100), 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000005c0)={0x0, 0x6, 0x10001}) (async) syz_emit_vhci(0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:04:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r7, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) [ 3542.057354][ T5020] Bluetooth: Unexpected continuation frame (len 18) [ 3542.088835][T23942] sctp: [Deprecated]: syz-executor.3 (pid 23942) Use of int in maxseg socket option. [ 3542.088835][T23942] Use struct sctp_assoc_value instead 04:04:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3542.325398][T23955] sctp: [Deprecated]: syz-executor.3 (pid 23955) Use of int in maxseg socket option. [ 3542.325398][T23955] Use struct sctp_assoc_value instead [ 3542.346669][T23942] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:10 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') socket(0x23, 0x4, 0xffff8001) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3542.427368][T23959] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3542.454391][T23958] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:10 executing program 0: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x18) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x42) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x7fffffff, 'syz0\x00', 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x40, 0x2, 0x2, 0x1070, 0x1, 0x20007fff, '\x00', 0x0, r4, 0x5, 0x0, 0x1, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x10, 0x1, 0x3, '\x00', 0x0, r3, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xffff, 0x605}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f0179b8640fc76c0066b9b20900000f32660f22dc0fc26b68bbbaf80c66b8d60bcf8d66efbafc0cb8f500eff2db0af4015008f30fc731", 0x37}], 0x1, 0x48, &(0x7f00000001c0)=[@dstype0={0x6, 0x7}], 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000300)="7af81d1b9e893166067840306cf3674502a4310d9981d052ece2f5408b05fe8681515713a5c7be02a56ca7363a59e27d8ad142cb97668597f9d2d2aa8335ab3c983683ddc5c0454fc54523447c53b69d408e13be596c9c9621d865aad8f8e3ebdc93c88fb1e0cc74ccd603f1e3c91439269087314575671fd335e52e7f2e19930978fbb936d16bfcbb8f81355bb9d8b36130cf2a3cd84eea042f5331d149", &(0x7f0000000440)=""/125}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 04:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3542.843919][T23969] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3542.938751][T23971] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:04:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r7, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) 04:04:13 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') socket(0x23, 0x4, 0xffff8001) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x3, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:13 executing program 0: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x18) syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x42) (async) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x42) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x7fffffff, 'syz0\x00', 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x40, 0x2, 0x2, 0x1070, 0x1, 0x20007fff, '\x00', 0x0, r4, 0x5, 0x0, 0x1, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x10, 0x1, 0x3, '\x00', 0x0, r3, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xffff, 0x605}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f0179b8640fc76c0066b9b20900000f32660f22dc0fc26b68bbbaf80c66b8d60bcf8d66efbafc0cb8f500eff2db0af4015008f30fc731", 0x37}], 0x1, 0x48, &(0x7f00000001c0)=[@dstype0={0x6, 0x7}], 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000300)="7af81d1b9e893166067840306cf3674502a4310d9981d052ece2f5408b05fe8681515713a5c7be02a56ca7363a59e27d8ad142cb97668597f9d2d2aa8335ab3c983683ddc5c0454fc54523447c53b69d408e13be596c9c9621d865aad8f8e3ebdc93c88fb1e0cc74ccd603f1e3c91439269087314575671fd335e52e7f2e19930978fbb936d16bfcbb8f81355bb9d8b36130cf2a3cd84eea042f5331d149", &(0x7f0000000440)=""/125}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 3545.203620][T23974] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3545.263550][T23981] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3545.326140][T23982] sctp: [Deprecated]: syz-executor.3 (pid 23982) Use of int in maxseg socket option. [ 3545.326140][T23982] Use struct sctp_assoc_value instead 04:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x10, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3545.469036][T23982] sctp: [Deprecated]: syz-executor.3 (pid 23982) Use of int in maxseg socket option. [ 3545.469036][T23982] Use struct sctp_assoc_value instead 04:04:13 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') socket(0x23, 0x4, 0xffff8001) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) socket(0x23, 0x4, 0xffff8001) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3545.620547][T23982] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 3545.655733][T23993] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3545.665069][T23991] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x5, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r6, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) 04:04:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x11, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3546.035851][T24004] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3546.070429][T24006] sctp: [Deprecated]: syz-executor.3 (pid 24006) Use of int in maxseg socket option. [ 3546.070429][T24006] Use struct sctp_assoc_value instead [ 3546.087596][T24007] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3546.240234][T24008] sctp: [Deprecated]: syz-executor.3 (pid 24008) Use of int in maxseg socket option. [ 3546.240234][T24008] Use struct sctp_assoc_value instead [ 3546.288282][T24006] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:04:16 executing program 0: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x18) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x42) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x7fffffff, 'syz0\x00', 0x6}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x40, 0x2, 0x2, 0x1070, 0x1, 0x20007fff, '\x00', 0x0, r4, 0x5, 0x0, 0x1, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x10, 0x1, 0x3, '\x00', 0x0, r3, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xffff, 0x605}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f0179b8640fc76c0066b9b20900000f32660f22dc0fc26b68bbbaf80c66b8d60bcf8d66efbafc0cb8f500eff2db0af4015008f30fc731", 0x37}], 0x1, 0x48, &(0x7f00000001c0)=[@dstype0={0x6, 0x7}], 0x1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000300)="7af81d1b9e893166067840306cf3674502a4310d9981d052ece2f5408b05fe8681515713a5c7be02a56ca7363a59e27d8ad142cb97668597f9d2d2aa8335ab3c983683ddc5c0454fc54523447c53b69d408e13be596c9c9621d865aad8f8e3ebdc93c88fb1e0cc74ccd603f1e3c91439269087314575671fd335e52e7f2e19930978fbb936d16bfcbb8f81355bb9d8b36130cf2a3cd84eea042f5331d149", &(0x7f0000000440)=""/125}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 04:04:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x12, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:16 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_cp2112', 0x940, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) signalfd(r2, &(0x7f0000000340)={[0xbec]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="30bdebdcf5266a42379a8ffc866d915d2a97b700d8ad2fe4c91046f377128839afbdf8763d4b4bc417f2319671ebd068d4020b76357dab8832a6a326eb8f9feef0943021c4b675a1733f1ea96dae2074161e2ebe154dc63cb555aa6ad7fe8f2e7b3fb04780553fa0329b56586935ffe9d896c5fee9f8469dfec6dbcf5de66df16d8fa7183d33557a6c4e44ee", 0x8c}, {&(0x7f00000005c0)="515d55f69ae4717081983fa52b61ca97a703d96ce0452b0f608644584740d5b35bcac793ef3e970fb8cf0f0d60fb480e0f8bee16201dbacd09f87d47e1adcf0d5b684fcca85be031cfadbbff53f20388b6cf72e8ac6bc3b513d6b851d405cdd8ff066e97fbd94738a0a6baf9a9221bf88dcdacd2426e0180d42158e27ff79225cd2110ae8aa7e20e7b654ba7abc8c3dc469097dd6bc5f2ac3a6d792e881aced46381cc8a72e6513c60f6e54d419bd738e1b221f62d333374562b68ab44017888e36455e04914cfd279695861414b3dbd3415fd3d25599720d4", 0xd9}, {&(0x7f00000006c0)="9e741348315d599563b18be5e74a4263256d7966056a502f7ba21ef2ade12af558d079197bceea0db4f7f025937e2e469ce9b71185cd1bf4c4c0fcb1f4faf5d970b5af3ec866baf48513122ae74a39bd5abf", 0x52}, {&(0x7f0000000740)="bea27e286eb710054425be9a810c7dc924a792600351aa5e4ca2af70151e6035d84755b212f7903e14de66875497ff6981f76c0fd2287b645ed3acc790bd8659859ede52af24a80472d8aa1d424f648b7b4a7d3be3af0a2ddf1be84c6d0aeb85e6e483a199732fb4d9d61b3692aa0bf4ab3cc83311211435a31b", 0x7a}, {&(0x7f00000007c0)="024b35473f5b385e6f5da32a4feb30d7eba2f96ce3ba6951b4a1064b1290ab8a9204b8a14f31d66f7e120914f955e7afdd9be8cccdfd16d3887ce9e44462cab0fd4df8ee56d0d3affd50fdda7cd9d5113de13b0875c764f84ea625538550e1e870680a0fff0bd16a6c9298d39dd8b44b0a2c27a4fcd909128638664aa45fb16e44ddb908170175db53b35d82a192278fbe9ba11084a16720b4540ecb1ff51c81effeeb59ccc0cf9358cb17ad91907649ee6fbe8bcee13a248278287eba09c752ec3e0242eed8b13ae18902a8b71bec9d43185020188e1ceabfdd78148039a666505eef7a916a9bf5b1b903ab26fc951c7b6553d5b2", 0xf5}, {&(0x7f0000000d80)="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", 0x1000}], 0x7, &(0x7f0000000a40)=[{0x80, 0x1, 0x1, "140645c5fae8d4ffd6f6d5951fd4051264b662851c4531cc2c03964d2e90d3daf2eca59302502806469b2a4edb2dc136df55e63e33d882fb5363d5d9fd0ead6cd502a0005cc3ff027a6b10b85e2d491d69bc51ea0978e737948f607e35b16a2acf84b8a2c24a4a2f9fce93f7"}, {0x40, 0x3a, 0xffff, "8701400c4804d78e38db59a9980b9b5c103f56c801a2856b862d07905bc7105c610eae4bb47900d86a646a8cc014"}, {0x18, 0x10a, 0x719c, "ade32a0506"}], 0xd8}}, {{&(0x7f0000000940)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000c40)="da9b287576a53ab4f0de1dfd978a69fef8988ed9a1fca682243178e531fdb27e532909560d3b3ccf67a0f502fe8c8f80df5a4ead7c7977f5d7ac4a8e8968b50a026b7b8604199c999dce3ff41a6fa6999746cea945c7e2bbafa51eb04de5b3e54f2ef32d0bfc4bc0ecfef2c3e654679d5d847e7751a92a1d4d0700e11b29a67da6d886404592da3d1644fb8f1f68bee441a13637076dedfb85a1af300065786fb586e971faa15382117951ea5eba89759189b421616a0726ebbf57fcdd1c1a2f4bce04e6", 0xc4}], 0x1}}], 0x2, 0x48840) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r5, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) [ 3548.406215][T24015] sctp: [Deprecated]: syz-executor.3 (pid 24015) Use of int in maxseg socket option. [ 3548.406215][T24015] Use struct sctp_assoc_value instead [ 3548.442071][T24019] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3548.476807][T24016] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3548.594800][T24026] sctp: [Deprecated]: syz-executor.3 (pid 24026) Use of int in maxseg socket option. [ 3548.594800][T24026] Use struct sctp_assoc_value instead 04:04:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x25, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3548.715352][T24015] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) connect$inet6(r5, &(0x7f00000017c0)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) 04:04:17 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3548.902335][T24031] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3548.926574][T24030] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x48, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3549.219322][T24036] sctp: [Deprecated]: syz-executor.3 (pid 24036) Use of int in maxseg socket option. [ 3549.219322][T24036] Use struct sctp_assoc_value instead [ 3549.369235][T24039] sctp: [Deprecated]: syz-executor.3 (pid 24039) Use of int in maxseg socket option. [ 3549.369235][T24039] Use struct sctp_assoc_value instead [ 3549.483679][T24036] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_control_io(r0, &(0x7f0000001dc0)={0x2c, &(0x7f0000001b00)={0x20, 0x7, 0x58, {0x58, 0x31, "e5381a92e2c9908612bfb10e74128070d34ec8d8e09383478d625ac2f447ccf953ab8c07c67c2718a85bf78415df061a509bbac3d42a0806c980e163a286d6e94198cd35cc82bb046f9bbd84e31dced9bb45fa24e56e"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000001bc0)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xe0, 0x4}, @generic={0x6c, 0x10, 0x2, "d7fb10f7e0c1851edac456b4e382090c54c237e3524a5929f47e91618adf6142474a9d5851f6ab1d475eb539d05660823a3b4cccb0f3d56f9fcbb76f584c77e6bdd917273e7aded02429063e76cb53ae2437fdb98d93f91b623306c68c3816aa24a711ce51ad49a990"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x6, 0x3}, @generic={0xa5, 0x10, 0xa, "f2edc1871885721812561371561a56bb53b90e3915530ef13bf64caee83d19a5e051c9b91c955378f0daad1f68f0198a325fb8993e4c0ea28699cefaddb8a10bdad07e565a40c3734b69ff4595851b5aa0bc5059fd9c9d59f8df4b60ea08018d138e63829a561a6a85a8621fac8b50152f7200d390d1f1b7e79e97a0f7a3564c632d4c1d706c712ac680bddb649423d24cf6c54fc8f222696f4284531f3e5dd05507"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "03ec9c79c91b03f1abf5d066fc667685"}]}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x6, 0x4e, "b54b98ed", "54a6d8af"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x4, 0x0, 0x1, 0x7fff, 0xf4e}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e00)={0x20, 0x7, 0x76, "1471a5b06eece03d63fa46ef452c9a6f7731a67a0034fb72ccb58aa43c027f427ec0098a84dfd1cec313c8d17ee2b473f267e63e219a73613f8cfbf8a3a4e044df16d234eda360056819f1d2e75de97019e34ef43b344098e760f65f4d40ac44b4969509538fb57b2af64e9f7f64ae7d70474513e959"}, &(0x7f0000001e80)={0x0, 0xa, 0x1}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f40)={0x20, 0x0, 0x8, {0x80, 0x80, [0x0]}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002000)={0x40, 0xb, 0x2, "db9e"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000002080)={0x40, 0x13, 0x6, @local}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, 'V@'}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x54}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000002200)={0x40, 0x21, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12b8, &(0x7f0000000340)={[{0xdf, 0x4e00, "534e55bccde713317264416ab0d46b14d904eb3e1106bdf41f7dedf70a47925346478532dc1a60d00a4ea73d5330208c2c546f221a9da0cd56487da38e789e7f489c478211c9517e0a2942cddc8448252c026ff86209a97c09c18ebefdef4f34bbe6b935a45a620885b9d9be02060e5a728e70e3f49368ddfe8bcbbe2bd5b2bcbc1460266d62763a68b0747eb8df270b2a9b1069fad8c692187e7ab8ed08b9649f3c77158a98d802846c761d7e570c816887fa2240bf82e5ba3dec21e117667c8e5febc78ed8cd8f10a4980c7ad8417ef6187d072175b39349fa65557f3c89"}, {0x76, 0x4e00, "069134a4dc8bd00e68b8eedeecc17c3486429d8e234e0969546c0339b31206cc802d031e3288cca321dcea4caa2e95353b37444778d43394d422d69a669f069e44d385c116a463fdd030a58030b36f8feac5de61ae8bd59cef7e0d2cd6cbf853a2c547e364fc16a267b11074106e4bd9d869f8b05c27"}, {0x62, 0x4e00, "6fa7ff854988e00a36917d4a0103afa45ed4d00f6ccb38db4b870ab9fe391b551bf0df7ba3f0f8efbf372c4c24ea4122555d3a1673caf9eadefe7e89b4ec661ce9cb2041d12b282bd80fd2f265c9a7724e34d293c9fa7dafb8de27b219b0f7768a48"}, {0xf, 0x4e00, "40733a4b2dd02a67fb0b9230efff0f"}, {0x1000, 0x4e00, "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"}, {0xad, 0x4e00, "b5106b5b9797794e2d7a6bec6a6b2ae901e2288c296e0093292137ec8d03da3c55d6e56e6862b8a52fdeee0d915eada08f4651185aa8d3b7eb9bb6ded69f414bd968c439f62d39f5d235c1c8c88832a3ffc2d592875e27c6430bb465d852d996cffc1567d202159ab2e857c2246fd40cd7283f5925e7a3c9004f43ba45c9cebb72da0d605ee92df9e18c6d5eddb6d4b5859c1f29c954ffca9ef977833eba00699885860371bd464a3396e37124"}, {0x20, 0x4e00, "936741407c14beaf67b7846cff0df366a37f18ddf0228135cb023baede44a94a"}]}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xfb, {0xfb, 0xe, "a8fafb1392ca4a01c5326bef4e689462f1c10839eb92e64172f7b9ca28400d1d95ec151711add17634e5cbbea541ada313a21d39b2359c218021989c1f58c21cd3b8fcbca603e1a2d8556236ed0e2c14bce4559e69bc87abe5ac3600cb00b5d2e7f9842d929c205ca7ee77c4371869a4df77104872314b316fbcf5d43e2175b99c849a55ab871c77cbedebdba2a0d3a2fab97ab47fa83aef5b6a3d920f671a7ff9ff16fc5f2a3fa6b6353f731060dd6da34163cf9e9d7a1353abd8f84923280dc94e2fdc64ff3fc569d628d337a2cb2dd500f77bef2cb8c49ef42addb5d825aa5322b4084110946aa98b25216a90e79663ce45cd8458ad19b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "79158c422626e69f282b5a5eb7596a51"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x6, "0e905578", "20d8cc17"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x5, 0x2, 0x0, 0x1ff}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x20, 0x6, 0xb7, "fa4a545ad85bdebd88fe605861479f5fd6aa826d8be02ea5910b808fe13458661b44c5f95349033df57dab1df855984062d6c8ef789ce46e35464522a5352c7307ce60720c9bb2d39e3b54d78ee51b27c6ab6014a6986bebc2861ffa8e5244d40352186b12e98598f3dd041be0ef1df0707a1c1ef5c893b81f03f6fe45731aa2fb522178d6e30b257894761acf9ffc5646ba5e7b98134345bc9e60318cf03af9f649df3ef47c9b60767f0df10c8609f2e6a53ec3904aac"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff0f]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0xb, 0x2, "a4da"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="2c835430e676"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "dce1"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) 04:04:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:19 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_cp2112', 0x940, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) signalfd(r2, &(0x7f0000000340)={[0xbec]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="30bdebdcf5266a42379a8ffc866d915d2a97b700d8ad2fe4c91046f377128839afbdf8763d4b4bc417f2319671ebd068d4020b76357dab8832a6a326eb8f9feef0943021c4b675a1733f1ea96dae2074161e2ebe154dc63cb555aa6ad7fe8f2e7b3fb04780553fa0329b56586935ffe9d896c5fee9f8469dfec6dbcf5de66df16d8fa7183d33557a6c4e44ee", 0x8c}, {&(0x7f00000005c0)="515d55f69ae4717081983fa52b61ca97a703d96ce0452b0f608644584740d5b35bcac793ef3e970fb8cf0f0d60fb480e0f8bee16201dbacd09f87d47e1adcf0d5b684fcca85be031cfadbbff53f20388b6cf72e8ac6bc3b513d6b851d405cdd8ff066e97fbd94738a0a6baf9a9221bf88dcdacd2426e0180d42158e27ff79225cd2110ae8aa7e20e7b654ba7abc8c3dc469097dd6bc5f2ac3a6d792e881aced46381cc8a72e6513c60f6e54d419bd738e1b221f62d333374562b68ab44017888e36455e04914cfd279695861414b3dbd3415fd3d25599720d4", 0xd9}, {&(0x7f00000006c0)="9e741348315d599563b18be5e74a4263256d7966056a502f7ba21ef2ade12af558d079197bceea0db4f7f025937e2e469ce9b71185cd1bf4c4c0fcb1f4faf5d970b5af3ec866baf48513122ae74a39bd5abf", 0x52}, {&(0x7f0000000740)="bea27e286eb710054425be9a810c7dc924a792600351aa5e4ca2af70151e6035d84755b212f7903e14de66875497ff6981f76c0fd2287b645ed3acc790bd8659859ede52af24a80472d8aa1d424f648b7b4a7d3be3af0a2ddf1be84c6d0aeb85e6e483a199732fb4d9d61b3692aa0bf4ab3cc83311211435a31b", 0x7a}, {&(0x7f00000007c0)="024b35473f5b385e6f5da32a4feb30d7eba2f96ce3ba6951b4a1064b1290ab8a9204b8a14f31d66f7e120914f955e7afdd9be8cccdfd16d3887ce9e44462cab0fd4df8ee56d0d3affd50fdda7cd9d5113de13b0875c764f84ea625538550e1e870680a0fff0bd16a6c9298d39dd8b44b0a2c27a4fcd909128638664aa45fb16e44ddb908170175db53b35d82a192278fbe9ba11084a16720b4540ecb1ff51c81effeeb59ccc0cf9358cb17ad91907649ee6fbe8bcee13a248278287eba09c752ec3e0242eed8b13ae18902a8b71bec9d43185020188e1ceabfdd78148039a666505eef7a916a9bf5b1b903ab26fc951c7b6553d5b2", 0xf5}, {&(0x7f0000000d80)="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", 0x1000}], 0x7, &(0x7f0000000a40)=[{0x80, 0x1, 0x1, "140645c5fae8d4ffd6f6d5951fd4051264b662851c4531cc2c03964d2e90d3daf2eca59302502806469b2a4edb2dc136df55e63e33d882fb5363d5d9fd0ead6cd502a0005cc3ff027a6b10b85e2d491d69bc51ea0978e737948f607e35b16a2acf84b8a2c24a4a2f9fce93f7"}, {0x40, 0x3a, 0xffff, "8701400c4804d78e38db59a9980b9b5c103f56c801a2856b862d07905bc7105c610eae4bb47900d86a646a8cc014"}, {0x18, 0x10a, 0x719c, "ade32a0506"}], 0xd8}}, {{&(0x7f0000000940)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000c40)="da9b287576a53ab4f0de1dfd978a69fef8988ed9a1fca682243178e531fdb27e532909560d3b3ccf67a0f502fe8c8f80df5a4ead7c7977f5d7ac4a8e8968b50a026b7b8604199c999dce3ff41a6fa6999746cea945c7e2bbafa51eb04de5b3e54f2ef32d0bfc4bc0ecfef2c3e654679d5d847e7751a92a1d4d0700e11b29a67da6d886404592da3d1644fb8f1f68bee441a13637076dedfb85a1af300065786fb586e971faa15382117951ea5eba89759189b421616a0726ebbf57fcdd1c1a2f4bce04e6", 0xc4}], 0x1}}], 0x2, 0x48840) (async) sendmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="30bdebdcf5266a42379a8ffc866d915d2a97b700d8ad2fe4c91046f377128839afbdf8763d4b4bc417f2319671ebd068d4020b76357dab8832a6a326eb8f9feef0943021c4b675a1733f1ea96dae2074161e2ebe154dc63cb555aa6ad7fe8f2e7b3fb04780553fa0329b56586935ffe9d896c5fee9f8469dfec6dbcf5de66df16d8fa7183d33557a6c4e44ee", 0x8c}, {&(0x7f00000005c0)="515d55f69ae4717081983fa52b61ca97a703d96ce0452b0f608644584740d5b35bcac793ef3e970fb8cf0f0d60fb480e0f8bee16201dbacd09f87d47e1adcf0d5b684fcca85be031cfadbbff53f20388b6cf72e8ac6bc3b513d6b851d405cdd8ff066e97fbd94738a0a6baf9a9221bf88dcdacd2426e0180d42158e27ff79225cd2110ae8aa7e20e7b654ba7abc8c3dc469097dd6bc5f2ac3a6d792e881aced46381cc8a72e6513c60f6e54d419bd738e1b221f62d333374562b68ab44017888e36455e04914cfd279695861414b3dbd3415fd3d25599720d4", 0xd9}, {&(0x7f00000006c0)="9e741348315d599563b18be5e74a4263256d7966056a502f7ba21ef2ade12af558d079197bceea0db4f7f025937e2e469ce9b71185cd1bf4c4c0fcb1f4faf5d970b5af3ec866baf48513122ae74a39bd5abf", 0x52}, {&(0x7f0000000740)="bea27e286eb710054425be9a810c7dc924a792600351aa5e4ca2af70151e6035d84755b212f7903e14de66875497ff6981f76c0fd2287b645ed3acc790bd8659859ede52af24a80472d8aa1d424f648b7b4a7d3be3af0a2ddf1be84c6d0aeb85e6e483a199732fb4d9d61b3692aa0bf4ab3cc83311211435a31b", 0x7a}, {&(0x7f00000007c0)="024b35473f5b385e6f5da32a4feb30d7eba2f96ce3ba6951b4a1064b1290ab8a9204b8a14f31d66f7e120914f955e7afdd9be8cccdfd16d3887ce9e44462cab0fd4df8ee56d0d3affd50fdda7cd9d5113de13b0875c764f84ea625538550e1e870680a0fff0bd16a6c9298d39dd8b44b0a2c27a4fcd909128638664aa45fb16e44ddb908170175db53b35d82a192278fbe9ba11084a16720b4540ecb1ff51c81effeeb59ccc0cf9358cb17ad91907649ee6fbe8bcee13a248278287eba09c752ec3e0242eed8b13ae18902a8b71bec9d43185020188e1ceabfdd78148039a666505eef7a916a9bf5b1b903ab26fc951c7b6553d5b2", 0xf5}, {&(0x7f0000000d80)="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", 0x1000}], 0x7, &(0x7f0000000a40)=[{0x80, 0x1, 0x1, "140645c5fae8d4ffd6f6d5951fd4051264b662851c4531cc2c03964d2e90d3daf2eca59302502806469b2a4edb2dc136df55e63e33d882fb5363d5d9fd0ead6cd502a0005cc3ff027a6b10b85e2d491d69bc51ea0978e737948f607e35b16a2acf84b8a2c24a4a2f9fce93f7"}, {0x40, 0x3a, 0xffff, "8701400c4804d78e38db59a9980b9b5c103f56c801a2856b862d07905bc7105c610eae4bb47900d86a646a8cc014"}, {0x18, 0x10a, 0x719c, "ade32a0506"}], 0xd8}}, {{&(0x7f0000000940)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000c40)="da9b287576a53ab4f0de1dfd978a69fef8988ed9a1fca682243178e531fdb27e532909560d3b3ccf67a0f502fe8c8f80df5a4ead7c7977f5d7ac4a8e8968b50a026b7b8604199c999dce3ff41a6fa6999746cea945c7e2bbafa51eb04de5b3e54f2ef32d0bfc4bc0ecfef2c3e654679d5d847e7751a92a1d4d0700e11b29a67da6d886404592da3d1644fb8f1f68bee441a13637076dedfb85a1af300065786fb586e971faa15382117951ea5eba89759189b421616a0726ebbf57fcdd1c1a2f4bce04e6", 0xc4}], 0x1}}], 0x2, 0x48840) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4c, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x6c931e4f5fe4b9a6, 0x0) 04:04:19 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3551.617224][T24047] net_ratelimit: 2 callbacks suppressed [ 3551.617283][T24047] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3551.640668][T24050] sctp: [Deprecated]: syz-executor.3 (pid 24050) Use of int in maxseg socket option. [ 3551.640668][T24050] Use struct sctp_assoc_value instead [ 3551.659291][T24048] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3551.757358][T24058] sctp: [Deprecated]: syz-executor.3 (pid 24058) Use of int in maxseg socket option. [ 3551.757358][T24058] Use struct sctp_assoc_value instead 04:04:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4e, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xa, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3551.878290][T24050] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 3552.050321][T24065] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:20 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_cp2112', 0x940, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) signalfd(r2, &(0x7f0000000340)={[0xbec]}, 0x8) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="30bdebdcf5266a42379a8ffc866d915d2a97b700d8ad2fe4c91046f377128839afbdf8763d4b4bc417f2319671ebd068d4020b76357dab8832a6a326eb8f9feef0943021c4b675a1733f1ea96dae2074161e2ebe154dc63cb555aa6ad7fe8f2e7b3fb04780553fa0329b56586935ffe9d896c5fee9f8469dfec6dbcf5de66df16d8fa7183d33557a6c4e44ee", 0x8c}, {&(0x7f00000005c0)="515d55f69ae4717081983fa52b61ca97a703d96ce0452b0f608644584740d5b35bcac793ef3e970fb8cf0f0d60fb480e0f8bee16201dbacd09f87d47e1adcf0d5b684fcca85be031cfadbbff53f20388b6cf72e8ac6bc3b513d6b851d405cdd8ff066e97fbd94738a0a6baf9a9221bf88dcdacd2426e0180d42158e27ff79225cd2110ae8aa7e20e7b654ba7abc8c3dc469097dd6bc5f2ac3a6d792e881aced46381cc8a72e6513c60f6e54d419bd738e1b221f62d333374562b68ab44017888e36455e04914cfd279695861414b3dbd3415fd3d25599720d4", 0xd9}, {&(0x7f00000006c0)="9e741348315d599563b18be5e74a4263256d7966056a502f7ba21ef2ade12af558d079197bceea0db4f7f025937e2e469ce9b71185cd1bf4c4c0fcb1f4faf5d970b5af3ec866baf48513122ae74a39bd5abf", 0x52}, {&(0x7f0000000740)="bea27e286eb710054425be9a810c7dc924a792600351aa5e4ca2af70151e6035d84755b212f7903e14de66875497ff6981f76c0fd2287b645ed3acc790bd8659859ede52af24a80472d8aa1d424f648b7b4a7d3be3af0a2ddf1be84c6d0aeb85e6e483a199732fb4d9d61b3692aa0bf4ab3cc83311211435a31b", 0x7a}, {&(0x7f00000007c0)="024b35473f5b385e6f5da32a4feb30d7eba2f96ce3ba6951b4a1064b1290ab8a9204b8a14f31d66f7e120914f955e7afdd9be8cccdfd16d3887ce9e44462cab0fd4df8ee56d0d3affd50fdda7cd9d5113de13b0875c764f84ea625538550e1e870680a0fff0bd16a6c9298d39dd8b44b0a2c27a4fcd909128638664aa45fb16e44ddb908170175db53b35d82a192278fbe9ba11084a16720b4540ecb1ff51c81effeeb59ccc0cf9358cb17ad91907649ee6fbe8bcee13a248278287eba09c752ec3e0242eed8b13ae18902a8b71bec9d43185020188e1ceabfdd78148039a666505eef7a916a9bf5b1b903ab26fc951c7b6553d5b2", 0xf5}, {&(0x7f0000000d80)="ca43dc6fd9290d391a60da6693e834f6c735eaeef5efbffdcd0152a4df3a34809710045e24f80d4bd07870a53f25286bd289c25e2d91873eb06026c94fd9d8b87efa7855bba41dab8c242c7fa938c2087fc3ea6312cd7d988560cec479c9b624eb5d47e228bd74ac491f935cfea3fa986da4d28dfec952597053cc5fef4820a13de5fbf035df24f1083e4225e22132a1335a36d59d42d4c5b7763b139e7bb300c03afd9fe6c6ffa0f6c406f240ff448613623639c177c5959a6acdd56680b7c0b8ec4a46f32d7a2e5b743dd97f93a236d577721e572abe7791b5a4bd3773ecc465c8d43b6512db9e66bdd7f39f40fcd4fbc4219ed21abab3e31a83970cf26deda01005a55a9711b47db13d9a2b659ed6120858bbd5617ea53983e2d2d3a2ba5c722b94be9abd7f7c842786f18231ea59299b83dc09413b5cb05cf4bb237a09d7750068dd467aff922935460a4cf1724ce833d44f71f136c7b780d06848dd4ae41cb467051e42c37fe4bba80e20b12726828f8896cd5895604f438b771667f5af3a73f0e41ea954e55e29f41b90c6b89fb446faf4451d8e018df10a0f22f8f4bb1d1d3f7b3767f3d113af6592e3712ab051bd157979bbd73d8231cc7cb9a4f8922d38b5bc89a26036fda57acce138eb245250bfe71ea778845a831839b289a5286e3cc1177e099903554bbdbcbfac4e3f77c24a75ce8ca29a3a08ce5b940760b1290a904093ef9ca9b2cf745058dc85c6b8b7bd9635d1e100243b3c0c7c6589214f3a8712c49db46be33cc6d0aa84dd9ce674d44cd9875bc395d5489e7f9f1ca937a1b00316afa78cbba0d68525be6fba9078ab8fdadc977bf77c0af9972b733d8fc5a2ae797e2b512891e763517cd3121a07a35cf4dd409181365f87485432be3786edac8fdaa466d9c0e8ca9d3fd3c838fcd21e76a6e7044584f244f5697e36992d9bb59962c81a26b970b448e500747e08815248b5007831e274de5b9a96150e98a03e37ee68205c168dcb20b43d6537ffc6b386dbfcd089ca046a1501da280a4e41f5c6429981c39da8fa5be52ad983a5115e5952ce5179915e5c3772ad0f7a7462303bcd2d985e40fb0f5bd88d73135f4352b8598437147fa4dad0109c3eb203fdb1c4b0003c746215bba01e9b5f99c159df3d8315462088f9fe4396494364bab03a5eb426c1806dc8e7df7c73176e583f831ed0638ba73f38e37893ac0fca961d0626ec91152c3517355e36018546e780780ff82464d50a64ba060cd9463eaec53e1a745ac5b80727e2b933ae5b5aba63f6eeca3754c2cd7b0c44a61748c8a1da19987538113a8c8f3e3568b6666a6d7c0ca7cf2a809bf621b99192ca1d29e50d9f940b34e433daf0949082c119a4962e6e96cc4eb763e88da432156377d927e3e45ddbc05bf97ee69530cda08e6e0443871255442672ceadcbf350a048f6c22049c64c23e200de2342ce6123fecd8feedbec120aafc92bbdb4b3546abaacc91ccdf5188f82dc8e4c8513bb34ef8f72eb1c583c355bbf8d9cc7444647099b5bd9d7e8d6866b91dd45b8aa92d5c005af2f7ec7004e60ca4fc95cee3f2d9c21ff99d272ba7a155b1b9090bffe5964c7882c53d808edb5506842939ae75851c0cdfa4416c46308a09bda0e3fe4a8c0ba12fa9fc57537f09a00a6a781d6dde5fc0abe79a69656f3f49953a0cbb461a8c07330b5f530f0308d4585276aa8a5452c0c1bf58bd2205212825a733565a4e424cc42027dd59cb51b936139e9c241f89f9243bd493b3227774cb22ae306de9c74ab455a8b45e006e0ebc2dbfeae043abb0abadceadb706ae0e382f5b1f4c41f50771469fec6c555c475bd7edd647731976dcd25c9543366c556f7dd69f1baa2ba737ca2a9f1e9184ce0f86187ede43f3dd067b15ef2bef8f86887f7ad6f1fcaaeadba3229b72700fcf03a7c2b57a14f3567e06a4cf498ada0c55e24347cb341fc6551522bf7f18f94fff660a05c3c0c68c539f004d84461176523e3b23647f1131aac37c82c0a8390999a1ea588270c7a6b4d5954eb37b85d63e78523f5ed4b3e3c8ddc4a0922fe332d7ccb3477c32c3ede7a57a287451d66a57be35d6c2eeb2dac852bedb037f55d763c607f0fabe293ea0a5c76d79a54bd43751b6c981d9cb302883288818ff5f5f259f7d1fa4ea63e4fc5ded0c3561a926f2af844b4156ea8381762ac145b0b61029c14887c11ed045e16a97533abf82fb4094d019e7e1cc8c6dc64f2170c974e53fb2af3cd6893c99d58da7e6a4de2973275292e277c524480587a07a21930c6a5337b484eb7158dcff7807f4d9928df1f3308dd4e566fdf2343cc7d56a461d95e7a12799f36600a1832466aba79ce1de085091cd54bcc7e53e1922d393304eeb32d6729f940e24cecf1950e4e979c61d55244b07a482dbca9ea1459a24b010727bfd6c551910f4ad80f0097c51e7d19c3bd3bc98edc8bb46b32525f8f3c9685a93916cbb5bdefb927f19cf050b8d79137847c4527cf66f58e89d0d2adc8355463eaf7f1497e1aa7717c2ec8df74848e489325ac32a20f1a6f04bb0fc1f3e45f179694a1e9fa417bc42da335cc676d8ebb75d27a2d6135ba4761937f11e9c78c91edf30f43971dae0b84259f253f84e4017dde30d169dd3f0ff8e31f5e702dce5a0e74d73362385dfe5c4255770df914499be56f0c6d088da238f64744a25d9d9c9e106d557feddcad490c21b1bd6ab8d03be3033341f0d387bbdb3854d3c6ae16420df60014889de6054084ec312b6d76abdbd749c4ef90061e1b4c364f938c9b527d9c52ca7e949c143609f150ecc6654cf45279938e749c2a3bf78954b37d0f245d98069a4550ed5c362aa4f054fca88ceb4c12a7d009655fb9c8fad348712b5629046c344ad242e7ddbb096526983ce90decdf95bc56354ec638ebdda8b10b13c89d6f5ee1ed94c6a64255de5a89dbfbf400d0d528ee01ef1a536cc2c4e4cb1cf4e1250ff41fc4a4d76b1966a60a01ac5a8b2ce04a20373e0ca62f1a34763ef94ed97e77a82c05eec8a77678029df8525229eda10a7075610856b1836ffcb05e246180fa7166a34bad29f33dd112a7e9a0afeb7148b4b8123b242d480cbdb3fa2eb06cc70b8e2c62394585366bf9233f703573535809f5610de39e1cf8d1a1f2f3298e5e51be87879e68e65e2eb2bfa330cbf3c1aaa1d869928dad532a4a4178c59489da9da6a7e295f67157729402184133e3d219983180896f5da9df082a10b6e48cf5f3bcfbfb6d085f97341ec37007a44d99f0f4bc574180070b6d4d5812af5f7eefe0956535e58c5768f66b6f46dd5679fa124c20e626367eeb6303c3f1c7aabdbf8e50df9de06b0b4354fc6847611cb18c0583a9947685334fbb0af5f89ea3094787bb9c6606ec1bb4a97d0a63a5817b8d911730c0fd899b5ad81a348df43c242f1dce9d1896d5be1f112a7182d851c2b6b5b9c837cabf13bac963ff9af8e34608205338deb26064b12d0d3a922aff1a49071b870f8198b5b305c6089817a497abb1576637b784f09830416d8661009696ecf3f67ecee20b44fcca51d010854be19e57ebe48b434a170cfb86247cf9d57aae2562821ae9c9370588d60f0f41476c6f009e720575a1891656b405e7ffa97b86fadb1648a357f223cf71400d5a6fcb2e8d08f36033d0f4d2d3994c6528f20c637cbfa02c6ee00ae5068fcddfe3f0bf4b00a85611cb27d3e70c8fae3dda518ec9f4af9966da3e54b48052924bce50fb5e476a865080eb59e7f8f403e57d39c69dbc09639ef1c9c366b490d20015df5d7b26ded7025267f5e4b316298ec4114c1d1ebeb86b02988203dc476664fe60b7d67a5d9fa2e426b9c5cb0f592625c3902857924584e17b98286b07896ba977c2760c094fb7f810b851fd195ac10545a11b26b86f8e68075f94e1a091e7e2fb08fd8f3fa4a8c220dd56a4b3f17ffbf79395576a2609b88c56d4bff5b4d4e8c1e108da879cc7a020353129c847458295a0756461ab55a392995bb748a72e765efa390e81797f2e0285a5e373a10c001c196d06f79b810d86fb3f134b5ee0ee0390b30a5e55969dc5529ee81ed000c2b609587d8032c66f7506dc121c4693cacf444ac5ef1da1c572737378f15a37986841ef1b9fac06578b59a6400aa362636c195b03f2efeff55ac02fd5fb6e287a10f2a99b0d050e813ecaf8a7a5ddd34c84a09cfcbb9e237745ed7f6c23a983168a663a7f0ed425d633e1c4bac3adfd306c4b4cc5bd9831a096241633cfac0ae73709d9a7cd07d85252e9d3868b0d97e5346270b93e4e444c88198a066478e2aa99b0c1c5c70a64bb7ce940553eacd4c50417e7ce351c866d6aba640f5120b4ee32c8fc90ea09347d5425fb39c1e0ebdc2e46f8db9c1830463cc3dbc83ea9a8c50d4aee308c4f5c8b72ff50f6b4832757e1ba7158eb82dfcc2592f6c537c758b668b1b5158d793e60d5cbdb74f82e12482e250af6ef86a867f88c5d901704453c46553f25db38c1f9b89643e4b8feb4a66497cff80effdfd74c5e2c408d6fcc546fd0961ba41e5dd0ff3fc6bfa2da5119395bf352f21ed0355426d78856e3b724da4d944c95217962cbfa6dd2ff6f77d411e8aea5065f54112f1bd9b8bda92b37f70a0856285b8afb64fcd9a606cfc2ea44b22fb87fcf593f47379de9af19d1a83252802e71aa51ddcf8cf5d26dc87643616f2a1f6569ef8a7542b450af65d198562d6e7913bafd020693256b99bcc92bb1a8d506dfa1014535a523149483e5307e4a6cb04a2a8138a6d0a57b5a268ca3ce0bda2ed534117c68c9a303e8337f1eeb7612db7ef53b6b22fa52ec790cb01998718b3db254195f9607f5a4bb3db1a8e8a48a6ba244293b015443a537467ba4378063c09f5b66c47e5e79b685c5fed0c0d19ec694900d65d28b71789f6e5ecfe522dbf5703bbc23239e27e590a39d072391d87485b88d463c3038f4cee9ad87692412846937e7ebd53e725e2c3608e01601034d510cb7e06ad65ce45c200c9851520dfa451851e4bb93d2d5152f4ad2dded4e3cbd8d50980a3fdf43c683655549cf4f3ccd942196ca4ef8197bf0de00a99cef39f38b3f236b39fd78fead953de4a2f22b12445b94261cc7f418a4a301348b4fa20db7f3542f082cae212b681a93ee03abff8f760a5130d709f33cd0255490d1a13839ef8e66a91fe2b0bdf98335d34447f70563a625870aa40c2efbe3e195017646e7d16e849140b785a619e0eee0802684d38a66ffdc1d824fe00b88ee25b0f00ffbe7d9c3cf552e3aad1ddf8b31298a48735c32f8c950a940f724c6809b38686eaf9c92effe121f14a2ebcb2d2d88c7fa2e2086d299c14ff81326f3dda84aeebc2b309f8118232b5ce0dd6c77e5fa124c30e4033e9616e95428757b68e76eb219a2e85024825375b06748832dd040415a8ec3a5bee1c735267ea83fa3dd1be55e46f6ed913720f788f3c4f0e85841f599489c6f3e45f2bb2129e58c47ecf81b879d40bf9000c3cdc4da8fe8b46443ce7267f73a8bcdf1dbc8f3d49a6c141d7456506c4596460244d26a8032947faf360a27c365d11af9ce48815550b1a44c5802f5076a394bf3a360d659ac8bb79be017472d0713a7a6d53a6ad7972a5b91cb50060b3036a45777a8db84da93c8538624217850a267d23d61b9cb08569d0da87f84df7e2c4bb5cab6f010bd370cd8ebbc880e3299e4a3ce5dc54bd370b8992a0c246a21db153ff99673b85d734069ea4a23efaffefbcfa9f05bb09d3d16ac8ea25996b78fb00eb557b2f75a9e43dc", 0x1000}], 0x7, &(0x7f0000000a40)=[{0x80, 0x1, 0x1, "140645c5fae8d4ffd6f6d5951fd4051264b662851c4531cc2c03964d2e90d3daf2eca59302502806469b2a4edb2dc136df55e63e33d882fb5363d5d9fd0ead6cd502a0005cc3ff027a6b10b85e2d491d69bc51ea0978e737948f607e35b16a2acf84b8a2c24a4a2f9fce93f7"}, {0x40, 0x3a, 0xffff, "8701400c4804d78e38db59a9980b9b5c103f56c801a2856b862d07905bc7105c610eae4bb47900d86a646a8cc014"}, {0x18, 0x10a, 0x719c, "ade32a0506"}], 0xd8}}, {{&(0x7f0000000940)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000c40)="da9b287576a53ab4f0de1dfd978a69fef8988ed9a1fca682243178e531fdb27e532909560d3b3ccf67a0f502fe8c8f80df5a4ead7c7977f5d7ac4a8e8968b50a026b7b8604199c999dce3ff41a6fa6999746cea945c7e2bbafa51eb04de5b3e54f2ef32d0bfc4bc0ecfef2c3e654679d5d847e7751a92a1d4d0700e11b29a67da6d886404592da3d1644fb8f1f68bee441a13637076dedfb85a1af300065786fb586e971faa15382117951ea5eba89759189b421616a0726ebbf57fcdd1c1a2f4bce04e6", 0xc4}], 0x1}}], 0x2, 0x48840) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) (async) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:20 executing program 0: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0xc}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000010}, 0x4) 04:04:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x50, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3552.157591][T24067] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3552.333049][T24071] sctp: [Deprecated]: syz-executor.3 (pid 24071) Use of int in maxseg socket option. [ 3552.333049][T24071] Use struct sctp_assoc_value instead [ 3552.413740][T24077] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3552.420679][T24071] sctp: [Deprecated]: syz-executor.3 (pid 24071) Use of int in maxseg socket option. [ 3552.420679][T24071] Use struct sctp_assoc_value instead [ 3552.498449][T24081] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:22 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_control_io(r0, &(0x7f0000001dc0)={0x2c, &(0x7f0000001b00)={0x20, 0x7, 0x58, {0x58, 0x31, "e5381a92e2c9908612bfb10e74128070d34ec8d8e09383478d625ac2f447ccf953ab8c07c67c2718a85bf78415df061a509bbac3d42a0806c980e163a286d6e94198cd35cc82bb046f9bbd84e31dced9bb45fa24e56e"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000001bc0)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xe0, 0x4}, @generic={0x6c, 0x10, 0x2, "d7fb10f7e0c1851edac456b4e382090c54c237e3524a5929f47e91618adf6142474a9d5851f6ab1d475eb539d05660823a3b4cccb0f3d56f9fcbb76f584c77e6bdd917273e7aded02429063e76cb53ae2437fdb98d93f91b623306c68c3816aa24a711ce51ad49a990"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x6, 0x3}, @generic={0xa5, 0x10, 0xa, "f2edc1871885721812561371561a56bb53b90e3915530ef13bf64caee83d19a5e051c9b91c955378f0daad1f68f0198a325fb8993e4c0ea28699cefaddb8a10bdad07e565a40c3734b69ff4595851b5aa0bc5059fd9c9d59f8df4b60ea08018d138e63829a561a6a85a8621fac8b50152f7200d390d1f1b7e79e97a0f7a3564c632d4c1d706c712ac680bddb649423d24cf6c54fc8f222696f4284531f3e5dd05507"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "03ec9c79c91b03f1abf5d066fc667685"}]}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x6, 0x4e, "b54b98ed", "54a6d8af"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x4, 0x0, 0x1, 0x7fff, 0xf4e}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e00)={0x20, 0x7, 0x76, "1471a5b06eece03d63fa46ef452c9a6f7731a67a0034fb72ccb58aa43c027f427ec0098a84dfd1cec313c8d17ee2b473f267e63e219a73613f8cfbf8a3a4e044df16d234eda360056819f1d2e75de97019e34ef43b344098e760f65f4d40ac44b4969509538fb57b2af64e9f7f64ae7d70474513e959"}, &(0x7f0000001e80)={0x0, 0xa, 0x1}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f40)={0x20, 0x0, 0x8, {0x80, 0x80, [0x0]}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002000)={0x40, 0xb, 0x2, "db9e"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000002080)={0x40, 0x13, 0x6, @local}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, 'V@'}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x54}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000002200)={0x40, 0x21, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12b8, &(0x7f0000000340)={[{0xdf, 0x4e00, "534e55bccde713317264416ab0d46b14d904eb3e1106bdf41f7dedf70a47925346478532dc1a60d00a4ea73d5330208c2c546f221a9da0cd56487da38e789e7f489c478211c9517e0a2942cddc8448252c026ff86209a97c09c18ebefdef4f34bbe6b935a45a620885b9d9be02060e5a728e70e3f49368ddfe8bcbbe2bd5b2bcbc1460266d62763a68b0747eb8df270b2a9b1069fad8c692187e7ab8ed08b9649f3c77158a98d802846c761d7e570c816887fa2240bf82e5ba3dec21e117667c8e5febc78ed8cd8f10a4980c7ad8417ef6187d072175b39349fa65557f3c89"}, {0x76, 0x4e00, "069134a4dc8bd00e68b8eedeecc17c3486429d8e234e0969546c0339b31206cc802d031e3288cca321dcea4caa2e95353b37444778d43394d422d69a669f069e44d385c116a463fdd030a58030b36f8feac5de61ae8bd59cef7e0d2cd6cbf853a2c547e364fc16a267b11074106e4bd9d869f8b05c27"}, {0x62, 0x4e00, "6fa7ff854988e00a36917d4a0103afa45ed4d00f6ccb38db4b870ab9fe391b551bf0df7ba3f0f8efbf372c4c24ea4122555d3a1673caf9eadefe7e89b4ec661ce9cb2041d12b282bd80fd2f265c9a7724e34d293c9fa7dafb8de27b219b0f7768a48"}, {0xf, 0x4e00, "40733a4b2dd02a67fb0b9230efff0f"}, {0x1000, 0x4e00, "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"}, {0xad, 0x4e00, "b5106b5b9797794e2d7a6bec6a6b2ae901e2288c296e0093292137ec8d03da3c55d6e56e6862b8a52fdeee0d915eada08f4651185aa8d3b7eb9bb6ded69f414bd968c439f62d39f5d235c1c8c88832a3ffc2d592875e27c6430bb465d852d996cffc1567d202159ab2e857c2246fd40cd7283f5925e7a3c9004f43ba45c9cebb72da0d605ee92df9e18c6d5eddb6d4b5859c1f29c954ffca9ef977833eba00699885860371bd464a3396e37124"}, {0x20, 0x4e00, "936741407c14beaf67b7846cff0df366a37f18ddf0228135cb023baede44a94a"}]}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xfb, {0xfb, 0xe, "a8fafb1392ca4a01c5326bef4e689462f1c10839eb92e64172f7b9ca28400d1d95ec151711add17634e5cbbea541ada313a21d39b2359c218021989c1f58c21cd3b8fcbca603e1a2d8556236ed0e2c14bce4559e69bc87abe5ac3600cb00b5d2e7f9842d929c205ca7ee77c4371869a4df77104872314b316fbcf5d43e2175b99c849a55ab871c77cbedebdba2a0d3a2fab97ab47fa83aef5b6a3d920f671a7ff9ff16fc5f2a3fa6b6353f731060dd6da34163cf9e9d7a1353abd8f84923280dc94e2fdc64ff3fc569d628d337a2cb2dd500f77bef2cb8c49ef42addb5d825aa5322b4084110946aa98b25216a90e79663ce45cd8458ad19b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "79158c422626e69f282b5a5eb7596a51"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x6, "0e905578", "20d8cc17"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x5, 0x2, 0x0, 0x1ff}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x20, 0x6, 0xb7, "fa4a545ad85bdebd88fe605861479f5fd6aa826d8be02ea5910b808fe13458661b44c5f95349033df57dab1df855984062d6c8ef789ce46e35464522a5352c7307ce60720c9bb2d39e3b54d78ee51b27c6ab6014a6986bebc2861ffa8e5244d40352186b12e98598f3dd041be0ef1df0707a1c1ef5c893b81f03f6fe45731aa2fb522178d6e30b257894761acf9ffc5646ba5e7b98134345bc9e60318cf03af9f649df3ef47c9b60767f0df10c8609f2e6a53ec3904aac"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff0f]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0xb, 0x2, "a4da"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="2c835430e676"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "dce1"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_control_io(r0, &(0x7f0000001dc0)={0x2c, &(0x7f0000001b00)={0x20, 0x7, 0x58, {0x58, 0x31, "e5381a92e2c9908612bfb10e74128070d34ec8d8e09383478d625ac2f447ccf953ab8c07c67c2718a85bf78415df061a509bbac3d42a0806c980e163a286d6e94198cd35cc82bb046f9bbd84e31dced9bb45fa24e56e"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000001bc0)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xe0, 0x4}, @generic={0x6c, 0x10, 0x2, "d7fb10f7e0c1851edac456b4e382090c54c237e3524a5929f47e91618adf6142474a9d5851f6ab1d475eb539d05660823a3b4cccb0f3d56f9fcbb76f584c77e6bdd917273e7aded02429063e76cb53ae2437fdb98d93f91b623306c68c3816aa24a711ce51ad49a990"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x6, 0x3}, @generic={0xa5, 0x10, 0xa, "f2edc1871885721812561371561a56bb53b90e3915530ef13bf64caee83d19a5e051c9b91c955378f0daad1f68f0198a325fb8993e4c0ea28699cefaddb8a10bdad07e565a40c3734b69ff4595851b5aa0bc5059fd9c9d59f8df4b60ea08018d138e63829a561a6a85a8621fac8b50152f7200d390d1f1b7e79e97a0f7a3564c632d4c1d706c712ac680bddb649423d24cf6c54fc8f222696f4284531f3e5dd05507"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "03ec9c79c91b03f1abf5d066fc667685"}]}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x6, 0x4e, "b54b98ed", "54a6d8af"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x4, 0x0, 0x1, 0x7fff, 0xf4e}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e00)={0x20, 0x7, 0x76, "1471a5b06eece03d63fa46ef452c9a6f7731a67a0034fb72ccb58aa43c027f427ec0098a84dfd1cec313c8d17ee2b473f267e63e219a73613f8cfbf8a3a4e044df16d234eda360056819f1d2e75de97019e34ef43b344098e760f65f4d40ac44b4969509538fb57b2af64e9f7f64ae7d70474513e959"}, &(0x7f0000001e80)={0x0, 0xa, 0x1}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f40)={0x20, 0x0, 0x8, {0x80, 0x80, [0x0]}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002000)={0x40, 0xb, 0x2, "db9e"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000002080)={0x40, 0x13, 0x6, @local}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, 'V@'}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x54}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000002200)={0x40, 0x21, 0x1}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12b8, &(0x7f0000000340)={[{0xdf, 0x4e00, "534e55bccde713317264416ab0d46b14d904eb3e1106bdf41f7dedf70a47925346478532dc1a60d00a4ea73d5330208c2c546f221a9da0cd56487da38e789e7f489c478211c9517e0a2942cddc8448252c026ff86209a97c09c18ebefdef4f34bbe6b935a45a620885b9d9be02060e5a728e70e3f49368ddfe8bcbbe2bd5b2bcbc1460266d62763a68b0747eb8df270b2a9b1069fad8c692187e7ab8ed08b9649f3c77158a98d802846c761d7e570c816887fa2240bf82e5ba3dec21e117667c8e5febc78ed8cd8f10a4980c7ad8417ef6187d072175b39349fa65557f3c89"}, {0x76, 0x4e00, "069134a4dc8bd00e68b8eedeecc17c3486429d8e234e0969546c0339b31206cc802d031e3288cca321dcea4caa2e95353b37444778d43394d422d69a669f069e44d385c116a463fdd030a58030b36f8feac5de61ae8bd59cef7e0d2cd6cbf853a2c547e364fc16a267b11074106e4bd9d869f8b05c27"}, {0x62, 0x4e00, "6fa7ff854988e00a36917d4a0103afa45ed4d00f6ccb38db4b870ab9fe391b551bf0df7ba3f0f8efbf372c4c24ea4122555d3a1673caf9eadefe7e89b4ec661ce9cb2041d12b282bd80fd2f265c9a7724e34d293c9fa7dafb8de27b219b0f7768a48"}, {0xf, 0x4e00, "40733a4b2dd02a67fb0b9230efff0f"}, {0x1000, 0x4e00, "b480029ea24f0d9b683a2967fd607596dd38b92d158d125b6575927afcc98b70f8ed0df6eb8fedbab69ee988cff121e167695d446d086e5163ab62437daff2b305ba6a34109ad17e19d4d3feb7657f8649487d57672e924bd8473257e1ad701566cec525032b7282cbfd21b221d4d3b6d6173e1ee19df78b692898eab04404c2b532cb2f506bb2136562fd8b20fe3167efc2992e9437e0c38e9a42a3da58d3f05e62e4f574a38307f6222c9156de18a1bf117f607e632419ce446afd59430f9b301c4d5fe251caecf1408aa0f9ecb2b5f2129632610f48db33f6905fb6a8a589f6582b9bd072db9ce1d368010d32c1e3feb66369ed8282142235b04f484bf51e9ae6c8bc11c4bed0d8091efbad2ae5c074719463c40fb284d6d1eb9ee5b5409da108d4ca970f65d9ee7df40d33ead144d49729840b7627c5bd3a0b5fa64e492d62cff05866adc8f0371de94f655ec7582f941a56fb9f729e0e29796c0a313dc0054060fa5f88a445de224297ac60eafaccddd45659a707fe52da66d9a000c194320b9e81bc70c04694d37d04eeeaf716c981b2f9336e9e3adf0883d9766ca95ffc25fdd172dbafb4f7226e647975be73f6fca6b87b36b9286bf4f35d36d70fcc104ffb453edf12afef6a33e80a851adb9483be12a6c5b6c70393a73bb06efc2000ccea002a116c70b99566385e3cf22d69008ebd191a74de4c85323cd21c9e8c1cd902ea73a780bc307751a12ec3eee5178aa6ffe95ee9a911fb5f7b35c49dafb95f5093e24dc49eeaf3bab7be26866bc6cde1e49d8a742f8060cc29e0c7b4ccc2834f07acbe8fd8bc33c4534eb68ebc68aefdc183cea8d382670de85e73167bd93232bca6093bdad9389077cc80c81bf9be6d758872e40abb719d3f6038d1e2e7d9d4c0e64762be9c3c6336cbc1e228fe90500b8a2ac124f1f717fab3e09dfcd133b5c39305edb70fb2063b3ef5f2f2a7797c6500052788fc29795012ea8b2541bc21aae3eeb985258ca71532098ee6e34f6edde2366a7cd88855e42c0f48cf0d5fb30e7d58d81b29001fc83ae2d5ece39afa7f370bd5fa0afc394090322c50904ef603609c226b017917891bebbd5e9e9b3a804e97c04e009a74aae43e5e1f0164ea8851b34adae99b9b5967e7798fc24f91b1a32a28f7947b52715f63b07cc3f168b25778265502e962d95ba1abb28225ec3c8a2fd2b10d6d820d9e43d429a2316b0e86419e81dda062bb1344338bed6e96f6cc588d11acc4d6762c0c1d6923ce890585ed4bd287b07fd029327da579115edf360e0c1ff9a79b098414ef45f8efe8b6b9521af841db477c587b39cd90eb8ab06206a3fbe0881e116d7bb6f7320874dbeda54a05aa3fc026b1fde4570216137b51ebec0b5f8c664716f39ec0f181d02a4da37cff4f558c43ce23261150bf59e67d1b92b824add99534e442d111e06b6d5be7c0cc1c7961b3b64fa5234d3706723919c48d5ff4d64d602ab7cdae9ae079606047b0b934827f30ff19f3a2c077904e087a4e6e91d74cc764087a5cad4fbcc30f9ae28dfab4b1ad51911a7d52ae82cccb5772da342634f6f92ec78c85105fe30aeb02295f0eb1d08d28ebb44930546c6feab07c3d1c987fb0f3ecea3d01784491f67705667b959db378e43705b2268ff91dcc3353d95f98ddfe3f29c8190b9dc6e6c952befae9bf13d157f3f5b06b8562269d604fc3a6ef6ff71200c2a831b99de17d3471ffeb913596afb6a07efc4dd2af0677477e215f83dfcc31d6d7f9c2b4aa8848c3c23209f81c9c50418d5a550fc76ef7665040236b20f8450583eceb6ad2a26b2be9188b27d6ea4b8e456c72826fbcf596ca749e4175e7df6ee1ea60f29eea19060a0957ee109a1c1c78c2b0cadd20380e18af8f78cf265256cef4e92723a44e8d59122e9c50eb14562c87c89909a5dfc73b44e4daa2226874550f1eee3658ecf1bd411fb358cd62c7055ef7a459ec9c9d09f3ef2fac2a509ed18208b749d44c18968380f940b53c7cefa4a26d898bf357d8dbf94d303cd5a0b7099fb54f1fb5952d3400439081651505a33a7077f436d5cb992c943d74885f0436ad23e3043dc30ad6ea22fae48196b9758946af8d410be72cf8af9fba7e40a503ea99a536b6f618a754dc2859dd8fb60e07cfd3a32fe3cc4746f93d148b39f846ad700809493ee3a9bb5d38b0e4cfb6e5f28f66b32a8a3c5693411f09f2bf6a3311bd881afbb6bd7c71829878fef3ea32d54cfefe767f4e20fcf6af021ced47c6652cca2c76c552e6d3b6891fe6ac3d4c107cdf475228238ef6716d62cc80c4876e8865251e407bf19489fef0596fe68e28e37c964dc33f1e6bd7810667434165bf3e5513201f1d39f209224feac72f208a8305b76624645de888739c638b39b3b33d4f1786a709862d8b67ad8e842284d5f6282a54dbc9232d2f0a1d067575e9ae2672a05345869c275580f2bdb9b470a698d36041595b8987de0fe421830efd0680beb4f4bda084e07093d6bf306734fd0765d88a8f55b085531b5122f69b54d4ee99266129cc8c5b1851310a3ca47da8d30d68580ce4d218b26f38738c007083d40c9a242a75cd8b2af1d6aa71bcb706c0c3ff627ad81cff514fca4ed5ecade67fd446c139b2581819920044a9489cd52c9bc193c6057552f3aece25699828b6e31e4b733b40aeb6cd5bb9f012ed3709de455bbce9b419330971de5f3a594680c7ce959d58cc970d7c729e22df05f1309c5f8d2139ceadb2c22f75a5b9bc1947ae285445c03693fa397488f38f13014cbde22fdec2eced60d0add021e39441730b4f151c111ce9d786fc6de40cd46d8e07120f3e5c3875ccd480d0918f3cbc28ef6c2078d8dddb83c7944b611127b06a900cb10ccc999ad110ac6977763a06ea4c271b6db8c356f415d480672799d6c54be2d0fb2dc3f920998dda900e7351a18cd74b2b62e3cff51396f0ce2c028ab633614ea50b576d7d2be46f175074a751abf779f67a212cf827aa2c5a05e3f47cba2303298e80f852562d1e393cf0f50cde36e4ff766fc1d38ba3929edc4f8bb81c9649d5af91d4f0d6d74d795a46fef492f841117965269ccc8170d1496c2f927fc64515ec78c98dbc7e8e8b6aa56b1efbc9d5527320a2633be21621e306cd9527f67a7d684f2d04689b4109b8168189b1e2016f59b380775ec0063f0871bc24efa29dd85b3088c0598c64b0267293ace31a332f5c962b7fef236b98c0afc6402ea7d344dd36c664f764f7d79ac4dbeebaa792591552c62639bd3aee99fb0ffd13777bf736dcf185fe32dbf6dd1148fc37ec351582c9ea4fa08b4a94457f19ea75ec19a587ec6aad04f7b873dd2a080a75e7550c469037de1001a4a07e8572afb68382084b2ba67f1479cc23f55ab8e216e0842df61adc11a388375addba98c91a478ef1e449887342c3161f9f4cd35fc5b7ba744b7d1dffe1ac81be35124cbfb8925abbe9956577eb96d045bdf653ae67c5887ec74491e220bdc338d4067b98b9bc5d9b58e97295110a0880ba0cbcb0b47269b5be1705fb5f218b54f6ef205fcf0c9fea2472e789e83c1f40994ef284f3853ff5a4f33d0532f7af44b617a3300b703c6cfe0948edae64c92555daf6756882ed937b7130ffd8805886ea9b1099d1ea86544502b397d30adf1e82da6e1b4d28938d1320b377826b17e8ca4a9f4f0f472b924ef795becf711cdad001a709569565f282636f32414f59c99b8d95991627f421a5e162478b79791bda8570bfd6d2f03bcba21fbc5495e0f4bccb1f04c5e6dcb2f0ef3b759e7e1945ce2f5b24a06573f0d4b43e9b0a33924321290306c1145dc6ccb9fa48e450c3d233dd63f7b73188d5dc168e8c2117f0d629b2730ed16aef17ffc097e8103ff60028c9135ace9ebcd30b19bcfd39a4a8e4d046c4d946fd4719479207dbd2ad9ae69af5e4b257101e18504a0fb30b590d69adc8e1714b389a2b6d6e80fa84c1831aea22369efae0c3b08da06c84d0c586ac2b226f1d6be20055e2a875989a1a89109d6b25c27cd259df08c5791157da4ae8903fff5dbdea00efbd9ce00c04e61c3d5b5ef6826a427687287a7684e23a09dd899741d5b02ad9432849c766973827f38e777c4f40a9800a746c079c05c6671216ea83833652c92717bd281eef2f8bbe0504c857f0fafb5e7bdb3edb00e9125ec5e719d011ba0afadc3f614393c3a76f6d2a3478ee1620a45703970b4a88f04257a58c1a7b3a3ad4018395a306ee3ae630e29589ef5698e532dbd23b70479ad4bac1922da15c8fa11d938cffc14fc34730a3a68a90017292966491e988546cd0f8e7b59c45b2cb08aeb5c2fa49db9ecb6001774837d3b76270ff50a1b747f9572065baf05b577b1b99ff357e8fd84541b8e7d22490d497be6de7a4d5b9266e8000bdcbf4cf1bbd7e52ef4f624e771be33782c3f3e2fddfa5e2fba11304b42ad355fe8e01f3a6af7490716825e9ac5f5eb7800ca9589dbd55b45848a0e6efbf118e9e104d39c6fec60c2703dba6e5e4e9ed8406d0acc9dfdd48cb34aa8a07185608a554d79e1c8c4956119a0e4d1dc3e3606cf0706677ac8d5d4c72a392ec8d43fd02c34ba0e238c685b94b2284c3a4cbc7c76562ec6c7506762140e939e7e3f7b150e65a6fcb0889d56d5070b9898d680316e63392154d64555b2e97335493e47134aa679feec83e4b91ad75394b269fad5bde6ccecd88a81e3d42e41139b1c87ed31049b326eab72307e760e0ad47222134c0898e172b873556fd6e2238bc16887dc11822d7eddf5074c37682540c0876e4702204ed330ec961a25abb5ce0c9ac18f40e2c7d284d1363f525d487ce14f58c9d88e2b7573c14fdf638eb70588a80279e778c58f39ffe2af1e2ba70005c7db4608c2093a6068c86395ab6f0cd7428ede2c3bbadb89d7928d83890a74473b4ff27bf1915a3b5c4cd967c4856fb4d7aa242a19a3fbad4d625b20adcbadf1bbb7a5204f421ecac328d5650e8ecd6bbb64b4a9bb4b5938cc39e402f19c4a5e8fc79a7d7556b2a84641449515acce7524f1de6f8ed9d102aa4b79ec25adbc4000ea5ad987ebf921f42e39cf7fe2a8d7d4539765aa609a1892bb4e049d34c1fe2aa145dffa04b0b1c92f64257a87a8202e3b46261e61eb9481ac156bfbee580edb92e08511a946a8443e25d4bcbee2404ef2b81b5d5cff6e2c38b5ceb365a2840cb23612be2e3e0984c6404ac6dcddfef7aaf7cf8e05ed3f13c4a7b851030b11172534c2e4c24166187a2ffab0828f1001a48a82fa8dd12f9f6dbe887d2d1d404f7ece0c4c19b529b981b3bdcecbb7a9a7242001b65c98a34272cf38028a8b5b3cd874b9a3f58946e2d1ec599fa9ccc6eb9ccc78ccbf2e7f9d33569fc36cdd6c440bc1bf7659493db58f849ca36311aae8d515146f3e2b58096fe22966f1daf47bf408e4c6f9a2a6d76175b31aee71fc202d2f04d7bb68518d98d0621baa2f65545aa9c62c61b1018aa6b9d1930b644d132916fcdcba9d4e189e366fbe136e28618cae7f47733820ea449598a1351caf1226396a740e2d3b615f0589796f18ed260ce9850835d78151f06706e25e723a714db6d1552cc9a039f34c5e45ab4f001233a390a100be508473ab99ebecd463a8f336c6e06390367d54a188200153067e58b6bac1ddbebdc5b9936a4e4b29b801decfb0c41e9e866fe8e411064bacf6f260fcbe2d2bd069e311d64def0813236da6cffd8f333f792981f017f09faf849221a59e72072f973800c901fed0342ffb12280d7a41e310d043030da717ba4"}, {0xad, 0x4e00, "b5106b5b9797794e2d7a6bec6a6b2ae901e2288c296e0093292137ec8d03da3c55d6e56e6862b8a52fdeee0d915eada08f4651185aa8d3b7eb9bb6ded69f414bd968c439f62d39f5d235c1c8c88832a3ffc2d592875e27c6430bb465d852d996cffc1567d202159ab2e857c2246fd40cd7283f5925e7a3c9004f43ba45c9cebb72da0d605ee92df9e18c6d5eddb6d4b5859c1f29c954ffca9ef977833eba00699885860371bd464a3396e37124"}, {0x20, 0x4e00, "936741407c14beaf67b7846cff0df366a37f18ddf0228135cb023baede44a94a"}]}) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xfb, {0xfb, 0xe, "a8fafb1392ca4a01c5326bef4e689462f1c10839eb92e64172f7b9ca28400d1d95ec151711add17634e5cbbea541ada313a21d39b2359c218021989c1f58c21cd3b8fcbca603e1a2d8556236ed0e2c14bce4559e69bc87abe5ac3600cb00b5d2e7f9842d929c205ca7ee77c4371869a4df77104872314b316fbcf5d43e2175b99c849a55ab871c77cbedebdba2a0d3a2fab97ab47fa83aef5b6a3d920f671a7ff9ff16fc5f2a3fa6b6353f731060dd6da34163cf9e9d7a1353abd8f84923280dc94e2fdc64ff3fc569d628d337a2cb2dd500f77bef2cb8c49ef42addb5d825aa5322b4084110946aa98b25216a90e79663ce45cd8458ad19b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "79158c422626e69f282b5a5eb7596a51"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x6, "0e905578", "20d8cc17"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x5, 0x2, 0x0, 0x1ff}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x20, 0x6, 0xb7, "fa4a545ad85bdebd88fe605861479f5fd6aa826d8be02ea5910b808fe13458661b44c5f95349033df57dab1df855984062d6c8ef789ce46e35464522a5352c7307ce60720c9bb2d39e3b54d78ee51b27c6ab6014a6986bebc2861ffa8e5244d40352186b12e98598f3dd041be0ef1df0707a1c1ef5c893b81f03f6fe45731aa2fb522178d6e30b257894761acf9ffc5646ba5e7b98134345bc9e60318cf03af9f649df3ef47c9b60767f0df10c8609f2e6a53ec3904aac"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff0f]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0xb, 0x2, "a4da"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="2c835430e676"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "dce1"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) (async) 04:04:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) socket$inet_sctp(0x2, 0x5, 0x84) 04:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x60, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:22 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop12', 0xa40, 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) creat(&(0x7f0000000340)='./file0\x00', 0xa0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1ff, 0x3, 0xfff, 0x2069, r2, 0x1000, '\x00', r5, r7, 0x2, 0x6, 0x5}, 0x29) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000000), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:04:22 executing program 0: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 3554.754692][T24090] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3554.811449][T24091] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3554.855206][T24093] sctp: [Deprecated]: syz-executor.3 (pid 24093) Use of int in maxseg socket option. [ 3554.855206][T24093] Use struct sctp_assoc_value instead 04:04:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xc, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:23 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:04:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x68, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3555.085982][T24093] sctp: [Deprecated]: syz-executor.3 (pid 24093) Use of int in maxseg socket option. [ 3555.085982][T24093] Use struct sctp_assoc_value instead [ 3555.136964][T24099] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3555.174645][T24093] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:23 executing program 0: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 3555.359873][T24104] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080006000d101000", 0x24) [ 3555.625053][T24111] sctp: [Deprecated]: syz-executor.3 (pid 24111) Use of int in maxseg socket option. [ 3555.625053][T24111] Use struct sctp_assoc_value instead [ 3555.708593][T24111] sctp: [Deprecated]: syz-executor.3 (pid 24111) Use of int in maxseg socket option. [ 3555.708593][T24111] Use struct sctp_assoc_value instead [ 3555.804822][T24111] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 04:04:26 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_control_io(r0, &(0x7f0000001dc0)={0x2c, &(0x7f0000001b00)={0x20, 0x7, 0x58, {0x58, 0x31, "e5381a92e2c9908612bfb10e74128070d34ec8d8e09383478d625ac2f447ccf953ab8c07c67c2718a85bf78415df061a509bbac3d42a0806c980e163a286d6e94198cd35cc82bb046f9bbd84e31dced9bb45fa24e56e"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000001bc0)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xe0, 0x4}, @generic={0x6c, 0x10, 0x2, "d7fb10f7e0c1851edac456b4e382090c54c237e3524a5929f47e91618adf6142474a9d5851f6ab1d475eb539d05660823a3b4cccb0f3d56f9fcbb76f584c77e6bdd917273e7aded02429063e76cb53ae2437fdb98d93f91b623306c68c3816aa24a711ce51ad49a990"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x6, 0x3}, @generic={0xa5, 0x10, 0xa, "f2edc1871885721812561371561a56bb53b90e3915530ef13bf64caee83d19a5e051c9b91c955378f0daad1f68f0198a325fb8993e4c0ea28699cefaddb8a10bdad07e565a40c3734b69ff4595851b5aa0bc5059fd9c9d59f8df4b60ea08018d138e63829a561a6a85a8621fac8b50152f7200d390d1f1b7e79e97a0f7a3564c632d4c1d706c712ac680bddb649423d24cf6c54fc8f222696f4284531f3e5dd05507"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "03ec9c79c91b03f1abf5d066fc667685"}]}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x6, 0x4e, "b54b98ed", "54a6d8af"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x4, 0x0, 0x1, 0x7fff, 0xf4e}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e00)={0x20, 0x7, 0x76, "1471a5b06eece03d63fa46ef452c9a6f7731a67a0034fb72ccb58aa43c027f427ec0098a84dfd1cec313c8d17ee2b473f267e63e219a73613f8cfbf8a3a4e044df16d234eda360056819f1d2e75de97019e34ef43b344098e760f65f4d40ac44b4969509538fb57b2af64e9f7f64ae7d70474513e959"}, &(0x7f0000001e80)={0x0, 0xa, 0x1}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f40)={0x20, 0x0, 0x8, {0x80, 0x80, [0x0]}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002000)={0x40, 0xb, 0x2, "db9e"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000002080)={0x40, 0x13, 0x6, @local}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, 'V@'}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x54}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000002200)={0x40, 0x21, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12b8, &(0x7f0000000340)={[{0xdf, 0x4e00, "534e55bccde713317264416ab0d46b14d904eb3e1106bdf41f7dedf70a47925346478532dc1a60d00a4ea73d5330208c2c546f221a9da0cd56487da38e789e7f489c478211c9517e0a2942cddc8448252c026ff86209a97c09c18ebefdef4f34bbe6b935a45a620885b9d9be02060e5a728e70e3f49368ddfe8bcbbe2bd5b2bcbc1460266d62763a68b0747eb8df270b2a9b1069fad8c692187e7ab8ed08b9649f3c77158a98d802846c761d7e570c816887fa2240bf82e5ba3dec21e117667c8e5febc78ed8cd8f10a4980c7ad8417ef6187d072175b39349fa65557f3c89"}, {0x76, 0x4e00, "069134a4dc8bd00e68b8eedeecc17c3486429d8e234e0969546c0339b31206cc802d031e3288cca321dcea4caa2e95353b37444778d43394d422d69a669f069e44d385c116a463fdd030a58030b36f8feac5de61ae8bd59cef7e0d2cd6cbf853a2c547e364fc16a267b11074106e4bd9d869f8b05c27"}, {0x62, 0x4e00, "6fa7ff854988e00a36917d4a0103afa45ed4d00f6ccb38db4b870ab9fe391b551bf0df7ba3f0f8efbf372c4c24ea4122555d3a1673caf9eadefe7e89b4ec661ce9cb2041d12b282bd80fd2f265c9a7724e34d293c9fa7dafb8de27b219b0f7768a48"}, {0xf, 0x4e00, "40733a4b2dd02a67fb0b9230efff0f"}, {0x1000, 0x4e00, "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"}, {0xad, 0x4e00, "b5106b5b9797794e2d7a6bec6a6b2ae901e2288c296e0093292137ec8d03da3c55d6e56e6862b8a52fdeee0d915eada08f4651185aa8d3b7eb9bb6ded69f414bd968c439f62d39f5d235c1c8c88832a3ffc2d592875e27c6430bb465d852d996cffc1567d202159ab2e857c2246fd40cd7283f5925e7a3c9004f43ba45c9cebb72da0d605ee92df9e18c6d5eddb6d4b5859c1f29c954ffca9ef977833eba00699885860371bd464a3396e37124"}, {0x20, 0x4e00, "936741407c14beaf67b7846cff0df366a37f18ddf0228135cb023baede44a94a"}]}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xfb, {0xfb, 0xe, "a8fafb1392ca4a01c5326bef4e689462f1c10839eb92e64172f7b9ca28400d1d95ec151711add17634e5cbbea541ada313a21d39b2359c218021989c1f58c21cd3b8fcbca603e1a2d8556236ed0e2c14bce4559e69bc87abe5ac3600cb00b5d2e7f9842d929c205ca7ee77c4371869a4df77104872314b316fbcf5d43e2175b99c849a55ab871c77cbedebdba2a0d3a2fab97ab47fa83aef5b6a3d920f671a7ff9ff16fc5f2a3fa6b6353f731060dd6da34163cf9e9d7a1353abd8f84923280dc94e2fdc64ff3fc569d628d337a2cb2dd500f77bef2cb8c49ef42addb5d825aa5322b4084110946aa98b25216a90e79663ce45cd8458ad19b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "79158c422626e69f282b5a5eb7596a51"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x6, "0e905578", "20d8cc17"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x5, 0x2, 0x0, 0x1ff}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x20, 0x6, 0xb7, "fa4a545ad85bdebd88fe605861479f5fd6aa826d8be02ea5910b808fe13458661b44c5f95349033df57dab1df855984062d6c8ef789ce46e35464522a5352c7307ce60720c9bb2d39e3b54d78ee51b27c6ab6014a6986bebc2861ffa8e5244d40352186b12e98598f3dd041be0ef1df0707a1c1ef5c893b81f03f6fe45731aa2fb522178d6e30b257894761acf9ffc5646ba5e7b98134345bc9e60318cf03af9f649df3ef47c9b60767f0df10c8609f2e6a53ec3904aac"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff0f]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0xb, 0x2, "a4da"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="2c835430e676"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "dce1"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xfb, {0xfb, 0xe, "a8fafb1392ca4a01c5326bef4e689462f1c10839eb92e64172f7b9ca28400d1d95ec151711add17634e5cbbea541ada313a21d39b2359c218021989c1f58c21cd3b8fcbca603e1a2d8556236ed0e2c14bce4559e69bc87abe5ac3600cb00b5d2e7f9842d929c205ca7ee77c4371869a4df77104872314b316fbcf5d43e2175b99c849a55ab871c77cbedebdba2a0d3a2fab97ab47fa83aef5b6a3d920f671a7ff9ff16fc5f2a3fa6b6353f731060dd6da34163cf9e9d7a1353abd8f84923280dc94e2fdc64ff3fc569d628d337a2cb2dd500f77bef2cb8c49ef42addb5d825aa5322b4084110946aa98b25216a90e79663ce45cd8458ad19b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "79158c422626e69f282b5a5eb7596a51"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x6, "0e905578", "20d8cc17"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x5, 0x2, 0x0, 0x1ff}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x20, 0x6, 0xb7, "fa4a545ad85bdebd88fe605861479f5fd6aa826d8be02ea5910b808fe13458661b44c5f95349033df57dab1df855984062d6c8ef789ce46e35464522a5352c7307ce60720c9bb2d39e3b54d78ee51b27c6ab6014a6986bebc2861ffa8e5244d40352186b12e98598f3dd041be0ef1df0707a1c1ef5c893b81f03f6fe45731aa2fb522178d6e30b257894761acf9ffc5646ba5e7b98134345bc9e60318cf03af9f649df3ef47c9b60767f0df10c8609f2e6a53ec3904aac"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff0f]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0xb, 0x2, "a4da"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="2c835430e676"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "dce1"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) 04:04:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6c, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:26 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop12', 0xa40, 0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) creat(&(0x7f0000000340)='./file0\x00', 0xa0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1ff, 0x3, 0xfff, 0x2069, r2, 0x1000, '\x00', r5, r7, 0x2, 0x6, 0x5}, 0x29) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000000), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:04:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:26 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x1c, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000006c0)='syzkaller\x00', 0x80000000, 0x38, &(0x7f0000000700)=""/56, 0x0, 0x40, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x3, 0x3ff, 0x768}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r5], &(0x7f0000000840)=[{0x0, 0x2, 0xb, 0x8}, {0x0, 0x2, 0x5, 0xc}, {0x4, 0x5, 0x4, 0x7}, {0x2, 0x4, 0xb, 0xb}], 0x10, 0x7fff}, 0x90) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x501080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1d, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x6, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb27b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x44, &(0x7f0000000300)=""/68, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r9], &(0x7f00000004c0)=[{0x2, 0x4, 0x0, 0xa}, {0x5, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0xa}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) 04:04:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket(0x10, 0x3, 0x0) [ 3557.960519][T24123] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3558.000572][T24121] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3558.058007][T24126] sctp: [Deprecated]: syz-executor.3 (pid 24126) Use of int in maxseg socket option. [ 3558.058007][T24126] Use struct sctp_assoc_value instead 04:04:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x10, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x74, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3558.233415][T24126] sctp: [Deprecated]: syz-executor.3 (pid 24126) Use of int in maxseg socket option. [ 3558.233415][T24126] Use struct sctp_assoc_value instead [ 3558.415030][T24139] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:26 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop12', 0xa40, 0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) creat(&(0x7f0000000340)='./file0\x00', 0xa0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1ff, 0x3, 0xfff, 0x2069, r2, 0x1000, '\x00', r5, r7, 0x2, 0x6, 0x5}, 0x29) (async) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000000), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 3558.495553][T24138] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 04:04:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7a, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x11, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3558.787762][T24148] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3558.887506][T24151] sctp: [Deprecated]: syz-executor.3 (pid 24151) Use of int in maxseg socket option. [ 3558.887506][T24151] Use struct sctp_assoc_value instead [ 3558.924124][T24152] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3559.078071][T24151] sctp: [Deprecated]: syz-executor.3 (pid 24151) Use of int in maxseg socket option. [ 3559.078071][T24151] Use struct sctp_assoc_value instead 04:04:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x12, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1f4, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:29 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = dup3(r1, r1, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8, 0x7, 0x9eb, 0x1dc, {{0x12, 0x4, 0x1, 0x12, 0x48, 0x67, 0x0, 0x80, 0x2b, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x74, 0x0, 0x9, [0x800, 0x3, 0x80]}, @end, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000380)=r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:29 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x1c, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000006c0)='syzkaller\x00', 0x80000000, 0x38, &(0x7f0000000700)=""/56, 0x0, 0x40, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x3, 0x3ff, 0x768}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r5], &(0x7f0000000840)=[{0x0, 0x2, 0xb, 0x8}, {0x0, 0x2, 0x5, 0xc}, {0x4, 0x5, 0x4, 0x7}, {0x2, 0x4, 0xb, 0xb}], 0x10, 0x7fff}, 0x90) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x501080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1d, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x6, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb27b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x44, &(0x7f0000000300)=""/68, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r9], &(0x7f00000004c0)=[{0x2, 0x4, 0x0, 0xa}, {0x5, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0xa}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x90) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 04:04:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) 04:04:29 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000300)={[{0x23}]}) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x160, &(0x7f0000000000)={[{0x84, 0x4e00, "267cca99c241cc71890e54109c4d364b4d186239fa31e99d769b5c9b3e01e58332e1733388fc1ff8e39681c6bddbadc73d10424417410c0e4d40a50bf2a4bf72431b17b5d77ea45f856dab33c1486b074706c89b38b7bc31c2ebea832bf8d79c86cbe768abe18ed3e2ffc4b722db7bb38a1785100f2d2bff4f76f4c1837f41618d4e4b7c"}, {0xbc, 0x4e00, "ac5cb5dda9c21ab52c43ab958c1a17540f21a73392b2f44f3456e474dc093c15214d298813331efd895fb01a0b68a2bc27d309769a7ecc177f1c9163add15d1d5ab5265a54a9a4a50e84c0b15003337b412780cd3327a139dc3f5983775f24807a28d214481cdfd839c4aca19b3b46e2a8323c428990db00f402a379d02b58b3b69ef1451e0e7f1b9701ca6e220a109c16a4efb956843dfe847a5e254ea92ef1fe4195043cd27db7b703f675737525a5a814a78ab01bf7cf4eb6f374"}, {0x12, 0x4e00, "3e3ead89e8c24889cd850d8c9b41ec7b4e4f"}]}) [ 3561.172182][T24164] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3561.184954][T24159] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3561.232296][T24161] sctp: [Deprecated]: syz-executor.3 (pid 24161) Use of int in maxseg socket option. [ 3561.232296][T24161] Use struct sctp_assoc_value instead 04:04:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x25, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x300, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3561.413640][T24172] sctp: [Deprecated]: syz-executor.3 (pid 24172) Use of int in maxseg socket option. [ 3561.413640][T24172] Use struct sctp_assoc_value instead 04:04:29 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x1c, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000006c0)='syzkaller\x00', 0x80000000, 0x38, &(0x7f0000000700)=""/56, 0x0, 0x40, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x3, 0x3ff, 0x768}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r5], &(0x7f0000000840)=[{0x0, 0x2, 0xb, 0x8}, {0x0, 0x2, 0x5, 0xc}, {0x4, 0x5, 0x4, 0x7}, {0x2, 0x4, 0xb, 0xb}], 0x10, 0x7fff}, 0x90) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x501080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1d, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x6, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb27b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x44, &(0x7f0000000300)=""/68, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r9], &(0x7f00000004c0)=[{0x2, 0x4, 0x0, 0xa}, {0x5, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0xa}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x90) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 3561.577296][T24175] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3561.608789][T24176] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) socket$inet_sctp(0x2, 0x1, 0x84) 04:04:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x48, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x3e8, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3562.067260][T24190] sctp: [Deprecated]: syz-executor.3 (pid 24190) Use of int in maxseg socket option. [ 3562.067260][T24190] Use struct sctp_assoc_value instead 04:04:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4c, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x500, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:30 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = dup3(r1, r1, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8, 0x7, 0x9eb, 0x1dc, {{0x12, 0x4, 0x1, 0x12, 0x48, 0x67, 0x0, 0x80, 0x2b, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x74, 0x0, 0x9, [0x800, 0x3, 0x80]}, @end, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000380)=r4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:30 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x1}, {0x20}, 0x1f9, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)="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", 0x1fe, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1de}) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0xfef, 0x23662, 0x7c, 0x842, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd2d) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000024000b0d000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x40800) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000005f6661737400000600050000000000"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1f0, 0x9, 0x3290, 0x8a4, r2, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0xe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0x19484405, 0x484, r2, 0xfb95, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xf}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) [ 3562.232894][T24191] sctp: [Deprecated]: syz-executor.3 (pid 24191) Use of int in maxseg socket option. [ 3562.232894][T24191] Use struct sctp_assoc_value instead 04:04:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x1e, @unused=[0x9b, 0x3, 0x1, 0x76], @devid}) [ 3562.494563][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3562.730357][T24207] sctp: [Deprecated]: syz-executor.3 (pid 24207) Use of int in maxseg socket option. [ 3562.730357][T24207] Use struct sctp_assoc_value instead [ 3562.787403][T24207] sctp: [Deprecated]: syz-executor.3 (pid 24207) Use of int in maxseg socket option. [ 3562.787403][T24207] Use struct sctp_assoc_value instead 04:04:32 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000300)={[{0x23}]}) (async) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) (async) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x160, &(0x7f0000000000)={[{0x84, 0x4e00, "267cca99c241cc71890e54109c4d364b4d186239fa31e99d769b5c9b3e01e58332e1733388fc1ff8e39681c6bddbadc73d10424417410c0e4d40a50bf2a4bf72431b17b5d77ea45f856dab33c1486b074706c89b38b7bc31c2ebea832bf8d79c86cbe768abe18ed3e2ffc4b722db7bb38a1785100f2d2bff4f76f4c1837f41618d4e4b7c"}, {0xbc, 0x4e00, "ac5cb5dda9c21ab52c43ab958c1a17540f21a73392b2f44f3456e474dc093c15214d298813331efd895fb01a0b68a2bc27d309769a7ecc177f1c9163add15d1d5ab5265a54a9a4a50e84c0b15003337b412780cd3327a139dc3f5983775f24807a28d214481cdfd839c4aca19b3b46e2a8323c428990db00f402a379d02b58b3b69ef1451e0e7f1b9701ca6e220a109c16a4efb956843dfe847a5e254ea92ef1fe4195043cd27db7b703f675737525a5a814a78ab01bf7cf4eb6f374"}, {0x12, 0x4e00, "3e3ead89e8c24889cd850d8c9b41ec7b4e4f"}]}) 04:04:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x600, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x50, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:32 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = dup3(r1, r1, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8, 0x7, 0x9eb, 0x1dc, {{0x12, 0x4, 0x1, 0x12, 0x48, 0x67, 0x0, 0x80, 0x2b, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x74, 0x0, 0x9, [0x800, 0x3, 0x80]}, @end, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000380)=r4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6de}, 0x1c) 04:04:32 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x1}, {0x20}, 0x1f9, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)="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", 0x1fe, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000055010000000000000cd2000000441a69383ec018a8a331e146025c3569a1bfa442d3db6c1fb4e497e55b47035eeb39f3ad58a26eef9b805a96a28d60c671a6114394872739c98c7512b7e855673b6399db3532297a3fc9b453289396680aa056c6f4b1286d55e45db26fa3e450faa2d0bc7efec5e21a57dedc1b5afcd992734b455c3898b1909c1ef4d0435418a01eac282c602ec364c50868a3a90f78a09c6c694ffe8615148e15bc6ca6188e456962224330e5aabcf9b7eb205aa873340200000019bb40d677e79530c10038650d888359ace350a6c041f210403640b191760000002c1c246ddeda0ffd05d5214b29d84e13af155a9446e71ecffe670e47167c4b381c3840b70eebbad2b022abb76bbda41ed13cd0d5e9f971bccf5c85a71bda9bbf7ff24c48c9fedb565dd9cb322852188403ad59387d085c257a9920dcfe7b95cad0087549873794d269eaaa4ea13eed2d7604150eb9387d00000061913975839fde8f18d75ccae16717724e60ab2b6c46d67e6c4e0c18cd6ab10b4730e1ed3161274faa9f39a17da875020a4ffb4b07cc4d6b5fd28a926b0df373991b0a91f81f5623d820ce0ab06f3333506ff22ec153ac5d48b9d50bcc70a24442f65755d37ee88f520eb1fb6e597d0f83bee4978e09b0cac35cb7f4f2f40fe756ffd53ba6dc531f9986646e2bc4bfdcf117e0e38a68e8605f4470569d0bd2fd719811b1f07727fa1dd05e01f71cc2602b7cbd84cb4fdbcc298bf418c347838cb04677165771570eb1893abc63be324bc2c7457b93a0557d5841c4bb5d6f03d2c84968016cf17deb0db77504baac828ee8470a223383cfbebdf9dc0a566b02ba4e34ddc2c9203bde9cbb8ba3637d8fecd71d50317ffffcc3ad1acf83ca4ceb1189a95ad9"], 0x1de}) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0xfef, 0x23662, 0x7c, 0x842, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd2d) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000024000b0d000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x40800) (async) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000024000b0d000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x40800) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000005f6661737400000600050000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000005f6661737400000600050000000000"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1f0, 0x9, 0x3290, 0x8a4, r2, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0xe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0x19484405, 0x484, r2, 0xfb95, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xf}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) [ 3564.351783][T24214] net_ratelimit: 4 callbacks suppressed [ 3564.351847][T24214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3564.373901][T24218] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3564.419334][T24219] sctp: [Deprecated]: syz-executor.3 (pid 24219) Use of int in maxseg socket option. [ 3564.419334][T24219] Use struct sctp_assoc_value instead 04:04:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x60, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3564.524401][T24222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x700, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3564.589578][T24217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3564.640094][T24219] sctp: [Deprecated]: syz-executor.3 (pid 24219) Use of int in maxseg socket option. [ 3564.640094][T24219] Use struct sctp_assoc_value instead [ 3564.763438][T24232] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3564.808621][T24234] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x68, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:33 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x109000, 0x42) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4, 0x10}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r11 = syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x9e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x1, 0x9, 0x7, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6, r7, r8, r9, r10, r3, r11], &(0x7f00000005c0)=[{0x2, 0x4, 0xc, 0x6}, {0x1, 0x3, 0xe, 0x9}, {0x0, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0xfffffffd}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "54859fdc3ef2ae336866cfb1ed7259a6b2b5058394ed685cc89a6f206f542bc841899f5bc133e4b1f75fe1195063140fa411bc35bc12f2e08da64b1eb6fac83dd522a6b917c80ff06df4231bdb67dd19ba9135d3a97f0d0d5140dcb2b4a9d427353c6db300bcd8f213d571e2359e92e0809cccd006f1f5c4af55ea9922be5c58bd853c7a3a436b2bc68e6878"}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:04:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x900, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3565.161308][T24239] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3565.260508][T24244] sctp: [Deprecated]: syz-executor.3 (pid 24244) Use of int in maxseg socket option. [ 3565.260508][T24244] Use struct sctp_assoc_value instead [ 3565.293449][T24243] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3565.417303][T24244] sctp: [Deprecated]: syz-executor.3 (pid 24244) Use of int in maxseg socket option. [ 3565.417303][T24244] Use struct sctp_assoc_value instead 04:04:35 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000300)={[{0x23}]}) (async) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x0) (rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_disconnect(r1) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x160, &(0x7f0000000000)={[{0x84, 0x4e00, "267cca99c241cc71890e54109c4d364b4d186239fa31e99d769b5c9b3e01e58332e1733388fc1ff8e39681c6bddbadc73d10424417410c0e4d40a50bf2a4bf72431b17b5d77ea45f856dab33c1486b074706c89b38b7bc31c2ebea832bf8d79c86cbe768abe18ed3e2ffc4b722db7bb38a1785100f2d2bff4f76f4c1837f41618d4e4b7c"}, {0xbc, 0x4e00, "ac5cb5dda9c21ab52c43ab958c1a17540f21a73392b2f44f3456e474dc093c15214d298813331efd895fb01a0b68a2bc27d309769a7ecc177f1c9163add15d1d5ab5265a54a9a4a50e84c0b15003337b412780cd3327a139dc3f5983775f24807a28d214481cdfd839c4aca19b3b46e2a8323c428990db00f402a379d02b58b3b69ef1451e0e7f1b9701ca6e220a109c16a4efb956843dfe847a5e254ea92ef1fe4195043cd27db7b703f675737525a5a814a78ab01bf7cf4eb6f374"}, {0x12, 0x4e00, "3e3ead89e8c24889cd850d8c9b41ec7b4e4f"}]}) 04:04:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6c, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xa00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:04:35 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x1}, {0x20}, 0x1f9, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)="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", 0x1fe, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1de}) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0xfef, 0x23662, 0x7c, 0x842, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd2d) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000024000b0d000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x40800) socket$nl_audit(0x10, 0x3, 0x9) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000005f6661737400000600050000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000001200", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000005f6661737400000600050000000000"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1f0, 0x9, 0x3290, 0x8a4, r2, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0xe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0x19484405, 0x484, r2, 0xfb95, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xf}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) 04:04:35 executing program 5: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x109000, 0x42) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x109000, 0x42) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4, 0x10}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x9e000) (async) r11 = syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x9e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x1, 0x9, 0x7, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6, r7, r8, r9, r10, r3, r11], &(0x7f00000005c0)=[{0x2, 0x4, 0xc, 0x6}, {0x1, 0x3, 0xe, 0x9}, {0x0, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0xfffffffd}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x1, 0x9, 0x7, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6, r7, r8, r9, r10, r3, r11], &(0x7f00000005c0)=[{0x2, 0x4, 0xc, 0x6}, {0x1, 0x3, 0xe, 0x9}, {0x0, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0xfffffffd}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "54859fdc3ef2ae336866cfb1ed7259a6b2b5058394ed685cc89a6f206f542bc841899f5bc133e4b1f75fe1195063140fa411bc35bc12f2e08da64b1eb6fac83dd522a6b917c80ff06df4231bdb67dd19ba9135d3a97f0d0d5140dcb2b4a9d427353c6db300bcd8f213d571e2359e92e0809cccd006f1f5c4af55ea9922be5c58bd853c7a3a436b2bc68e6878"}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) [ 3567.457798][T24250] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x74, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3567.531308][T24253] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3567.539856][T24255] sctp: [Deprecated]: syz-executor.3 (pid 24255) Use of int in maxseg socket option. [ 3567.539856][T24255] Use struct sctp_assoc_value instead [ 3567.659287][T24256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xb00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3567.703985][T24261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3567.783969][T24265] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:04:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7a, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3568.036574][T24268] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:36 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041311020000000fc8eaccb9c02df0aac129e1a2"], 0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9400ae3ebdd08b6b71391004d99959a024daddc0600"], 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xc00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3568.187690][T24272] sctp: [Deprecated]: syz-executor.3 (pid 24272) Use of int in maxseg socket option. [ 3568.187690][T24272] Use struct sctp_assoc_value instead 04:04:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 04:04:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x300, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:38 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x109000, 0x42) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4, 0x10}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r2}, 0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x9e000) (async) r11 = syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x9e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x1, 0x9, 0x7, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x43, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6, r7, r8, r9, r10, r3, r11], &(0x7f00000005c0)=[{0x2, 0x4, 0xc, 0x6}, {0x1, 0x3, 0xe, 0x9}, {0x0, 0x2, 0xe, 0x3}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0xfffffffd}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "54859fdc3ef2ae336866cfb1ed7259a6b2b5058394ed685cc89a6f206f542bc841899f5bc133e4b1f75fe1195063140fa411bc35bc12f2e08da64b1eb6fac83dd522a6b917c80ff06df4231bdb67dd19ba9135d3a97f0d0d5140dcb2b4a9d427353c6db300bcd8f213d571e2359e92e0809cccd006f1f5c4af55ea9922be5c58bd853c7a3a436b2bc68e6878"}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:04:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:38 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041311020000000fc8eaccb9c02df0aac129e1a2"], 0x14) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9400ae3ebdd08b6b71391004d99959a024daddc0600"], 0xf) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:38 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe4, 0x83, 0x3}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0x8, 0x87, 0x6, 0x8, 0x7}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0xc, 0x14, {0x14, 0xc, "b1c2d507394f41bdc7d3e7310c0e6d2a4a4e"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x14, 0xb7, "e93c0d7805e7d613f6dc2cea69cfaa6a1176a9c19735428454d7163d4efeea97520800a06636e017f4c0a6b2fe42ebc0afa493d706b6deeafee9387bbd91bfcc9f5603f439cbde10003d497a616eec1995688ab6e4a24cfebf9cb1aab85ae5926c3cf66a69845b77926df91dc8462e0ec8defd158004199b744346771150e44486e79d5333fb19fa3ed386335381fa57453d30032de2a3e27bda9efdb90cb705c29426a582011222ac5e067c2963f69fcc4f0f69a70daa"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '>'}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, '<#'}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "46f1"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "a52ba8"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_connect(0x6, 0xb47, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0xe0, 0x33, 0x52, 0x40, 0x403, 0xff20, 0x3982, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb35, 0x4, 0x7f, 0x7f, 0x40, 0x3, [{{0x9, 0x4, 0x6b, 0x80, 0x10, 0xa0, 0xa5, 0x5f, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3f, 0x7, "40a2ce22de0923bd07"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9146, 0x5a32, 0x6, "6c064a4822"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x4, "1b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xfd, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0x8, "ceba23fc"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x0, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3d, 0x5}, @generic={0x53, 0x5, "7bad17ed9519930771a0f34c092d116fc7e45a09bff53027fabda058a85ff50f1385c0863b00aa09fec0a16991edf5748a7fd09f83f46ef5334af1c1500cce3c90cade53719e124416eff98eaa81289f3d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x4}, @generic={0xb9, 0x11, "0a5b90767b6c9b5bcdbc302ad110f8652e83181be181c167b58af31578f390d70c5639597f15b61bf0a404a019833daaa16a3558035ac7c63f06c4b47071e6f2c3058d6bbebe43008bc89fe260775334c91fb43d7019f6b340d55a6f5e09138af5cc726c048fb6846a06009629f5ca6e50f5ce579a43c6b17313dc381c365b2b200be18cdf4a32b6df0f2483c758159ccbd5984db0889addf3bd847437701cf0b2490f415fbd2a1865659960ccfcfecab00061413db5f7"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7f, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xc9}]}}, {{0x9, 0x5, 0xdf8cc0afbe34b498, 0xc, 0x8, 0x6, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x1, 0xc3, [@generic={0x49, 0x9, "1759ae81f964ddf7c6503e56364ccf3b7e970bb4d998d055a11f7f0fc26e880196faf7599b7898dacfcf940a568b8b908edcffae0555b2c11cdf9d36d6b1ee1960e73f92a6126a"}, @generic={0x38, 0x7, "241cbd81c3bcb7e18e44288fce4e2351c860428cc09c38b945a4cc322067aa4a94eccd79de1ed77d4dacf13317b4646f334477801cbf"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xfa, 0xb7, 0x1f, [@generic={0x7, 0x8, "e70686b33c"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x40, 0x3f, [@generic={0x76, 0x31, "8ffbbd5f3df101459ee8fd287239086f9473b421eb2f6d20047530316e83e2115820928a698b58fd7a73d9ffceecb489e878ebc76904e16a56bd17f9da6fe9aeefd10d3f44ce2d42a30994feadc1d0ca3cd4f5bba3bcba64d9be599a54bf1fdb7f5c8e3f407afd199119fb4d9b43ae901e52a47d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x100}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xd8, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x40628602e8215477, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x80, 0x3, 0xce, [@generic={0xd9, 0x2, "ef3c3ce3054f60765888ae9ba1ade41d0c61c5e74d7961676244f4c31bec0290e8423564882e37d4bea5ed177fb14e55224b87b9f5a95f3ac2c3cacd4f6278229a0f78aef3bfd3c984fa5e248a85fe472b29857eb5d674654e725cfaf3d53bd7ec9e037a17f043bf98068c5309a5a71046cdc0cb4e1bfeff744282e8e0bf52ff4304953b9876daa1b87e3a584b5b6b33fb671f6972221b8d3064a8655e793399e07c147a4ca6576ff65114abb0f893c4109be8fd0452fa9a23deae15d246eb526925b14e9cd626d0187c6002a47de0c8c5a0af1a165322"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, [@generic={0x100, 0x23, "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"}]}}, {{0x9, 0x5, 0x7, 0xce820281482329c5, 0x200, 0x2, 0x81, 0x8, [@generic={0x24, 0x3, "55d69704c238fbe5c61bed7d5b0c9b4493c119ac0bc196208682652f3fe521a0089d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7c, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0xd4, 0x31, "6b28dfaab3b84be0a73240fec5b3b1a7b1b40666da5fdce8593c50449ef45ca816daf47c819b03449450bde142c2f3b5bef04d274d5b53a0424cea080ac1becf17ce6d048cf8f4e7e5c24681bcc61fcbdb9a01fdd673b1eb0cddcdadaca0b7328aae5225d6fe5f6e4745bd76119433abc1ec6c6b8b63a362f2ccd7d5d926a9efbf6a6039fad31f00344514796c24265db443f4bdea90f06cc33d3fe9eb51be4a5509b480712b1549a5e811a51ae54e4b7b6fedea278d42e6012b2db8d675e3b3889be293ca0c09552407f011503a87ba3af7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x40, 0x0, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfff}, @generic={0x34, 0x4, "afb1b71c399573180c84984fa59cfb6a388f60363934856514066549f5705de29cb8e653f1997f28f14864a4ec77533cf6be"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x80, 0x3f, 0x1, [@generic={0x5a, 0x5, "2617fc0320ecee039f6e443fe334485b24a420348ba1a389383f9dcda44412c56270b949f559259bc1a70a3afc45d3b39994db2b8d3c105aca536a40f510971c68fa921ae558b096e15d1946300405041227613803bac08e"}, @generic={0x9d, 0x31, "c25e25d7a95f5cd1b9804920d3c71b3e46bc782ca3baa5e050271206ceaaa5e754cfe2412ce714d34fd76827ce650f0ea28112fc0e6fc5e0a8c6fb6fd41f24bc53db49f5c1f8c5f63a7f045d19dccdd332a1f834ce612220ee96d8bd4133efc60c233a0e30f3c273499e2513ff57540443291e2d7f384e288b0377432ab95c8a6812a350eb87049080ddc8ac2399ced944ab22a07b028382b5cc13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x7, 0x1}}]}}, {{0x9, 0x4, 0xd4, 0x2, 0x2, 0xba, 0x73, 0xe3, 0x7, [], [{{0x9, 0x5, 0x23a749fa69c2a41c, 0x10, 0x400, 0x24, 0x4, 0x5, [@generic={0x60, 0x1, "351c8f1294f3dcab7e26c3255d4382144cd1de572bda1087d0804878379f07100b49beb2306a250287ca763731abe02a39df3e28543819db7860e9ce1f4c754e6fbb119e63d1e5c04e056927febea096b37dd71a9080cd975ba1f7816afb"}, @generic={0xd0, 0xb, "e01e30f6ed257dcdaf62b8e6b5be619d3fab4e58d5523471291e93f83891f21a3926b580044345b6ccb27278c39ed849fa5120cb25c38c792f82c0d0e24affd8790d8128646677f99963e26049c0ae3b57f3015d6bb13439d205a9167bb789d74daf79a4c47a76913491f64606e3e8653a7b64423ffaf519f585636c7eaf712982ac1fb804d21dd4138a066d9afdda2de72e0c5df841d7c75b7ae800e615056909449869438927a32f808d10b5a439acefe0cc6b14c7c5cc87c1f881193a7bd0fb45137224d2b0763cd4b44f5b83"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xc0, 0x6, 0x6, [@generic={0x4f, 0x8, "a7b500085bd8e7c6b782dc2cb8e2069a156285f3475b15e58caf23cf6d09b8c88f53bfdffe17d0368001f3041d166b4f08feb6a35b832fec3d9d20e5c2fc7b529c95d8921d1ef381d788d2415a"}]}}]}}, {{0x9, 0x4, 0xe3, 0x4, 0x0, 0x3c, 0xa3, 0xf8, 0xaa, [@hid_hid={0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0xca9}}]}}, {{0x9, 0x4, 0xa2, 0xcb, 0x6, 0x7c, 0xde, 0xf4, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x20, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xa5, 0x80, 0x6, [@generic={0xeb, 0xf, "f0205cf2b495bfa0d43d2aa7476a59977417b6aade173b78600eefd1aa9faaa98e5f48e09596d1647dfb39251eb87c3e8f6cf2328b335371d655b937045b29e6ecd1d392e620e408e2266acd13448b7025b8a50fadb73d3fb287e38e9a24fb57665fa43edf8df46f91823ec7846abf2850b075a8552c1ef88fcc38d71e0218aaf3eafedc01f1ca824b80bcc4939733b3d17158f119520ef1b7985610fa02f966bb8a9aec03837ef95265bc9f6b285059b7dc327d8fba32fb81e497b5b4fdc9e9a5887f6df75cfdd3c7dce4b0acee8fc828c054ed73552263a43320601de1b57b51099268c8e291924e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x20, 0xda, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5693}, @generic={0x4e, 0x3, "ee7eb235b0fcf946bbc37d0070dbf37bfde613f72690520738f53c970a4099425fa78aa974fc8677cb9310c4d44e3b3192dfcb4d68a6d2e08b7eb2825225acb63e1061cf0bb5ba285280b164"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xff, 0x7, 0x1, [@generic={0xd9, 0x1, "bdcdee6f1a7989f3351ed134158bcdfbdc04415d0f4c4739bebb718c36c1e1b87c7f6940209038dd2582acd09e4a89e34d581080f9d6e2269f52b95878266471bc43c90c83490048262ecdb119c234c327cb705654d230fe3206a3040061c7e956ae2a8ee2db3e4e135339e2253ab465a160dfc559ef60199b0e3c0ebb9f2dbd9b17ddbb02a1aad13267ed9e3736a2a8e5aa96f2998f18a9a07ea1d46d7e3fd6a815e91b72e250376d88401305a97fbc6e72a0c110d5b995771a483cee36e4910dc9de0d7bcad0ef3b0c8b34e401fef5839cec7640641e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x20, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x300, 0x80, 0x3f, 0xc2, 0x40, 0x1f}, 0x1e4, &(0x7f0000001bc0)={0x5, 0xf, 0x1e4, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x84d4}, @generic={0xd0, 0x10, 0x0, "93d9b0211c21b964eabf3fd1223b4945242f0424737b07fd459938591285ee69b1f211ca55dcc739fb7e2293e4fbcb7121fb846eb992ae8e2ca405e5d5071e6aec299a51123c24540a531b95771c35c34099493be4d855ba58525ddbeb6243eca22639d1b75d8c3a862cc65229cda5c73ca6ff241fa0de630c49259aa562cfa4792819d999fd1447902b506a9a0719e160346e4b71920406a3a9fed1930a3ea9e72001a385e6e766962ea1f6f3c391f668e7d70f33ad524b35acf5490087d42359182bd77342bc5e381d9ae6be"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x28, 0x880, 0x51, [0xffc0cf, 0xff3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xfff, 0xf000, 0x7, [0xff000f, 0xfff0, 0xf0]}, @generic={0xc3, 0x10, 0x0, "ced3c7c28d36382c0b7dd611648320c78b9fea5f27b9f8dd0ebd9262455deb418d397caf623fa00e0ae68d57f7eb15b36fa503a07a836052fef91078d8fd7e2d74e829bc59a737b8602362230a0822aabd211fedd66b0bafde6aed434e6bec1fd8fa5678a34e525965150189c46b4595f0ba9041f649994b4315df3177875360755fe15a81265050f11a5fd085e02ffd90014eef7033e59306740d309f3d08f37c1b640e9498af751e90d66d9502d1a1542cbbeca8930c2e925090a30a0cb1dd"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xff00, 0x1000, [0xf, 0x0]}]}, 0x7, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x41c}}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154000f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x24, &(0x7f0000000d40)={0x20, 0x23, 0x2c, {0x2c, 0x9, "972b8bbf3ccae9244612549ecc104dacd7de83c4c03d1da0568923a0d6fd99b5c0d0d3e8f6a356cf4a69"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000dc0)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0xa, "f313ccf1"}, @local=@item_4={0x3, 0x2, 0x1, "c4d4c71c"}, @main=@item_012={0x2, 0x0, 0xb, "b57e"}, @global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x21, 0x1, {0x22, 0x834}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e80)={0x40, 0x16, 0x27, "376d49659b6cfed1473f3a627a2e8dd23923b192d5971dc43d1d4cbcece86e9ec9a34caafeae35"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x1, 0x1f, "19650089c0bc05a351b9773e4475ffb7373ff455ad9e4b323601e39207a066"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x100, {0x100, 0x7, "a1e3870bfbfa5d82bba7d968a0de7417d572daeaa5935de2b5bcd059ea6f0dd092796c2a5e4efb11dcdb2f15f75df1c8eaa66f5f0cda670b2bd05134961d1a87a6d95579f13aa619224cd4c891672481cf52f0ac9b1cb21b9386d235b998e6f12a671d4086339c498465c2d991acf2e3ce1e2a24efac00a6764e98e0882a9fb879b26235abd6d48db88d7fa2262447c1d966e2b6f44a4283060824743528ce65549f3d284f843f35b3a17ad934d18b17136263b089c9cf572e1fb7440dff11106bcbf494f981c4a4bdb1c8ffb1d5e944bf9c8396c640a4e572b6f8a0afd2aa5c877bf7cd71e0f7fa7e24a86c0b46f3583a9dfa1d4c555d96b7f70d580acf"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000240)={0x0, 0xf, 0x84, {0x5, 0xf, 0x84, 0x6, [@generic={0x2a, 0x10, 0x1, "1b77a8c56fba63a272485e7d6fc6ca7a3b818a2950feea997597fdeb80cd50ab7e8734ceab39f2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0xb, 0x800}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xff, 0xf00, 0x49, [0x6f, 0xffc030, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7, 0xf000, 0x101, [0xf0, 0x6030, 0xc030]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "dd5f3774cbf82d8156446cded6e25cd7"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x3, 0x40, "55883d1e", "bce9c424"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x8, 0xc0, 0x4, 0x8889, 0xffff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x6, 0x36, "827848358f7c2146732308adb5b8f45189513a903cc36e2020cfce258e91ecc80901a0c1f79073b3f7d131d2b30b4b59c80205272e75"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x4, 0x10, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f6a8"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "998a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) [ 3570.638639][T24284] net_ratelimit: 2 callbacks suppressed [ 3570.638706][T24284] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3570.707092][T24287] sctp: [Deprecated]: syz-executor.3 (pid 24287) Use of int in maxseg socket option. [ 3570.707092][T24287] Use struct sctp_assoc_value instead [ 3570.717889][T24291] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x500, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd99, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3570.977736][T24301] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:39 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041311020000000fc8eaccb9c02df0aac129e1a2"], 0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9400ae3ebdd08b6b71391004d99959a024daddc0600"], 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:04:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x600, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3571.166718][T24303] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3571.233017][T24305] sctp: [Deprecated]: syz-executor.3 (pid 24305) Use of int in maxseg socket option. [ 3571.233017][T24305] Use struct sctp_assoc_value instead 04:04:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3571.488837][T24313] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3571.553711][T24315] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x700, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:39 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002d0000004317d20fda2c252088e3dd5a"], 0x18}}], 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000840)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002240)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0xd000, 0xfffffffb, r11, 0xee01, 0x0, 0x2}}}, 0x90) r12 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r12, 0x0) sendmsg$netlink(r2, &(0x7f0000000a40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000440)={0x300, 0x31, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x55, 0x0, 0x0, @pid}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r3}, @nested={0x294, 0x6f, 0x0, 0x1, [@generic="cdd1c6a53497a7b89d81f385119f4a39b4ab743991d8ebfa6d0aa7", @generic="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", @generic="e9772647f5d752b2b23a35c055ded6cc1edf584d27caad9f147a9f4eb2d2c2f3ae4afdcdb852c46c1bd952f47477b619940fe3fcc4e31c2b92e64d350d3ec609a23c2c29a94e9c105e728f70075fd190faddc6d50abab774e9f127947664bdcd3eac33547b95dee649e5d0f68233bc3390bfa20447badda0546af3a6d2eb52cdf81c066d417edac51144fd03c059cb6aa42f130f4b56ec92fd2bdfaff86f75d6c26875", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x8}, @generic="2d5f6d342de67293280888f15f9bc3643c9512c1663b2b34d80f6e16e0b54c7fdb195ecb6ed79cf370819aa8267ded6e9355cf5b680ff5d96426b14faf5e9250ba582a1b8b169b1524d32fdfcac7a401b94a25449f6340db4373f87c41915d211eaebffb82b54ede763679a40964710a59bd5fa7d6d6e008c861b61f48574e5ed1fa3d399171789784e63c98b0ddb4c26a17b4d34a83cf28934f6554dcf1d89de3df74fb58df99189ce5cea0ce69d450ffed313a9a8d878acef56614623846fa9584faba7cf8958183bc00a4f16b"]}, @generic="edc2ad782f51f1688a5f28eae3358cd3ca6ca13c38236940b2da3e7ae20efe83f293fba560d13e3caa395cbf00", @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}]}, 0x300}, {&(0x7f0000000c40)={0x1414, 0x35, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x378, 0x73, 0x0, 0x1, [@generic="f9962382e0696579394768014a6f1a0d8bfe9c32b2ef7664745a12cfffaab19ea1a1be5da060901a7bf50bc84880a5a2d0d97434f91b2bf9fe676ccefb3049d82be190c6a45834dcd10e1b5de711c2b2872ecd1c739fefce27400bc74b28ee3d82ce23773739dd7b23e6b0f09592af31193478ee6903aef81c909efe9e01abd9e9405a4dc2a3b01130f098be02a0d30d716c0d389c501087ed3018eb807c4d7a22cfeb3f39f42e95b3097686f393fe633b74000dc81e460787e4f93257f8efaa87095f632e10ea70feb5f19de7ead2251bb05924951e04b0fa3f3cdfed729c00776f5974a24af614824d5b29", @generic="e62a276ae23adff39b46fd10e6cefdc59cd225535ec1aa9ebffc037a80700b31e366354f1a6c1d9ed7b00874c76f7e9d00801f26a4baa34e1228d896a8e1c110ecc9d579cdccb7404566fbd0242714ee7c3ec34af5cea242a9e76cfbc29e569958ce0445b677f307926f21c97388039dd84e9d52a14c536ab67228fa55ed90c7517d5d119770b37b6ed844055f", @generic="657ff7aaaf680d0d136a26ea5c5d46d882b9f108", @typed={0x4, 0x65}, @generic="743401ee3cb09b30a053c6d1494b633ba48dd01f6e51ec56fbefecdefd5311e6dc69ecafdbd8e3e66391937c3212d855c9427223b6f94b7597a167cbbb9d3315253a1070e5c99426461a5f5eaeef9fab660ad5563d6c3091b500c6fa88665f8d4c7b91cddac0df1fe452ef58977886249cfd54d71bbc031c6dc6315f08cf97de5f79139659b25592f97c4f3a6ea2f4787ec8b95aef774080f0cbe976fde1a5b59154edf2fe6037cfbee4361b6028ae322b18cff5f4dbce6a9f544393eff187251fdd6c41d9d72314e3a21028d6eacf0490c3b8df1085f8fa009e2e69f33cbbb2f700cef663e40c4ddf5533e43ef32ca4cb9306", @typed={0x4, 0x12}, @generic, @generic="aaa3bdefb973532564936303282f4777e6588e9148a06cc29a748208f3061f4182e8aa21051275427aea8a6208407ad682e70f6b7cbc8c5f9af87a54a2134fb74d156bafd837c8d6d06636c1fea0fdb515a29494822e992ed89f94a0895fb4f32325b463016e887428ac928219b1d3f23717d3fd7762f7dbb435876e538d0c59eb0740ec4d0f61f32cfc632a0dd695914205957dc6aac81696c275dd3ba74ba06d7c7eb1149e68c4e09484f034ef0f4605cd84800841b3866fdcc9d7ccf86f5c3f76d037aac83e0cf342bdb51d494d9f929380a29147fd8f89a8dfd6e1b8a72ddabc108af83f6d0a88693745"]}, @generic="cdd272a888e9fb460d3ced787599943c26feed08a8002fa01cca2ddfdfee74ae40963d56c6f571b8fd1a7551299d64771fe00fa6b103324ef0f1e1370b7ef113fd0fa0fdbd25aa87f79ecc2f2bd633c8c091256ec548637ce582b431d6e1b38947b1", @generic="bb4a056724feae3b2d55696966dece91d4d36670b40eda4c0bee1311936054806f519298425ef294", @generic="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"]}, 0x1414}], 0x2, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, r0, r1, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x24, 0x1, 0x1, [r3, r8, r1, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x120, 0x2000c000}, 0x4048854) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xffffffffffffff4e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) [ 3571.616516][T24317] sctp: [Deprecated]: syz-executor.3 (pid 24317) Use of int in maxseg socket option. [ 3571.616516][T24317] Use struct sctp_assoc_value instead 04:04:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3571.893425][T24321] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3571.982254][T24326] sctp: [Deprecated]: syz-executor.3 (pid 24326) Use of int in maxseg socket option. [ 3571.982254][T24326] Use struct sctp_assoc_value instead [ 3572.038811][T24327] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:41 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe4, 0x83, 0x3}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0x8, 0x87, 0x6, 0x8, 0x7}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0xc, 0x14, {0x14, 0xc, "b1c2d507394f41bdc7d3e7310c0e6d2a4a4e"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x14, 0xb7, "e93c0d7805e7d613f6dc2cea69cfaa6a1176a9c19735428454d7163d4efeea97520800a06636e017f4c0a6b2fe42ebc0afa493d706b6deeafee9387bbd91bfcc9f5603f439cbde10003d497a616eec1995688ab6e4a24cfebf9cb1aab85ae5926c3cf66a69845b77926df91dc8462e0ec8defd158004199b744346771150e44486e79d5333fb19fa3ed386335381fa57453d30032de2a3e27bda9efdb90cb705c29426a582011222ac5e067c2963f69fcc4f0f69a70daa"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '>'}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, '<#'}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "46f1"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "a52ba8"}}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async, rerun: 32) syz_usb_connect(0x6, 0xb47, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0xe0, 0x33, 0x52, 0x40, 0x403, 0xff20, 0x3982, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb35, 0x4, 0x7f, 0x7f, 0x40, 0x3, [{{0x9, 0x4, 0x6b, 0x80, 0x10, 0xa0, 0xa5, 0x5f, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3f, 0x7, "40a2ce22de0923bd07"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9146, 0x5a32, 0x6, "6c064a4822"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x4, "1b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xfd, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0x8, "ceba23fc"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x0, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3d, 0x5}, @generic={0x53, 0x5, "7bad17ed9519930771a0f34c092d116fc7e45a09bff53027fabda058a85ff50f1385c0863b00aa09fec0a16991edf5748a7fd09f83f46ef5334af1c1500cce3c90cade53719e124416eff98eaa81289f3d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x4}, @generic={0xb9, 0x11, "0a5b90767b6c9b5bcdbc302ad110f8652e83181be181c167b58af31578f390d70c5639597f15b61bf0a404a019833daaa16a3558035ac7c63f06c4b47071e6f2c3058d6bbebe43008bc89fe260775334c91fb43d7019f6b340d55a6f5e09138af5cc726c048fb6846a06009629f5ca6e50f5ce579a43c6b17313dc381c365b2b200be18cdf4a32b6df0f2483c758159ccbd5984db0889addf3bd847437701cf0b2490f415fbd2a1865659960ccfcfecab00061413db5f7"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7f, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xc9}]}}, {{0x9, 0x5, 0xdf8cc0afbe34b498, 0xc, 0x8, 0x6, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x1, 0xc3, [@generic={0x49, 0x9, "1759ae81f964ddf7c6503e56364ccf3b7e970bb4d998d055a11f7f0fc26e880196faf7599b7898dacfcf940a568b8b908edcffae0555b2c11cdf9d36d6b1ee1960e73f92a6126a"}, @generic={0x38, 0x7, "241cbd81c3bcb7e18e44288fce4e2351c860428cc09c38b945a4cc322067aa4a94eccd79de1ed77d4dacf13317b4646f334477801cbf"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xfa, 0xb7, 0x1f, [@generic={0x7, 0x8, "e70686b33c"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x40, 0x3f, [@generic={0x76, 0x31, "8ffbbd5f3df101459ee8fd287239086f9473b421eb2f6d20047530316e83e2115820928a698b58fd7a73d9ffceecb489e878ebc76904e16a56bd17f9da6fe9aeefd10d3f44ce2d42a30994feadc1d0ca3cd4f5bba3bcba64d9be599a54bf1fdb7f5c8e3f407afd199119fb4d9b43ae901e52a47d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x100}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xd8, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x40628602e8215477, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x80, 0x3, 0xce, [@generic={0xd9, 0x2, "ef3c3ce3054f60765888ae9ba1ade41d0c61c5e74d7961676244f4c31bec0290e8423564882e37d4bea5ed177fb14e55224b87b9f5a95f3ac2c3cacd4f6278229a0f78aef3bfd3c984fa5e248a85fe472b29857eb5d674654e725cfaf3d53bd7ec9e037a17f043bf98068c5309a5a71046cdc0cb4e1bfeff744282e8e0bf52ff4304953b9876daa1b87e3a584b5b6b33fb671f6972221b8d3064a8655e793399e07c147a4ca6576ff65114abb0f893c4109be8fd0452fa9a23deae15d246eb526925b14e9cd626d0187c6002a47de0c8c5a0af1a165322"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, [@generic={0x100, 0x23, "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"}]}}, {{0x9, 0x5, 0x7, 0xce820281482329c5, 0x200, 0x2, 0x81, 0x8, [@generic={0x24, 0x3, "55d69704c238fbe5c61bed7d5b0c9b4493c119ac0bc196208682652f3fe521a0089d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7c, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0xd4, 0x31, "6b28dfaab3b84be0a73240fec5b3b1a7b1b40666da5fdce8593c50449ef45ca816daf47c819b03449450bde142c2f3b5bef04d274d5b53a0424cea080ac1becf17ce6d048cf8f4e7e5c24681bcc61fcbdb9a01fdd673b1eb0cddcdadaca0b7328aae5225d6fe5f6e4745bd76119433abc1ec6c6b8b63a362f2ccd7d5d926a9efbf6a6039fad31f00344514796c24265db443f4bdea90f06cc33d3fe9eb51be4a5509b480712b1549a5e811a51ae54e4b7b6fedea278d42e6012b2db8d675e3b3889be293ca0c09552407f011503a87ba3af7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x40, 0x0, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfff}, @generic={0x34, 0x4, "afb1b71c399573180c84984fa59cfb6a388f60363934856514066549f5705de29cb8e653f1997f28f14864a4ec77533cf6be"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x80, 0x3f, 0x1, [@generic={0x5a, 0x5, "2617fc0320ecee039f6e443fe334485b24a420348ba1a389383f9dcda44412c56270b949f559259bc1a70a3afc45d3b39994db2b8d3c105aca536a40f510971c68fa921ae558b096e15d1946300405041227613803bac08e"}, @generic={0x9d, 0x31, "c25e25d7a95f5cd1b9804920d3c71b3e46bc782ca3baa5e050271206ceaaa5e754cfe2412ce714d34fd76827ce650f0ea28112fc0e6fc5e0a8c6fb6fd41f24bc53db49f5c1f8c5f63a7f045d19dccdd332a1f834ce612220ee96d8bd4133efc60c233a0e30f3c273499e2513ff57540443291e2d7f384e288b0377432ab95c8a6812a350eb87049080ddc8ac2399ced944ab22a07b028382b5cc13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x7, 0x1}}]}}, {{0x9, 0x4, 0xd4, 0x2, 0x2, 0xba, 0x73, 0xe3, 0x7, [], [{{0x9, 0x5, 0x23a749fa69c2a41c, 0x10, 0x400, 0x24, 0x4, 0x5, [@generic={0x60, 0x1, "351c8f1294f3dcab7e26c3255d4382144cd1de572bda1087d0804878379f07100b49beb2306a250287ca763731abe02a39df3e28543819db7860e9ce1f4c754e6fbb119e63d1e5c04e056927febea096b37dd71a9080cd975ba1f7816afb"}, @generic={0xd0, 0xb, "e01e30f6ed257dcdaf62b8e6b5be619d3fab4e58d5523471291e93f83891f21a3926b580044345b6ccb27278c39ed849fa5120cb25c38c792f82c0d0e24affd8790d8128646677f99963e26049c0ae3b57f3015d6bb13439d205a9167bb789d74daf79a4c47a76913491f64606e3e8653a7b64423ffaf519f585636c7eaf712982ac1fb804d21dd4138a066d9afdda2de72e0c5df841d7c75b7ae800e615056909449869438927a32f808d10b5a439acefe0cc6b14c7c5cc87c1f881193a7bd0fb45137224d2b0763cd4b44f5b83"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xc0, 0x6, 0x6, [@generic={0x4f, 0x8, "a7b500085bd8e7c6b782dc2cb8e2069a156285f3475b15e58caf23cf6d09b8c88f53bfdffe17d0368001f3041d166b4f08feb6a35b832fec3d9d20e5c2fc7b529c95d8921d1ef381d788d2415a"}]}}]}}, {{0x9, 0x4, 0xe3, 0x4, 0x0, 0x3c, 0xa3, 0xf8, 0xaa, [@hid_hid={0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0xca9}}]}}, {{0x9, 0x4, 0xa2, 0xcb, 0x6, 0x7c, 0xde, 0xf4, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x20, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xa5, 0x80, 0x6, [@generic={0xeb, 0xf, "f0205cf2b495bfa0d43d2aa7476a59977417b6aade173b78600eefd1aa9faaa98e5f48e09596d1647dfb39251eb87c3e8f6cf2328b335371d655b937045b29e6ecd1d392e620e408e2266acd13448b7025b8a50fadb73d3fb287e38e9a24fb57665fa43edf8df46f91823ec7846abf2850b075a8552c1ef88fcc38d71e0218aaf3eafedc01f1ca824b80bcc4939733b3d17158f119520ef1b7985610fa02f966bb8a9aec03837ef95265bc9f6b285059b7dc327d8fba32fb81e497b5b4fdc9e9a5887f6df75cfdd3c7dce4b0acee8fc828c054ed73552263a43320601de1b57b51099268c8e291924e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x20, 0xda, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5693}, @generic={0x4e, 0x3, "ee7eb235b0fcf946bbc37d0070dbf37bfde613f72690520738f53c970a4099425fa78aa974fc8677cb9310c4d44e3b3192dfcb4d68a6d2e08b7eb2825225acb63e1061cf0bb5ba285280b164"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xff, 0x7, 0x1, [@generic={0xd9, 0x1, "bdcdee6f1a7989f3351ed134158bcdfbdc04415d0f4c4739bebb718c36c1e1b87c7f6940209038dd2582acd09e4a89e34d581080f9d6e2269f52b95878266471bc43c90c83490048262ecdb119c234c327cb705654d230fe3206a3040061c7e956ae2a8ee2db3e4e135339e2253ab465a160dfc559ef60199b0e3c0ebb9f2dbd9b17ddbb02a1aad13267ed9e3736a2a8e5aa96f2998f18a9a07ea1d46d7e3fd6a815e91b72e250376d88401305a97fbc6e72a0c110d5b995771a483cee36e4910dc9de0d7bcad0ef3b0c8b34e401fef5839cec7640641e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x20, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x300, 0x80, 0x3f, 0xc2, 0x40, 0x1f}, 0x1e4, &(0x7f0000001bc0)={0x5, 0xf, 0x1e4, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x84d4}, @generic={0xd0, 0x10, 0x0, "93d9b0211c21b964eabf3fd1223b4945242f0424737b07fd459938591285ee69b1f211ca55dcc739fb7e2293e4fbcb7121fb846eb992ae8e2ca405e5d5071e6aec299a51123c24540a531b95771c35c34099493be4d855ba58525ddbeb6243eca22639d1b75d8c3a862cc65229cda5c73ca6ff241fa0de630c49259aa562cfa4792819d999fd1447902b506a9a0719e160346e4b71920406a3a9fed1930a3ea9e72001a385e6e766962ea1f6f3c391f668e7d70f33ad524b35acf5490087d42359182bd77342bc5e381d9ae6be"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x28, 0x880, 0x51, [0xffc0cf, 0xff3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xfff, 0xf000, 0x7, [0xff000f, 0xfff0, 0xf0]}, @generic={0xc3, 0x10, 0x0, "ced3c7c28d36382c0b7dd611648320c78b9fea5f27b9f8dd0ebd9262455deb418d397caf623fa00e0ae68d57f7eb15b36fa503a07a836052fef91078d8fd7e2d74e829bc59a737b8602362230a0822aabd211fedd66b0bafde6aed434e6bec1fd8fa5678a34e525965150189c46b4595f0ba9041f649994b4315df3177875360755fe15a81265050f11a5fd085e02ffd90014eef7033e59306740d309f3d08f37c1b640e9498af751e90d66d9502d1a1542cbbeca8930c2e925090a30a0cb1dd"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xff00, 0x1000, [0xf, 0x0]}]}, 0x7, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x41c}}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154000f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x24, &(0x7f0000000d40)={0x20, 0x23, 0x2c, {0x2c, 0x9, "972b8bbf3ccae9244612549ecc104dacd7de83c4c03d1da0568923a0d6fd99b5c0d0d3e8f6a356cf4a69"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000dc0)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0xa, "f313ccf1"}, @local=@item_4={0x3, 0x2, 0x1, "c4d4c71c"}, @main=@item_012={0x2, 0x0, 0xb, "b57e"}, @global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x21, 0x1, {0x22, 0x834}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e80)={0x40, 0x16, 0x27, "376d49659b6cfed1473f3a627a2e8dd23923b192d5971dc43d1d4cbcece86e9ec9a34caafeae35"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x1, 0x1f, "19650089c0bc05a351b9773e4475ffb7373ff455ad9e4b323601e39207a066"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x100, {0x100, 0x7, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000240)={0x0, 0xf, 0x84, {0x5, 0xf, 0x84, 0x6, [@generic={0x2a, 0x10, 0x1, "1b77a8c56fba63a272485e7d6fc6ca7a3b818a2950feea997597fdeb80cd50ab7e8734ceab39f2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0xb, 0x800}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xff, 0xf00, 0x49, [0x6f, 0xffc030, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7, 0xf000, 0x101, [0xf0, 0x6030, 0xc030]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "dd5f3774cbf82d8156446cded6e25cd7"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x3, 0x40, "55883d1e", "bce9c424"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x8, 0xc0, 0x4, 0x8889, 0xffff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x6, 0x36, "827848358f7c2146732308adb5b8f45189513a903cc36e2020cfce258e91ecc80901a0c1f79073b3f7d131d2b30b4b59c80205272e75"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x4, 0x10, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f6a8"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "998a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) 04:04:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x900, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:41 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b24, 0x7eb, 0x6, 0x1304, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0xe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10001, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x7, 0x0, 0x8, {0x0, 0xea60}, {0x77359400}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x2, 0x0, 0x0, "dc81c959e5525ac12067bd5cabca6234c0b298caf89089825baeaabd91da98c846dba69496239c82a63fdd5c974c21c6fd9aa06a247fed482a5944d9d2e76d10"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20006084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x3f9b, &(0x7f00000000c0)={0x0, 0xf39c, 0x400, 0x2, 0x151}) cachestat(r5, &(0x7f0000000140)={0x7, 0x5}, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:04:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1100, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:41 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002d0000004317d20fda2c252088e3dd5a"], 0x18}}], 0x1, 0x0) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000840)={0x0, 0x0}) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002240)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) (rerun: 64) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0xd000, 0xfffffffb, r11, 0xee01, 0x0, 0x2}}}, 0x90) r12 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r12, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000a40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000440)={0x300, 0x31, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x55, 0x0, 0x0, @pid}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r3}, @nested={0x294, 0x6f, 0x0, 0x1, [@generic="cdd1c6a53497a7b89d81f385119f4a39b4ab743991d8ebfa6d0aa7", @generic="10d38c0d7bf53279c5b19c60f55890a846238c12a519ef1cd43312c58b0188447061ac92ca0d2f8a8c9857b9d15d669f9b9143217ca1b6b20eb827a43877c99ed60eaa2b6a96b811f1f4671cf66862c966e8d1e6efb072614689d9f7ee26d54e23b9c30fca7ef0d29f9c7088af4128d18523ac408b03adb2d66500d6ec9b63b41920d104adbc23805e57be0c4cf777b4af848ccd07f3db87e59190872da97c42b42a8ae8d5b19017f0f2ffe7001d8e1b4785a9926ece465f8b59023e7e825dec979d3963ada72ad1e5a74d23265683e5b155f502fbc4a173e931540bafbddbf67dbd88b6ccff15168579f6bd5585efb9b23577625604e110396a384a", @generic="e9772647f5d752b2b23a35c055ded6cc1edf584d27caad9f147a9f4eb2d2c2f3ae4afdcdb852c46c1bd952f47477b619940fe3fcc4e31c2b92e64d350d3ec609a23c2c29a94e9c105e728f70075fd190faddc6d50abab774e9f127947664bdcd3eac33547b95dee649e5d0f68233bc3390bfa20447badda0546af3a6d2eb52cdf81c066d417edac51144fd03c059cb6aa42f130f4b56ec92fd2bdfaff86f75d6c26875", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x8}, @generic="2d5f6d342de67293280888f15f9bc3643c9512c1663b2b34d80f6e16e0b54c7fdb195ecb6ed79cf370819aa8267ded6e9355cf5b680ff5d96426b14faf5e9250ba582a1b8b169b1524d32fdfcac7a401b94a25449f6340db4373f87c41915d211eaebffb82b54ede763679a40964710a59bd5fa7d6d6e008c861b61f48574e5ed1fa3d399171789784e63c98b0ddb4c26a17b4d34a83cf28934f6554dcf1d89de3df74fb58df99189ce5cea0ce69d450ffed313a9a8d878acef56614623846fa9584faba7cf8958183bc00a4f16b"]}, @generic="edc2ad782f51f1688a5f28eae3358cd3ca6ca13c38236940b2da3e7ae20efe83f293fba560d13e3caa395cbf00", @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}]}, 0x300}, {&(0x7f0000000c40)={0x1414, 0x35, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x378, 0x73, 0x0, 0x1, [@generic="f9962382e0696579394768014a6f1a0d8bfe9c32b2ef7664745a12cfffaab19ea1a1be5da060901a7bf50bc84880a5a2d0d97434f91b2bf9fe676ccefb3049d82be190c6a45834dcd10e1b5de711c2b2872ecd1c739fefce27400bc74b28ee3d82ce23773739dd7b23e6b0f09592af31193478ee6903aef81c909efe9e01abd9e9405a4dc2a3b01130f098be02a0d30d716c0d389c501087ed3018eb807c4d7a22cfeb3f39f42e95b3097686f393fe633b74000dc81e460787e4f93257f8efaa87095f632e10ea70feb5f19de7ead2251bb05924951e04b0fa3f3cdfed729c00776f5974a24af614824d5b29", @generic="e62a276ae23adff39b46fd10e6cefdc59cd225535ec1aa9ebffc037a80700b31e366354f1a6c1d9ed7b00874c76f7e9d00801f26a4baa34e1228d896a8e1c110ecc9d579cdccb7404566fbd0242714ee7c3ec34af5cea242a9e76cfbc29e569958ce0445b677f307926f21c97388039dd84e9d52a14c536ab67228fa55ed90c7517d5d119770b37b6ed844055f", @generic="657ff7aaaf680d0d136a26ea5c5d46d882b9f108", @typed={0x4, 0x65}, @generic="743401ee3cb09b30a053c6d1494b633ba48dd01f6e51ec56fbefecdefd5311e6dc69ecafdbd8e3e66391937c3212d855c9427223b6f94b7597a167cbbb9d3315253a1070e5c99426461a5f5eaeef9fab660ad5563d6c3091b500c6fa88665f8d4c7b91cddac0df1fe452ef58977886249cfd54d71bbc031c6dc6315f08cf97de5f79139659b25592f97c4f3a6ea2f4787ec8b95aef774080f0cbe976fde1a5b59154edf2fe6037cfbee4361b6028ae322b18cff5f4dbce6a9f544393eff187251fdd6c41d9d72314e3a21028d6eacf0490c3b8df1085f8fa009e2e69f33cbbb2f700cef663e40c4ddf5533e43ef32ca4cb9306", @typed={0x4, 0x12}, @generic, @generic="aaa3bdefb973532564936303282f4777e6588e9148a06cc29a748208f3061f4182e8aa21051275427aea8a6208407ad682e70f6b7cbc8c5f9af87a54a2134fb74d156bafd837c8d6d06636c1fea0fdb515a29494822e992ed89f94a0895fb4f32325b463016e887428ac928219b1d3f23717d3fd7762f7dbb435876e538d0c59eb0740ec4d0f61f32cfc632a0dd695914205957dc6aac81696c275dd3ba74ba06d7c7eb1149e68c4e09484f034ef0f4605cd84800841b3866fdcc9d7ccf86f5c3f76d037aac83e0cf342bdb51d494d9f929380a29147fd8f89a8dfd6e1b8a72ddabc108af83f6d0a88693745"]}, @generic="cdd272a888e9fb460d3ced787599943c26feed08a8002fa01cca2ddfdfee74ae40963d56c6f571b8fd1a7551299d64771fe00fa6b103324ef0f1e1370b7ef113fd0fa0fdbd25aa87f79ecc2f2bd633c8c091256ec548637ce582b431d6e1b38947b1", @generic="bb4a056724feae3b2d55696966dece91d4d36670b40eda4c0bee1311936054806f519298425ef294", @generic="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"]}, 0x1414}], 0x2, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, r0, r1, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x24, 0x1, 0x1, [r3, r8, r1, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x120, 0x2000c000}, 0x4048854) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xffffffffffffff4e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) [ 3573.831083][T24336] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3573.846226][T24338] sctp: [Deprecated]: syz-executor.3 (pid 24338) Use of int in maxseg socket option. [ 3573.846226][T24338] Use struct sctp_assoc_value instead [ 3573.862295][T24339] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xa00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1200, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xb00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:42 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002d0000004317d20fda2c252088e3dd5a"], 0x18}}], 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r6 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000840)={0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002240)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0xd000, 0xfffffffb, r11, 0xee01, 0x0, 0x2}}}, 0x90) (async) r12 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r12, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000a40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000440)={0x300, 0x31, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x55, 0x0, 0x0, @pid}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r3}, @nested={0x294, 0x6f, 0x0, 0x1, [@generic="cdd1c6a53497a7b89d81f385119f4a39b4ab743991d8ebfa6d0aa7", @generic="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", @generic="e9772647f5d752b2b23a35c055ded6cc1edf584d27caad9f147a9f4eb2d2c2f3ae4afdcdb852c46c1bd952f47477b619940fe3fcc4e31c2b92e64d350d3ec609a23c2c29a94e9c105e728f70075fd190faddc6d50abab774e9f127947664bdcd3eac33547b95dee649e5d0f68233bc3390bfa20447badda0546af3a6d2eb52cdf81c066d417edac51144fd03c059cb6aa42f130f4b56ec92fd2bdfaff86f75d6c26875", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x8}, @generic="2d5f6d342de67293280888f15f9bc3643c9512c1663b2b34d80f6e16e0b54c7fdb195ecb6ed79cf370819aa8267ded6e9355cf5b680ff5d96426b14faf5e9250ba582a1b8b169b1524d32fdfcac7a401b94a25449f6340db4373f87c41915d211eaebffb82b54ede763679a40964710a59bd5fa7d6d6e008c861b61f48574e5ed1fa3d399171789784e63c98b0ddb4c26a17b4d34a83cf28934f6554dcf1d89de3df74fb58df99189ce5cea0ce69d450ffed313a9a8d878acef56614623846fa9584faba7cf8958183bc00a4f16b"]}, @generic="edc2ad782f51f1688a5f28eae3358cd3ca6ca13c38236940b2da3e7ae20efe83f293fba560d13e3caa395cbf00", @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}]}, 0x300}, {&(0x7f0000000c40)={0x1414, 0x35, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x378, 0x73, 0x0, 0x1, [@generic="f9962382e0696579394768014a6f1a0d8bfe9c32b2ef7664745a12cfffaab19ea1a1be5da060901a7bf50bc84880a5a2d0d97434f91b2bf9fe676ccefb3049d82be190c6a45834dcd10e1b5de711c2b2872ecd1c739fefce27400bc74b28ee3d82ce23773739dd7b23e6b0f09592af31193478ee6903aef81c909efe9e01abd9e9405a4dc2a3b01130f098be02a0d30d716c0d389c501087ed3018eb807c4d7a22cfeb3f39f42e95b3097686f393fe633b74000dc81e460787e4f93257f8efaa87095f632e10ea70feb5f19de7ead2251bb05924951e04b0fa3f3cdfed729c00776f5974a24af614824d5b29", @generic="e62a276ae23adff39b46fd10e6cefdc59cd225535ec1aa9ebffc037a80700b31e366354f1a6c1d9ed7b00874c76f7e9d00801f26a4baa34e1228d896a8e1c110ecc9d579cdccb7404566fbd0242714ee7c3ec34af5cea242a9e76cfbc29e569958ce0445b677f307926f21c97388039dd84e9d52a14c536ab67228fa55ed90c7517d5d119770b37b6ed844055f", @generic="657ff7aaaf680d0d136a26ea5c5d46d882b9f108", @typed={0x4, 0x65}, @generic="743401ee3cb09b30a053c6d1494b633ba48dd01f6e51ec56fbefecdefd5311e6dc69ecafdbd8e3e66391937c3212d855c9427223b6f94b7597a167cbbb9d3315253a1070e5c99426461a5f5eaeef9fab660ad5563d6c3091b500c6fa88665f8d4c7b91cddac0df1fe452ef58977886249cfd54d71bbc031c6dc6315f08cf97de5f79139659b25592f97c4f3a6ea2f4787ec8b95aef774080f0cbe976fde1a5b59154edf2fe6037cfbee4361b6028ae322b18cff5f4dbce6a9f544393eff187251fdd6c41d9d72314e3a21028d6eacf0490c3b8df1085f8fa009e2e69f33cbbb2f700cef663e40c4ddf5533e43ef32ca4cb9306", @typed={0x4, 0x12}, @generic, @generic="aaa3bdefb973532564936303282f4777e6588e9148a06cc29a748208f3061f4182e8aa21051275427aea8a6208407ad682e70f6b7cbc8c5f9af87a54a2134fb74d156bafd837c8d6d06636c1fea0fdb515a29494822e992ed89f94a0895fb4f32325b463016e887428ac928219b1d3f23717d3fd7762f7dbb435876e538d0c59eb0740ec4d0f61f32cfc632a0dd695914205957dc6aac81696c275dd3ba74ba06d7c7eb1149e68c4e09484f034ef0f4605cd84800841b3866fdcc9d7ccf86f5c3f76d037aac83e0cf342bdb51d494d9f929380a29147fd8f89a8dfd6e1b8a72ddabc108af83f6d0a88693745"]}, @generic="cdd272a888e9fb460d3ced787599943c26feed08a8002fa01cca2ddfdfee74ae40963d56c6f571b8fd1a7551299d64771fe00fa6b103324ef0f1e1370b7ef113fd0fa0fdbd25aa87f79ecc2f2bd633c8c091256ec548637ce582b431d6e1b38947b1", @generic="bb4a056724feae3b2d55696966dece91d4d36670b40eda4c0bee1311936054806f519298425ef294", @generic="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"]}, 0x1414}], 0x2, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, r0, r1, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x24, 0x1, 0x1, [r3, r8, r1, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x120, 0x2000c000}, 0x4048854) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xffffffffffffff4e) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) [ 3574.310261][T24349] sctp: [Deprecated]: syz-executor.3 (pid 24349) Use of int in maxseg socket option. [ 3574.310261][T24349] Use struct sctp_assoc_value instead 04:04:42 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b24, 0x7eb, 0x6, 0x1304, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0xe}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10001, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x7, 0x0, 0x8, {0x0, 0xea60}, {0x77359400}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x2, 0x0, 0x0, "dc81c959e5525ac12067bd5cabca6234c0b298caf89089825baeaabd91da98c846dba69496239c82a63fdd5c974c21c6fd9aa06a247fed482a5944d9d2e76d10"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20006084) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) r5 = io_uring_setup(0x3f9b, &(0x7f00000000c0)={0x0, 0xf39c, 0x400, 0x2, 0x151}) cachestat(r5, &(0x7f0000000140)={0x7, 0x5}, &(0x7f0000000300), 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:04:45 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe4, 0x83, 0x3}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0x8, 0x87, 0x6, 0x8, 0x7}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x100a}}]}) (async, rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0xc, 0x14, {0x14, 0xc, "b1c2d507394f41bdc7d3e7310c0e6d2a4a4e"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x14, 0xb7, "e93c0d7805e7d613f6dc2cea69cfaa6a1176a9c19735428454d7163d4efeea97520800a06636e017f4c0a6b2fe42ebc0afa493d706b6deeafee9387bbd91bfcc9f5603f439cbde10003d497a616eec1995688ab6e4a24cfebf9cb1aab85ae5926c3cf66a69845b77926df91dc8462e0ec8defd158004199b744346771150e44486e79d5333fb19fa3ed386335381fa57453d30032de2a3e27bda9efdb90cb705c29426a582011222ac5e067c2963f69fcc4f0f69a70daa"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '>'}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, '<#'}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "46f1"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "a52ba8"}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_connect(0x6, 0xb47, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0xe0, 0x33, 0x52, 0x40, 0x403, 0xff20, 0x3982, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb35, 0x4, 0x7f, 0x7f, 0x40, 0x3, [{{0x9, 0x4, 0x6b, 0x80, 0x10, 0xa0, 0xa5, 0x5f, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3f, 0x7, "40a2ce22de0923bd07"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9146, 0x5a32, 0x6, "6c064a4822"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x4, "1b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xfd, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0x8, "ceba23fc"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x0, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3d, 0x5}, @generic={0x53, 0x5, "7bad17ed9519930771a0f34c092d116fc7e45a09bff53027fabda058a85ff50f1385c0863b00aa09fec0a16991edf5748a7fd09f83f46ef5334af1c1500cce3c90cade53719e124416eff98eaa81289f3d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x4}, @generic={0xb9, 0x11, "0a5b90767b6c9b5bcdbc302ad110f8652e83181be181c167b58af31578f390d70c5639597f15b61bf0a404a019833daaa16a3558035ac7c63f06c4b47071e6f2c3058d6bbebe43008bc89fe260775334c91fb43d7019f6b340d55a6f5e09138af5cc726c048fb6846a06009629f5ca6e50f5ce579a43c6b17313dc381c365b2b200be18cdf4a32b6df0f2483c758159ccbd5984db0889addf3bd847437701cf0b2490f415fbd2a1865659960ccfcfecab00061413db5f7"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7f, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xc9}]}}, {{0x9, 0x5, 0xdf8cc0afbe34b498, 0xc, 0x8, 0x6, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x1, 0xc3, [@generic={0x49, 0x9, "1759ae81f964ddf7c6503e56364ccf3b7e970bb4d998d055a11f7f0fc26e880196faf7599b7898dacfcf940a568b8b908edcffae0555b2c11cdf9d36d6b1ee1960e73f92a6126a"}, @generic={0x38, 0x7, "241cbd81c3bcb7e18e44288fce4e2351c860428cc09c38b945a4cc322067aa4a94eccd79de1ed77d4dacf13317b4646f334477801cbf"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xfa, 0xb7, 0x1f, [@generic={0x7, 0x8, "e70686b33c"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x40, 0x3f, [@generic={0x76, 0x31, "8ffbbd5f3df101459ee8fd287239086f9473b421eb2f6d20047530316e83e2115820928a698b58fd7a73d9ffceecb489e878ebc76904e16a56bd17f9da6fe9aeefd10d3f44ce2d42a30994feadc1d0ca3cd4f5bba3bcba64d9be599a54bf1fdb7f5c8e3f407afd199119fb4d9b43ae901e52a47d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x100}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xd8, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x40628602e8215477, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x80, 0x3, 0xce, [@generic={0xd9, 0x2, "ef3c3ce3054f60765888ae9ba1ade41d0c61c5e74d7961676244f4c31bec0290e8423564882e37d4bea5ed177fb14e55224b87b9f5a95f3ac2c3cacd4f6278229a0f78aef3bfd3c984fa5e248a85fe472b29857eb5d674654e725cfaf3d53bd7ec9e037a17f043bf98068c5309a5a71046cdc0cb4e1bfeff744282e8e0bf52ff4304953b9876daa1b87e3a584b5b6b33fb671f6972221b8d3064a8655e793399e07c147a4ca6576ff65114abb0f893c4109be8fd0452fa9a23deae15d246eb526925b14e9cd626d0187c6002a47de0c8c5a0af1a165322"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, [@generic={0x100, 0x23, "64d8b349f9bb3a71048788fd23b5a6870448b91cc34b0bb334b79c7e70c6eb98309d2c7acec1148e67a04d93602c9739e4b0f1e6f632a167001b86ade4a5ee9ced501ac2054f61718582ddb45f00fe6f959474895f68a1b4fc3dd7121753e72350740fa7a5016d04cddf655079fbcb8715f56329b3a891aa35c4567c7be38d3bba1bc04d765e8f5c29fa10bd7b241a258f6f00e126d2c1989e2b01bdadd17f4a352c325b447ac88c38719851d8f5042de651f633cfead2301453561348385be1586e3cdc15b5d9fd1bceb3e2d8743ca889f4eced59a1742ef572baaffb5da6f00ded711ba5603744a183fa496fd573fe4967795ba68cc872aaf01392a363"}]}}, {{0x9, 0x5, 0x7, 0xce820281482329c5, 0x200, 0x2, 0x81, 0x8, [@generic={0x24, 0x3, "55d69704c238fbe5c61bed7d5b0c9b4493c119ac0bc196208682652f3fe521a0089d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7c, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0xd4, 0x31, "6b28dfaab3b84be0a73240fec5b3b1a7b1b40666da5fdce8593c50449ef45ca816daf47c819b03449450bde142c2f3b5bef04d274d5b53a0424cea080ac1becf17ce6d048cf8f4e7e5c24681bcc61fcbdb9a01fdd673b1eb0cddcdadaca0b7328aae5225d6fe5f6e4745bd76119433abc1ec6c6b8b63a362f2ccd7d5d926a9efbf6a6039fad31f00344514796c24265db443f4bdea90f06cc33d3fe9eb51be4a5509b480712b1549a5e811a51ae54e4b7b6fedea278d42e6012b2db8d675e3b3889be293ca0c09552407f011503a87ba3af7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x40, 0x0, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfff}, @generic={0x34, 0x4, "afb1b71c399573180c84984fa59cfb6a388f60363934856514066549f5705de29cb8e653f1997f28f14864a4ec77533cf6be"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x80, 0x3f, 0x1, [@generic={0x5a, 0x5, "2617fc0320ecee039f6e443fe334485b24a420348ba1a389383f9dcda44412c56270b949f559259bc1a70a3afc45d3b39994db2b8d3c105aca536a40f510971c68fa921ae558b096e15d1946300405041227613803bac08e"}, @generic={0x9d, 0x31, "c25e25d7a95f5cd1b9804920d3c71b3e46bc782ca3baa5e050271206ceaaa5e754cfe2412ce714d34fd76827ce650f0ea28112fc0e6fc5e0a8c6fb6fd41f24bc53db49f5c1f8c5f63a7f045d19dccdd332a1f834ce612220ee96d8bd4133efc60c233a0e30f3c273499e2513ff57540443291e2d7f384e288b0377432ab95c8a6812a350eb87049080ddc8ac2399ced944ab22a07b028382b5cc13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x7, 0x1}}]}}, {{0x9, 0x4, 0xd4, 0x2, 0x2, 0xba, 0x73, 0xe3, 0x7, [], [{{0x9, 0x5, 0x23a749fa69c2a41c, 0x10, 0x400, 0x24, 0x4, 0x5, [@generic={0x60, 0x1, "351c8f1294f3dcab7e26c3255d4382144cd1de572bda1087d0804878379f07100b49beb2306a250287ca763731abe02a39df3e28543819db7860e9ce1f4c754e6fbb119e63d1e5c04e056927febea096b37dd71a9080cd975ba1f7816afb"}, @generic={0xd0, 0xb, "e01e30f6ed257dcdaf62b8e6b5be619d3fab4e58d5523471291e93f83891f21a3926b580044345b6ccb27278c39ed849fa5120cb25c38c792f82c0d0e24affd8790d8128646677f99963e26049c0ae3b57f3015d6bb13439d205a9167bb789d74daf79a4c47a76913491f64606e3e8653a7b64423ffaf519f585636c7eaf712982ac1fb804d21dd4138a066d9afdda2de72e0c5df841d7c75b7ae800e615056909449869438927a32f808d10b5a439acefe0cc6b14c7c5cc87c1f881193a7bd0fb45137224d2b0763cd4b44f5b83"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xc0, 0x6, 0x6, [@generic={0x4f, 0x8, "a7b500085bd8e7c6b782dc2cb8e2069a156285f3475b15e58caf23cf6d09b8c88f53bfdffe17d0368001f3041d166b4f08feb6a35b832fec3d9d20e5c2fc7b529c95d8921d1ef381d788d2415a"}]}}]}}, {{0x9, 0x4, 0xe3, 0x4, 0x0, 0x3c, 0xa3, 0xf8, 0xaa, [@hid_hid={0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0xca9}}]}}, {{0x9, 0x4, 0xa2, 0xcb, 0x6, 0x7c, 0xde, 0xf4, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x20, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xa5, 0x80, 0x6, [@generic={0xeb, 0xf, "f0205cf2b495bfa0d43d2aa7476a59977417b6aade173b78600eefd1aa9faaa98e5f48e09596d1647dfb39251eb87c3e8f6cf2328b335371d655b937045b29e6ecd1d392e620e408e2266acd13448b7025b8a50fadb73d3fb287e38e9a24fb57665fa43edf8df46f91823ec7846abf2850b075a8552c1ef88fcc38d71e0218aaf3eafedc01f1ca824b80bcc4939733b3d17158f119520ef1b7985610fa02f966bb8a9aec03837ef95265bc9f6b285059b7dc327d8fba32fb81e497b5b4fdc9e9a5887f6df75cfdd3c7dce4b0acee8fc828c054ed73552263a43320601de1b57b51099268c8e291924e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x20, 0xda, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5693}, @generic={0x4e, 0x3, "ee7eb235b0fcf946bbc37d0070dbf37bfde613f72690520738f53c970a4099425fa78aa974fc8677cb9310c4d44e3b3192dfcb4d68a6d2e08b7eb2825225acb63e1061cf0bb5ba285280b164"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xff, 0x7, 0x1, [@generic={0xd9, 0x1, "bdcdee6f1a7989f3351ed134158bcdfbdc04415d0f4c4739bebb718c36c1e1b87c7f6940209038dd2582acd09e4a89e34d581080f9d6e2269f52b95878266471bc43c90c83490048262ecdb119c234c327cb705654d230fe3206a3040061c7e956ae2a8ee2db3e4e135339e2253ab465a160dfc559ef60199b0e3c0ebb9f2dbd9b17ddbb02a1aad13267ed9e3736a2a8e5aa96f2998f18a9a07ea1d46d7e3fd6a815e91b72e250376d88401305a97fbc6e72a0c110d5b995771a483cee36e4910dc9de0d7bcad0ef3b0c8b34e401fef5839cec7640641e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x20, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x300, 0x80, 0x3f, 0xc2, 0x40, 0x1f}, 0x1e4, &(0x7f0000001bc0)={0x5, 0xf, 0x1e4, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x84d4}, @generic={0xd0, 0x10, 0x0, "93d9b0211c21b964eabf3fd1223b4945242f0424737b07fd459938591285ee69b1f211ca55dcc739fb7e2293e4fbcb7121fb846eb992ae8e2ca405e5d5071e6aec299a51123c24540a531b95771c35c34099493be4d855ba58525ddbeb6243eca22639d1b75d8c3a862cc65229cda5c73ca6ff241fa0de630c49259aa562cfa4792819d999fd1447902b506a9a0719e160346e4b71920406a3a9fed1930a3ea9e72001a385e6e766962ea1f6f3c391f668e7d70f33ad524b35acf5490087d42359182bd77342bc5e381d9ae6be"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x28, 0x880, 0x51, [0xffc0cf, 0xff3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xfff, 0xf000, 0x7, [0xff000f, 0xfff0, 0xf0]}, @generic={0xc3, 0x10, 0x0, "ced3c7c28d36382c0b7dd611648320c78b9fea5f27b9f8dd0ebd9262455deb418d397caf623fa00e0ae68d57f7eb15b36fa503a07a836052fef91078d8fd7e2d74e829bc59a737b8602362230a0822aabd211fedd66b0bafde6aed434e6bec1fd8fa5678a34e525965150189c46b4595f0ba9041f649994b4315df3177875360755fe15a81265050f11a5fd085e02ffd90014eef7033e59306740d309f3d08f37c1b640e9498af751e90d66d9502d1a1542cbbeca8930c2e925090a30a0cb1dd"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xff00, 0x1000, [0xf, 0x0]}]}, 0x7, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x41c}}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000079381010c2154000f3070182030109021b0001000000000904000301e104550009058b0b40"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x24, &(0x7f0000000d40)={0x20, 0x23, 0x2c, {0x2c, 0x9, "972b8bbf3ccae9244612549ecc104dacd7de83c4c03d1da0568923a0d6fd99b5c0d0d3e8f6a356cf4a69"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000dc0)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0xa, "f313ccf1"}, @local=@item_4={0x3, 0x2, 0x1, "c4d4c71c"}, @main=@item_012={0x2, 0x0, 0xb, "b57e"}, @global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x21, 0x1, {0x22, 0x834}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e80)={0x40, 0x16, 0x27, "376d49659b6cfed1473f3a627a2e8dd23923b192d5971dc43d1d4cbcece86e9ec9a34caafeae35"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x1, 0x1f, "19650089c0bc05a351b9773e4475ffb7373ff455ad9e4b323601e39207a066"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x100, {0x100, 0x7, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000240)={0x0, 0xf, 0x84, {0x5, 0xf, 0x84, 0x6, [@generic={0x2a, 0x10, 0x1, "1b77a8c56fba63a272485e7d6fc6ca7a3b818a2950feea997597fdeb80cd50ab7e8734ceab39f2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0xb, 0x800}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xff, 0xf00, 0x49, [0x6f, 0xffc030, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7, 0xf000, 0x101, [0xf0, 0x6030, 0xc030]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "dd5f3774cbf82d8156446cded6e25cd7"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x3, 0x40, "55883d1e", "bce9c424"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x8, 0xc0, 0x4, 0x8889, 0xffff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x6, 0x36, "827848358f7c2146732308adb5b8f45189513a903cc36e2020cfce258e91ecc80901a0c1f79073b3f7d131d2b30b4b59c80205272e75"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x4, 0x10, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f6a8"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "998a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) 04:04:45 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b24, 0x7eb, 0x6, 0x1304, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0xe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10001, 0x0) (rerun: 32) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x7, 0x0, 0x8, {0x0, 0xea60}, {0x77359400}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x2, 0x0, 0x0, "dc81c959e5525ac12067bd5cabca6234c0b298caf89089825baeaabd91da98c846dba69496239c82a63fdd5c974c21c6fd9aa06a247fed482a5944d9d2e76d10"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20006084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) r5 = io_uring_setup(0x3f9b, &(0x7f00000000c0)={0x0, 0xf39c, 0x400, 0x2, 0x151}) cachestat(r5, &(0x7f0000000140)={0x7, 0x5}, &(0x7f0000000300), 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:04:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2500, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xc00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:45 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001, 0x141) getdents(r3, &(0x7f00000008c0)=""/107, 0x6b) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/182, 0xb6, 0x0, &(0x7f0000000600)=""/172, 0xac}}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x7c1840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x10, &(0x7f0000000340)=@raw=[@generic={0x5, 0x3, 0xc, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x63, 0x3, 0x3, 0x2, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0x20, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x8, '\x00', 0x0, 0xc, r7, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x3, &(0x7f0000000780)=[r9], &(0x7f00000007c0)=[{0x3, 0x2, 0xf, 0xc}, {0x2, 0x1, 0xd, 0x6}, {0x2, 0x5, 0x7, 0x6}], 0x10, 0x8}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 3576.971078][T24374] net_ratelimit: 3 callbacks suppressed [ 3576.971141][T24374] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3576.990386][T24372] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3577.036374][T24375] sctp: [Deprecated]: syz-executor.3 (pid 24375) Use of int in maxseg socket option. [ 3577.036374][T24375] Use struct sctp_assoc_value instead 04:04:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2b4f, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3577.399231][T24389] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3577.425893][T24388] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2ee0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xd99, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:45 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001, 0x141) getdents(r3, &(0x7f00000008c0)=""/107, 0x6b) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/182, 0xb6, 0x0, &(0x7f0000000600)=""/172, 0xac}}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x7c1840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x10, &(0x7f0000000340)=@raw=[@generic={0x5, 0x3, 0xc, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x63, 0x3, 0x3, 0x2, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0x20, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x8, '\x00', 0x0, 0xc, r7, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x3, &(0x7f0000000780)=[r9], &(0x7f00000007c0)=[{0x3, 0x2, 0xf, 0xc}, {0x2, 0x1, 0xd, 0x6}, {0x2, 0x5, 0x7, 0x6}], 0x10, 0x8}, 0x90) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 3577.623708][T24392] sctp: [Deprecated]: syz-executor.3 (pid 24392) Use of int in maxseg socket option. [ 3577.623708][T24392] Use struct sctp_assoc_value instead [ 3577.835455][T24398] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3577.852180][T24401] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:48 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) r0 = syz_usb_connect(0x4, 0xae7, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x1f, 0x49, 0xfa, 0x10, 0x45e, 0x479, 0xdde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad5, 0x4, 0x29, 0x7f, 0x10, 0x9, [{{0x9, 0x4, 0xef, 0x84, 0xb, 0xd3, 0x4d, 0x54, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7f}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x6, 0xb8, "c5b765"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x4, 0x5], 0xff}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x1f, 0x8, "db5a"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x4, 0x3a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x98a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x3, 0x7, 0x26, [@generic={0x84, 0x4, "97dfc6b2ce5fe65d547c182056f27ebd21d8d2481de2b377de4a995473842ae3a837be824e4ff1708eeee7e3cef00a7ef0aa70fb423b837eba976f5b74eaf422faca90b2ad47b70e5531e0525d33a5be82411e0b410a2b91bc324780f454af046d1f7497ac63f7cdf98d50dc5112eb3dcb396f1bd81ddad988d9927fd1283b9bc3b1"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x3, 0x3f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xba, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x40, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x8, 0x49f}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x6}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xb3fc}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x1, 0x5d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x6, 0x4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0xec, 0x9a, 0x7f, [@generic={0x16, 0x22, "1f5b1142721e7cfc17fb7ad5f20b9d8ab93e2937"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x6, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x83}]}}, {{0x9, 0x5, 0x0, 0x1a, 0x20, 0x80, 0x80, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}]}}]}}, {{0x9, 0x4, 0x44, 0x10, 0x9, 0x2, 0x2, 0xff, 0x2b, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '|'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd8, 0x800, 0x20}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@mdlm_detail={0x4d, 0x24, 0x13, 0x5, "635f7a6213e565c717a314a6e27387fa6c7e705bf4487e71d27643e816dc9cd537487fc2d90914e401cecd03cab5bba2d8928556882de6a1fdcd655a00a1de8a7476c35ba122d7adac"}, @obex={0x5, 0x24, 0x15, 0x8001}]}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x50, 0x2, [@generic={0x46, 0x8, "695ec3f915cf06ef7776ca6c44f4af6c39bd3d8e1f3161decb3d4bff0fcd24a0e0e9638072757156c5ecb710ba459e7e6f91fed493e8f675773d1fa2a309bb9c7e797269"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x74, 0x1, [@generic={0x7c, 0x0, "f4d569c706a14dbfd00cf84b891cfbdcb9e8458e05f43af5b6eb530e3070f79a032bfdcf125f54a172928f215563ac819884faa3d4e861942ecb0daf41c04ba946bbb5889837327a5197f362c5891b5ab54b7f8b0778d3bfda2d62cfcac2dce38199aa479d54bc3c0f5ce5721b79fad848280137972afa3cac71"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xe38}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf1, 0x6, 0x55, [@generic={0x69, 0x31, "be57642aaff885ee0acf7da406aad714cda8ca26659d957346619cafe52e324feb41d6d31672791f86b2f4ad475725cd86c625db168d4a858145c1c6687f40e012d4fb69c1fd9dfef16cf3c7c29c39e4f431913559b577104e956f50c9c24aebc805ece5deffe5"}, @generic={0x9, 0x9, "41683a0709a8fc"}]}}, {{0x9, 0x5, 0xf, 0x17, 0x400, 0x8, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0x6, 0x4, [@generic={0xe4, 0xa, "ae30282e6b18c5845f3f5f03362a416313330f0677c3e48c48a6b7248fc7adc6a8c839ff616a64c0d3266b1a276e505b4fc42d11406815a2ecda2c0430dbe172552fc050c51895cf5eb7482adc5f303040f8932bb6e923a21aae1b508dcb6a27254e7d62e7f9b2497c278382a99e6f5eb80161b231a29f43e313b4d33366d450bc941d8b1fe7c02c44745e2d80f3bbf47220d1386beea33ab4c3240484b58a99b0cee422f1773d85bbd416af7ba2a3b688f48a5e18cf63b03280162267c73a75c58f6eefb486acea58808f5bae1eb7fb16719d9747082a8cf819bc79760de2505fae"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x20, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xff, 0xf7, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x62}]}}]}}, {{0x9, 0x4, 0xa9, 0x4, 0x5, 0x8a, 0x76, 0x8f, 0x3, [@generic={0x66, 0x22, "4228a6f3ecd1c29701be113dfa468804aeb709aea7d67b0897a83fdb5d080b89456f480e09795168a6ac35ed6b794cbd6ed30102188bd0a6a0796de91f67285e3875695f8fdab14f0937cf5b76376363d18912802495144c799410aa4fb72698fcc49441"}], [{{0x9, 0x5, 0xb, 0x14, 0x8, 0x97, 0x6, 0x3f, [@generic={0x44, 0x8, "6fca201e77a11a77222707b3bb97606d92ee963b37a9da018fcbae315721ac34810b995be1917a72d2f821a67b76b3ecd397bc8e34c55572e2a59ea0ed3bf7d80206"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xef, 0xf7, 0x9, [@generic={0x36, 0xb, "b702e7e6789c7f67e4f2bbfdb70527003e924ed75e781fce704dab11618944c867d977f9a7f2696f8b2f19c1fde958f2f803086f"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x7f, 0x7f, 0x8, [@generic={0xa6, 0x4, "677dba315c1ed9d91e5d151b053903a73fb2bcd84d110c01e8c93740a7a8f53a0d326ec7d26502a07819facd9426356cdf82fc2d3cf2fc3987a9d2c32528b806466fa764e07a246a9cb809af5c43e1d0991945d10016b165cb8bfb109f1205b9a3ffe44fc61f3a9ee6ddce978d019bf509004976884495b8ed83a040e5ed54360542a7a5d290261799e0081c4140df15cc0643ec29c7c3a665d1d8713c3f0ae3c9a6f628"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0xb2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x6, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0x29, 0x5, 0x8, 0xc8, 0xb2, 0x8e, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x7a, 0x1f}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x1, 0x9e, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1f}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x1f, 0xe9, 'R'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x0, 0x0, "cb602a3643ca1ba1"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}, @generic={0xd7, 0x30, "4a6a0a5d0d0c0c3da9a3e264374142b4baf07c82e503aed6c92369974655260476091759c99d0b9f0500077baf764d11308bdb56d926b14430c056d8b63b871ee8d60e3a010052cd03ec1ec0a0eacef589cff95628f22c500499ca5d63aaaaa62eab76798c4bc7bd31a3a5e5500c54473ca04fe36d0e6709ca5200bb1a628b2a1695a28abdca74edcde10963fa1db4b2251eb41aef1936ea50b5ce93a777371a9aae549e956ae7108102959931d0e5e2894755332919a7d9ebfa678850b6a03509f6374842f903c1e2e619377cf085d354c0a7a437"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3db3afaf2e0d373, 0x7, 0x1d, 0x1, [@generic={0x3b, 0x22, "7e7dc495470939d5de7c658b1e4171f36fa62f7c539c47bcd76ca553170c56b332e7781c25c5e2f49fded0b9eb45567b9cb48fafe0362f21b7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x5, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x8000}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xd4, 0x0, 0x6, [@generic={0xf9, 0x31, "23dbef59fafb0f9dfa0254f465b1daf002d59ea5819fdce4d9b558a7588fe6ade2659724f886dbd871cf246d58aa4abfa79b876267c35ca919f55dce30f644472370f5aa809151456308a35f95be4e0a1d5134cd4b9c931059c928e56836df385526284a1e9b55dbc9c82aa2cdcf895ad67155bc48ca039bb9e8c9878ede0cbcb7a961b6eff792a4b8a70819a74c257d22b59f5e444960da8790e33f4527c747752e613d687ca8529bdb260a9545c202e2c59ba9b526ce5572dc55d10bccee8112907e9585886e75bebbcdf6d36b8ddb293d664add1d103c5082fdf9e9d4241361c04c6516ec2395f9dd26a6094f57014a9727663b6564"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x80, 0x3, [@generic={0x83, 0x23, "fa6f57e2652304d47bc36efb1e163b8efd90843f5c72e135105d6a1a0adffb7743c84afc649bdd55c825058fdb517634cfaa5dd689ae6627f618b8bc1d013dc919500070286239a01b3c405fc70f21282f896fceda0d7bbbcadd7ef38030c4bdd6d3165575855b05f10a786a3ac6187f189663d14b9fbc2136a03263f38c5399b0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x1f, 0x5, [@generic={0x23, 0x23, "8bf61244fcae440d4466be9e977604c465690fdc675806316cf26536bfbd4ce233"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x6, [@generic={0x20, 0x11, "2adb7e1f6b1e05150c218ba3268864f3afe029d4f42798d52646787dabff"}, @generic={0x9e, 0x1, "f637f4331d6677a6e8986aafdd215fea908e56db47bdda7381758f73576f9f85e038b76dbbacf289d9726f0131b87f008aebee7136239fc388639e69fd94be395cfae6177e72f759000e101b05b26139e6a3e793f854f7c87925cd2357523fe6b7dcd9deb233a1474bbacc7e76e7b4f8fb8b0c7b87bbf6f8909aaada726b6d7d00879cad62d84b767faa9cbe60642ff32c0e97e2b73915159be70728"}]}}, {{0x9, 0x5, 0x8e, 0x4, 0x10, 0x7, 0x4, 0xe0, [@generic={0x5e, 0x21, "fd920afbd516fae2fe25873d97d970d8affaa51ed06a3f543aca33c032912c94e99f49449e3c6cfcb4f1a6748bcbdc5999f9f3f1cfd91e901fd245a91177c8757695d4ce4406da27accb7219cdee11430d81f6409ab54705889b50f5"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0x6, 0x93, 0x8, 0x6}, 0x49, &(0x7f0000000100)={0x5, 0xf, 0x49, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x50, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x1, 0x81, 0x1}, @generic={0x15, 0x10, 0x2, "024d37c66c2608f02217a3d20508ff5125a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x35, 0x81, 0xfff8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0xfffa}]}, 0x1, [{0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="0e1c1f31b66da7dc070323759ac5c7"]}]}) syz_usb_connect$cdc_ecm(0x2, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x180, 0x8, [{{0x9, 0x4, 0x0, 0xb2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "903e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0xfffc, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0xdd, 0x5, 0xecf, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1f, 0x1d}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x24, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x5, 0xe, 0x0, 0x20, 0x70}, 0x19c, &(0x7f0000000f00)={0x5, 0xf, 0x19c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8a, 0x1f, 0x2, 0x19}, @ptm_cap={0x3}, @generic={0xfa, 0x10, 0x1, "822a792c9d112424bd4a2d363920c4eefc40f00be952f057978125c991a107e952683cbcfa4efd1faaeefbdec1efe02d2584ea0033acd8fd37680524a892470dbe0de97d60fa9fd5db0a86641b7c9e5bac4ed6d8fd51193fbfa569e71181cc64ad28a3588195141cf7a5a7e8637d536eb807632f11fa0ff4b3a3cfa0b9f553c9b0e2daff886771d06f3ba92e7a8f4f7cad03934405bdcff237e3e359d8b1521d7834fc24eb9db8c4ce054b7659acbfe80f2a9c5d834de05fe31d14afcd024bb0fb7747a80462f8bc7a4a4091ea09e593cba38ddb21ba4622032523f22356ebd1c84470039dc482f3a9241adc05de12318a8fe7c2beb999"}, @generic={0x8f, 0x10, 0xb, "e219e1e4866c8c678e59f5cb4bad384f26fe51526eeae6930ef80eb48911e3baaecf2c5b54fa6a68e09292a56ab849ce066b8de857b5af1897febe79843e851be7c70362eea13522cda456f2446513c4bb89876186c8cb6e32077080b027bb4217df912e38a73d45c85e8038b9c8584ce829b9b8e18741a25d436f9ef7cd724db54b0fca35bc4085592813e1"}]}, 0x5, [{0xf8, &(0x7f00000010c0)=@string={0xf8, 0x3, "58560da8ea0d6a5c05e26eeb350ef606cd5cd7b54d45eedc328c63801eedfd1ceafb1da2ab0bc280065ed0726352a40a5d1d980975334dfd5e147e3eecd25b55e5a703f65f366e9e11938dd0b50869939805e15b9537d6bf00eb59ccd28aec970fb8e450e2c82a6e151b9441967ba36d36144006593f4ff8fc0f56f290dd52e4095f3f4c4c4a912e7787ef7a2f46d56cdaf6cfbf2435f883abd2cc663caf867dd4d80a0c2447d9ad4e5036fa6db34f2494c59977918ef2c5814e7c9ee9bb06cb87c6d372e92f59633f9fa40e26bc46e503b4ff98edef2b7c34a7b9d1eca93f58cf9c178b9795dd4a8349ca5ad0419f506676b22f8561"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x200a}}, {0x48, &(0x7f0000001280)=@string={0x48, 0x3, "040bf149d6b60847c0e874e26afdeb8a90bb45dda65a28cf8d049445199de54d839a25c0427db3b6c8026727eec14ec5d20aac6e8d2f93186ae7f1cdffce7392b6833d30e52f"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14c, &(0x7f0000000d40)={[{0x97, 0x4e00, "4e7eba53455c127a786e453236dd77296b7eca5cd00a62325a56719961b1fef39dc45d674abcda26fe2d20ba45b8860631dbbc21a07358e5b612bc1e47fe7c3df5e7b5c0ad3e5e3e0ea6fc78a1fef014c9c9cdb34d20474d827d200e0978532a414c237c007b38e3f600c5a91be34660be35b06485856555ce28f4bd4982e9d4506a5cdaa99ae9e12f1b63ef8116ef3afa2445efb72dff"}, {0xaa, 0x4e00, "e87582a2ca3f2794628b1422d337c804be3375ddfbf9fa6d9d08e35ddd030f7efbd838aef75204a3bffaabf827a604c0a9a171f41a950c1526a96449a8a13adf2be759183ec56b2eb8cb759c9bf1a1b04cf5893f32b12588aa4218e436a03a001f827a718e7a2775b0b586256e89aabc5a01582aa6dd0668e5a143551cd7012104ed30683088ab7c68164cc91016934f3865111bcd8b4263d54a59b00e503ee645961fec1ba080b5941b"}]}) 04:04:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:48 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4, 0xd8d, 0x7, 0x7c0, r2, 0x80, '\x00', 0x0, r3, 0x2, 0x5, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000140)={0x11, 0x5, r4, 0x1, 0x80, 0x6, @local}, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x3, 0x2}) 04:04:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:48 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001, 0x141) getdents(r3, &(0x7f00000008c0)=""/107, 0x6b) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/182, 0xb6, 0x0, &(0x7f0000000600)=""/172, 0xac}}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x7c1840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x10, &(0x7f0000000340)=@raw=[@generic={0x5, 0x3, 0xc, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x63, 0x3, 0x3, 0x2, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0x20, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x8, '\x00', 0x0, 0xc, r7, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x3, &(0x7f0000000780)=[r9], &(0x7f00000007c0)=[{0x3, 0x2, 0xf, 0xc}, {0x2, 0x1, 0xd, 0x6}, {0x2, 0x5, 0x7, 0x6}], 0x10, 0x8}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 3580.127996][T24411] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3580.153728][T24410] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4800, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1100, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:48 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0xc8, 0x8, 0x2, 0x4, 0x1000}}}, 0xe) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:04:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10001}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:48 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4, 0xd8d, 0x7, 0x7c0, r2, 0x80, '\x00', 0x0, r3, 0x2, 0x5, 0x2}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000140)={0x11, 0x5, r4, 0x1, 0x80, 0x6, @local}, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x3, 0x2}) (rerun: 32) [ 3580.617986][T24424] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3580.685117][T24429] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:51 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) r0 = syz_usb_connect(0x4, 0xae7, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x1f, 0x49, 0xfa, 0x10, 0x45e, 0x479, 0xdde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad5, 0x4, 0x29, 0x7f, 0x10, 0x9, [{{0x9, 0x4, 0xef, 0x84, 0xb, 0xd3, 0x4d, 0x54, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7f}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x6, 0xb8, "c5b765"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x4, 0x5], 0xff}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x1f, 0x8, "db5a"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x4, 0x3a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x98a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x3, 0x7, 0x26, [@generic={0x84, 0x4, "97dfc6b2ce5fe65d547c182056f27ebd21d8d2481de2b377de4a995473842ae3a837be824e4ff1708eeee7e3cef00a7ef0aa70fb423b837eba976f5b74eaf422faca90b2ad47b70e5531e0525d33a5be82411e0b410a2b91bc324780f454af046d1f7497ac63f7cdf98d50dc5112eb3dcb396f1bd81ddad988d9927fd1283b9bc3b1"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x3, 0x3f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xba, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x40, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x8, 0x49f}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x6}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xb3fc}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x1, 0x5d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x6, 0x4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0xec, 0x9a, 0x7f, [@generic={0x16, 0x22, "1f5b1142721e7cfc17fb7ad5f20b9d8ab93e2937"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x6, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x83}]}}, {{0x9, 0x5, 0x0, 0x1a, 0x20, 0x80, 0x80, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}]}}]}}, {{0x9, 0x4, 0x44, 0x10, 0x9, 0x2, 0x2, 0xff, 0x2b, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '|'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd8, 0x800, 0x20}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@mdlm_detail={0x4d, 0x24, 0x13, 0x5, "635f7a6213e565c717a314a6e27387fa6c7e705bf4487e71d27643e816dc9cd537487fc2d90914e401cecd03cab5bba2d8928556882de6a1fdcd655a00a1de8a7476c35ba122d7adac"}, @obex={0x5, 0x24, 0x15, 0x8001}]}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x50, 0x2, [@generic={0x46, 0x8, "695ec3f915cf06ef7776ca6c44f4af6c39bd3d8e1f3161decb3d4bff0fcd24a0e0e9638072757156c5ecb710ba459e7e6f91fed493e8f675773d1fa2a309bb9c7e797269"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x74, 0x1, [@generic={0x7c, 0x0, "f4d569c706a14dbfd00cf84b891cfbdcb9e8458e05f43af5b6eb530e3070f79a032bfdcf125f54a172928f215563ac819884faa3d4e861942ecb0daf41c04ba946bbb5889837327a5197f362c5891b5ab54b7f8b0778d3bfda2d62cfcac2dce38199aa479d54bc3c0f5ce5721b79fad848280137972afa3cac71"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xe38}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf1, 0x6, 0x55, [@generic={0x69, 0x31, "be57642aaff885ee0acf7da406aad714cda8ca26659d957346619cafe52e324feb41d6d31672791f86b2f4ad475725cd86c625db168d4a858145c1c6687f40e012d4fb69c1fd9dfef16cf3c7c29c39e4f431913559b577104e956f50c9c24aebc805ece5deffe5"}, @generic={0x9, 0x9, "41683a0709a8fc"}]}}, {{0x9, 0x5, 0xf, 0x17, 0x400, 0x8, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0x6, 0x4, [@generic={0xe4, 0xa, "ae30282e6b18c5845f3f5f03362a416313330f0677c3e48c48a6b7248fc7adc6a8c839ff616a64c0d3266b1a276e505b4fc42d11406815a2ecda2c0430dbe172552fc050c51895cf5eb7482adc5f303040f8932bb6e923a21aae1b508dcb6a27254e7d62e7f9b2497c278382a99e6f5eb80161b231a29f43e313b4d33366d450bc941d8b1fe7c02c44745e2d80f3bbf47220d1386beea33ab4c3240484b58a99b0cee422f1773d85bbd416af7ba2a3b688f48a5e18cf63b03280162267c73a75c58f6eefb486acea58808f5bae1eb7fb16719d9747082a8cf819bc79760de2505fae"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x20, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xff, 0xf7, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x62}]}}]}}, {{0x9, 0x4, 0xa9, 0x4, 0x5, 0x8a, 0x76, 0x8f, 0x3, [@generic={0x66, 0x22, "4228a6f3ecd1c29701be113dfa468804aeb709aea7d67b0897a83fdb5d080b89456f480e09795168a6ac35ed6b794cbd6ed30102188bd0a6a0796de91f67285e3875695f8fdab14f0937cf5b76376363d18912802495144c799410aa4fb72698fcc49441"}], [{{0x9, 0x5, 0xb, 0x14, 0x8, 0x97, 0x6, 0x3f, [@generic={0x44, 0x8, "6fca201e77a11a77222707b3bb97606d92ee963b37a9da018fcbae315721ac34810b995be1917a72d2f821a67b76b3ecd397bc8e34c55572e2a59ea0ed3bf7d80206"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xef, 0xf7, 0x9, [@generic={0x36, 0xb, "b702e7e6789c7f67e4f2bbfdb70527003e924ed75e781fce704dab11618944c867d977f9a7f2696f8b2f19c1fde958f2f803086f"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x7f, 0x7f, 0x8, [@generic={0xa6, 0x4, "677dba315c1ed9d91e5d151b053903a73fb2bcd84d110c01e8c93740a7a8f53a0d326ec7d26502a07819facd9426356cdf82fc2d3cf2fc3987a9d2c32528b806466fa764e07a246a9cb809af5c43e1d0991945d10016b165cb8bfb109f1205b9a3ffe44fc61f3a9ee6ddce978d019bf509004976884495b8ed83a040e5ed54360542a7a5d290261799e0081c4140df15cc0643ec29c7c3a665d1d8713c3f0ae3c9a6f628"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0xb2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x6, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0x29, 0x5, 0x8, 0xc8, 0xb2, 0x8e, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x7a, 0x1f}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x1, 0x9e, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1f}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x1f, 0xe9, 'R'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x0, 0x0, "cb602a3643ca1ba1"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}, @generic={0xd7, 0x30, "4a6a0a5d0d0c0c3da9a3e264374142b4baf07c82e503aed6c92369974655260476091759c99d0b9f0500077baf764d11308bdb56d926b14430c056d8b63b871ee8d60e3a010052cd03ec1ec0a0eacef589cff95628f22c500499ca5d63aaaaa62eab76798c4bc7bd31a3a5e5500c54473ca04fe36d0e6709ca5200bb1a628b2a1695a28abdca74edcde10963fa1db4b2251eb41aef1936ea50b5ce93a777371a9aae549e956ae7108102959931d0e5e2894755332919a7d9ebfa678850b6a03509f6374842f903c1e2e619377cf085d354c0a7a437"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3db3afaf2e0d373, 0x7, 0x1d, 0x1, [@generic={0x3b, 0x22, "7e7dc495470939d5de7c658b1e4171f36fa62f7c539c47bcd76ca553170c56b332e7781c25c5e2f49fded0b9eb45567b9cb48fafe0362f21b7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x5, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x8000}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xd4, 0x0, 0x6, [@generic={0xf9, 0x31, "23dbef59fafb0f9dfa0254f465b1daf002d59ea5819fdce4d9b558a7588fe6ade2659724f886dbd871cf246d58aa4abfa79b876267c35ca919f55dce30f644472370f5aa809151456308a35f95be4e0a1d5134cd4b9c931059c928e56836df385526284a1e9b55dbc9c82aa2cdcf895ad67155bc48ca039bb9e8c9878ede0cbcb7a961b6eff792a4b8a70819a74c257d22b59f5e444960da8790e33f4527c747752e613d687ca8529bdb260a9545c202e2c59ba9b526ce5572dc55d10bccee8112907e9585886e75bebbcdf6d36b8ddb293d664add1d103c5082fdf9e9d4241361c04c6516ec2395f9dd26a6094f57014a9727663b6564"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x80, 0x3, [@generic={0x83, 0x23, "fa6f57e2652304d47bc36efb1e163b8efd90843f5c72e135105d6a1a0adffb7743c84afc649bdd55c825058fdb517634cfaa5dd689ae6627f618b8bc1d013dc919500070286239a01b3c405fc70f21282f896fceda0d7bbbcadd7ef38030c4bdd6d3165575855b05f10a786a3ac6187f189663d14b9fbc2136a03263f38c5399b0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x1f, 0x5, [@generic={0x23, 0x23, "8bf61244fcae440d4466be9e977604c465690fdc675806316cf26536bfbd4ce233"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x6, [@generic={0x20, 0x11, "2adb7e1f6b1e05150c218ba3268864f3afe029d4f42798d52646787dabff"}, @generic={0x9e, 0x1, "f637f4331d6677a6e8986aafdd215fea908e56db47bdda7381758f73576f9f85e038b76dbbacf289d9726f0131b87f008aebee7136239fc388639e69fd94be395cfae6177e72f759000e101b05b26139e6a3e793f854f7c87925cd2357523fe6b7dcd9deb233a1474bbacc7e76e7b4f8fb8b0c7b87bbf6f8909aaada726b6d7d00879cad62d84b767faa9cbe60642ff32c0e97e2b73915159be70728"}]}}, {{0x9, 0x5, 0x8e, 0x4, 0x10, 0x7, 0x4, 0xe0, [@generic={0x5e, 0x21, "fd920afbd516fae2fe25873d97d970d8affaa51ed06a3f543aca33c032912c94e99f49449e3c6cfcb4f1a6748bcbdc5999f9f3f1cfd91e901fd245a91177c8757695d4ce4406da27accb7219cdee11430d81f6409ab54705889b50f5"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0x6, 0x93, 0x8, 0x6}, 0x49, &(0x7f0000000100)={0x5, 0xf, 0x49, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x50, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x1, 0x81, 0x1}, @generic={0x15, 0x10, 0x2, "024d37c66c2608f02217a3d20508ff5125a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x35, 0x81, 0xfff8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0xfffa}]}, 0x1, [{0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="0e1c1f31b66da7dc070323759ac5c7"]}]}) syz_usb_connect$cdc_ecm(0x2, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x180, 0x8, [{{0x9, 0x4, 0x0, 0xb2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "903e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0xfffc, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0xdd, 0x5, 0xecf, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1f, 0x1d}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x24, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x5, 0xe, 0x0, 0x20, 0x70}, 0x19c, &(0x7f0000000f00)={0x5, 0xf, 0x19c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8a, 0x1f, 0x2, 0x19}, @ptm_cap={0x3}, @generic={0xfa, 0x10, 0x1, "822a792c9d112424bd4a2d363920c4eefc40f00be952f057978125c991a107e952683cbcfa4efd1faaeefbdec1efe02d2584ea0033acd8fd37680524a892470dbe0de97d60fa9fd5db0a86641b7c9e5bac4ed6d8fd51193fbfa569e71181cc64ad28a3588195141cf7a5a7e8637d536eb807632f11fa0ff4b3a3cfa0b9f553c9b0e2daff886771d06f3ba92e7a8f4f7cad03934405bdcff237e3e359d8b1521d7834fc24eb9db8c4ce054b7659acbfe80f2a9c5d834de05fe31d14afcd024bb0fb7747a80462f8bc7a4a4091ea09e593cba38ddb21ba4622032523f22356ebd1c84470039dc482f3a9241adc05de12318a8fe7c2beb999"}, @generic={0x8f, 0x10, 0xb, "e219e1e4866c8c678e59f5cb4bad384f26fe51526eeae6930ef80eb48911e3baaecf2c5b54fa6a68e09292a56ab849ce066b8de857b5af1897febe79843e851be7c70362eea13522cda456f2446513c4bb89876186c8cb6e32077080b027bb4217df912e38a73d45c85e8038b9c8584ce829b9b8e18741a25d436f9ef7cd724db54b0fca35bc4085592813e1"}]}, 0x5, [{0xf8, &(0x7f00000010c0)=@string={0xf8, 0x3, "58560da8ea0d6a5c05e26eeb350ef606cd5cd7b54d45eedc328c63801eedfd1ceafb1da2ab0bc280065ed0726352a40a5d1d980975334dfd5e147e3eecd25b55e5a703f65f366e9e11938dd0b50869939805e15b9537d6bf00eb59ccd28aec970fb8e450e2c82a6e151b9441967ba36d36144006593f4ff8fc0f56f290dd52e4095f3f4c4c4a912e7787ef7a2f46d56cdaf6cfbf2435f883abd2cc663caf867dd4d80a0c2447d9ad4e5036fa6db34f2494c59977918ef2c5814e7c9ee9bb06cb87c6d372e92f59633f9fa40e26bc46e503b4ff98edef2b7c34a7b9d1eca93f58cf9c178b9795dd4a8349ca5ad0419f506676b22f8561"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x200a}}, {0x48, &(0x7f0000001280)=@string={0x48, 0x3, "040bf149d6b60847c0e874e26afdeb8a90bb45dda65a28cf8d049445199de54d839a25c0427db3b6c8026727eec14ec5d20aac6e8d2f93186ae7f1cdffce7392b6833d30e52f"}}]}) (async) syz_usb_connect$cdc_ecm(0x2, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x180, 0x8, [{{0x9, 0x4, 0x0, 0xb2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "903e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0xfffc, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0xdd, 0x5, 0xecf, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1f, 0x1d}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x24, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x5, 0xe, 0x0, 0x20, 0x70}, 0x19c, &(0x7f0000000f00)={0x5, 0xf, 0x19c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8a, 0x1f, 0x2, 0x19}, @ptm_cap={0x3}, @generic={0xfa, 0x10, 0x1, "822a792c9d112424bd4a2d363920c4eefc40f00be952f057978125c991a107e952683cbcfa4efd1faaeefbdec1efe02d2584ea0033acd8fd37680524a892470dbe0de97d60fa9fd5db0a86641b7c9e5bac4ed6d8fd51193fbfa569e71181cc64ad28a3588195141cf7a5a7e8637d536eb807632f11fa0ff4b3a3cfa0b9f553c9b0e2daff886771d06f3ba92e7a8f4f7cad03934405bdcff237e3e359d8b1521d7834fc24eb9db8c4ce054b7659acbfe80f2a9c5d834de05fe31d14afcd024bb0fb7747a80462f8bc7a4a4091ea09e593cba38ddb21ba4622032523f22356ebd1c84470039dc482f3a9241adc05de12318a8fe7c2beb999"}, @generic={0x8f, 0x10, 0xb, "e219e1e4866c8c678e59f5cb4bad384f26fe51526eeae6930ef80eb48911e3baaecf2c5b54fa6a68e09292a56ab849ce066b8de857b5af1897febe79843e851be7c70362eea13522cda456f2446513c4bb89876186c8cb6e32077080b027bb4217df912e38a73d45c85e8038b9c8584ce829b9b8e18741a25d436f9ef7cd724db54b0fca35bc4085592813e1"}]}, 0x5, [{0xf8, &(0x7f00000010c0)=@string={0xf8, 0x3, "58560da8ea0d6a5c05e26eeb350ef606cd5cd7b54d45eedc328c63801eedfd1ceafb1da2ab0bc280065ed0726352a40a5d1d980975334dfd5e147e3eecd25b55e5a703f65f366e9e11938dd0b50869939805e15b9537d6bf00eb59ccd28aec970fb8e450e2c82a6e151b9441967ba36d36144006593f4ff8fc0f56f290dd52e4095f3f4c4c4a912e7787ef7a2f46d56cdaf6cfbf2435f883abd2cc663caf867dd4d80a0c2447d9ad4e5036fa6db34f2494c59977918ef2c5814e7c9ee9bb06cb87c6d372e92f59633f9fa40e26bc46e503b4ff98edef2b7c34a7b9d1eca93f58cf9c178b9795dd4a8349ca5ad0419f506676b22f8561"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x200a}}, {0x48, &(0x7f0000001280)=@string={0x48, 0x3, "040bf149d6b60847c0e874e26afdeb8a90bb45dda65a28cf8d049445199de54d839a25c0427db3b6c8026727eec14ec5d20aac6e8d2f93186ae7f1cdffce7392b6833d30e52f"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14c, &(0x7f0000000d40)={[{0x97, 0x4e00, "4e7eba53455c127a786e453236dd77296b7eca5cd00a62325a56719961b1fef39dc45d674abcda26fe2d20ba45b8860631dbbc21a07358e5b612bc1e47fe7c3df5e7b5c0ad3e5e3e0ea6fc78a1fef014c9c9cdb34d20474d827d200e0978532a414c237c007b38e3f600c5a91be34660be35b06485856555ce28f4bd4982e9d4506a5cdaa99ae9e12f1b63ef8116ef3afa2445efb72dff"}, {0xaa, 0x4e00, "e87582a2ca3f2794628b1422d337c804be3375ddfbf9fa6d9d08e35ddd030f7efbd838aef75204a3bffaabf827a604c0a9a171f41a950c1526a96449a8a13adf2be759183ec56b2eb8cb759c9bf1a1b04cf5893f32b12588aa4218e436a03a001f827a718e7a2775b0b586256e89aabc5a01582aa6dd0668e5a143551cd7012104ed30683088ab7c68164cc91016934f3865111bcd8b4263d54a59b00e503ee645961fec1ba080b5941b"}]}) 04:04:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4c00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1200, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:51 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x80, 0x0, 0x0, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4, 0xd8d, 0x7, 0x7c0, r2, 0x80, '\x00', 0x0, r3, 0x2, 0x5, 0x2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000140)={0x11, 0x5, r4, 0x1, 0x80, 0x6, @local}, 0x14) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x3, 0x2}) 04:04:51 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0xc8, 0x8, 0x2, 0x4, 0x1000}}}, 0xe) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0xc8, 0x8, 0x2, 0x4, 0x1000}}}, 0xe) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 3583.311266][T24442] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3583.348997][T24444] sctp: [Deprecated]: syz-executor.3 (pid 24444) Use of int in maxseg socket option. [ 3583.348997][T24444] Use struct sctp_assoc_value instead [ 3583.380004][T24449] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4e00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2500, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3583.816360][T24463] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3583.836813][T24466] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3583.850619][T24464] sctp: [Deprecated]: syz-executor.3 (pid 24464) Use of int in maxseg socket option. [ 3583.850619][T24464] Use struct sctp_assoc_value instead 04:04:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4f2b, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:52 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @fwd={0xd}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x10]}}, &(0x7f0000000140)=""/36, 0x4c, 0x24, 0x1, 0x6}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1810000020000000000000000004821cb6dc0960c9c15850682395000018000000448b000000000000000000806b482000ffffffff850000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x4a, '\x00', 0x0, 0x21, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x44f, 0x8}, 0x10, 0x0, r7, 0x6, &(0x7f00000003c0)=[r3, r2, 0x1, r4, r3, r8, r9, 0x1, r10, r11], &(0x7f0000000440)=[{0x0, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x2, 0x1, 0x9}, {0x5, 0x5, 0x7, 0xc}, {0x2, 0x2, 0xe, 0x5}, {0x0, 0x3, 0xe, 0xa}], 0x10, 0x6}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3584.157940][T24469] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3584.242727][T24473] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:54 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) r0 = syz_usb_connect(0x4, 0xae7, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x1f, 0x49, 0xfa, 0x10, 0x45e, 0x479, 0xdde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad5, 0x4, 0x29, 0x7f, 0x10, 0x9, [{{0x9, 0x4, 0xef, 0x84, 0xb, 0xd3, 0x4d, 0x54, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7f}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x6, 0xb8, "c5b765"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x4, 0x5], 0xff}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x1f, 0x8, "db5a"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x4, 0x3a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x98a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x3, 0x7, 0x26, [@generic={0x84, 0x4, "97dfc6b2ce5fe65d547c182056f27ebd21d8d2481de2b377de4a995473842ae3a837be824e4ff1708eeee7e3cef00a7ef0aa70fb423b837eba976f5b74eaf422faca90b2ad47b70e5531e0525d33a5be82411e0b410a2b91bc324780f454af046d1f7497ac63f7cdf98d50dc5112eb3dcb396f1bd81ddad988d9927fd1283b9bc3b1"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x3, 0x3f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xba, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x40, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x8, 0x49f}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x6}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xb3fc}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x1, 0x5d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x6, 0x4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0xec, 0x9a, 0x7f, [@generic={0x16, 0x22, "1f5b1142721e7cfc17fb7ad5f20b9d8ab93e2937"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x6, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x83}]}}, {{0x9, 0x5, 0x0, 0x1a, 0x20, 0x80, 0x80, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}]}}]}}, {{0x9, 0x4, 0x44, 0x10, 0x9, 0x2, 0x2, 0xff, 0x2b, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '|'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd8, 0x800, 0x20}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@mdlm_detail={0x4d, 0x24, 0x13, 0x5, "635f7a6213e565c717a314a6e27387fa6c7e705bf4487e71d27643e816dc9cd537487fc2d90914e401cecd03cab5bba2d8928556882de6a1fdcd655a00a1de8a7476c35ba122d7adac"}, @obex={0x5, 0x24, 0x15, 0x8001}]}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x50, 0x2, [@generic={0x46, 0x8, "695ec3f915cf06ef7776ca6c44f4af6c39bd3d8e1f3161decb3d4bff0fcd24a0e0e9638072757156c5ecb710ba459e7e6f91fed493e8f675773d1fa2a309bb9c7e797269"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x74, 0x1, [@generic={0x7c, 0x0, "f4d569c706a14dbfd00cf84b891cfbdcb9e8458e05f43af5b6eb530e3070f79a032bfdcf125f54a172928f215563ac819884faa3d4e861942ecb0daf41c04ba946bbb5889837327a5197f362c5891b5ab54b7f8b0778d3bfda2d62cfcac2dce38199aa479d54bc3c0f5ce5721b79fad848280137972afa3cac71"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xe38}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf1, 0x6, 0x55, [@generic={0x69, 0x31, "be57642aaff885ee0acf7da406aad714cda8ca26659d957346619cafe52e324feb41d6d31672791f86b2f4ad475725cd86c625db168d4a858145c1c6687f40e012d4fb69c1fd9dfef16cf3c7c29c39e4f431913559b577104e956f50c9c24aebc805ece5deffe5"}, @generic={0x9, 0x9, "41683a0709a8fc"}]}}, {{0x9, 0x5, 0xf, 0x17, 0x400, 0x8, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0x6, 0x4, [@generic={0xe4, 0xa, "ae30282e6b18c5845f3f5f03362a416313330f0677c3e48c48a6b7248fc7adc6a8c839ff616a64c0d3266b1a276e505b4fc42d11406815a2ecda2c0430dbe172552fc050c51895cf5eb7482adc5f303040f8932bb6e923a21aae1b508dcb6a27254e7d62e7f9b2497c278382a99e6f5eb80161b231a29f43e313b4d33366d450bc941d8b1fe7c02c44745e2d80f3bbf47220d1386beea33ab4c3240484b58a99b0cee422f1773d85bbd416af7ba2a3b688f48a5e18cf63b03280162267c73a75c58f6eefb486acea58808f5bae1eb7fb16719d9747082a8cf819bc79760de2505fae"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x20, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xff, 0xf7, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x62}]}}]}}, {{0x9, 0x4, 0xa9, 0x4, 0x5, 0x8a, 0x76, 0x8f, 0x3, [@generic={0x66, 0x22, "4228a6f3ecd1c29701be113dfa468804aeb709aea7d67b0897a83fdb5d080b89456f480e09795168a6ac35ed6b794cbd6ed30102188bd0a6a0796de91f67285e3875695f8fdab14f0937cf5b76376363d18912802495144c799410aa4fb72698fcc49441"}], [{{0x9, 0x5, 0xb, 0x14, 0x8, 0x97, 0x6, 0x3f, [@generic={0x44, 0x8, "6fca201e77a11a77222707b3bb97606d92ee963b37a9da018fcbae315721ac34810b995be1917a72d2f821a67b76b3ecd397bc8e34c55572e2a59ea0ed3bf7d80206"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xef, 0xf7, 0x9, [@generic={0x36, 0xb, "b702e7e6789c7f67e4f2bbfdb70527003e924ed75e781fce704dab11618944c867d977f9a7f2696f8b2f19c1fde958f2f803086f"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x7f, 0x7f, 0x8, [@generic={0xa6, 0x4, "677dba315c1ed9d91e5d151b053903a73fb2bcd84d110c01e8c93740a7a8f53a0d326ec7d26502a07819facd9426356cdf82fc2d3cf2fc3987a9d2c32528b806466fa764e07a246a9cb809af5c43e1d0991945d10016b165cb8bfb109f1205b9a3ffe44fc61f3a9ee6ddce978d019bf509004976884495b8ed83a040e5ed54360542a7a5d290261799e0081c4140df15cc0643ec29c7c3a665d1d8713c3f0ae3c9a6f628"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0xb2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x6, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0x29, 0x5, 0x8, 0xc8, 0xb2, 0x8e, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x7a, 0x1f}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x1, 0x9e, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1f}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x1f, 0xe9, 'R'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x0, 0x0, "cb602a3643ca1ba1"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}, @generic={0xd7, 0x30, "4a6a0a5d0d0c0c3da9a3e264374142b4baf07c82e503aed6c92369974655260476091759c99d0b9f0500077baf764d11308bdb56d926b14430c056d8b63b871ee8d60e3a010052cd03ec1ec0a0eacef589cff95628f22c500499ca5d63aaaaa62eab76798c4bc7bd31a3a5e5500c54473ca04fe36d0e6709ca5200bb1a628b2a1695a28abdca74edcde10963fa1db4b2251eb41aef1936ea50b5ce93a777371a9aae549e956ae7108102959931d0e5e2894755332919a7d9ebfa678850b6a03509f6374842f903c1e2e619377cf085d354c0a7a437"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3db3afaf2e0d373, 0x7, 0x1d, 0x1, [@generic={0x3b, 0x22, "7e7dc495470939d5de7c658b1e4171f36fa62f7c539c47bcd76ca553170c56b332e7781c25c5e2f49fded0b9eb45567b9cb48fafe0362f21b7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x5, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x8000}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xd4, 0x0, 0x6, [@generic={0xf9, 0x31, "23dbef59fafb0f9dfa0254f465b1daf002d59ea5819fdce4d9b558a7588fe6ade2659724f886dbd871cf246d58aa4abfa79b876267c35ca919f55dce30f644472370f5aa809151456308a35f95be4e0a1d5134cd4b9c931059c928e56836df385526284a1e9b55dbc9c82aa2cdcf895ad67155bc48ca039bb9e8c9878ede0cbcb7a961b6eff792a4b8a70819a74c257d22b59f5e444960da8790e33f4527c747752e613d687ca8529bdb260a9545c202e2c59ba9b526ce5572dc55d10bccee8112907e9585886e75bebbcdf6d36b8ddb293d664add1d103c5082fdf9e9d4241361c04c6516ec2395f9dd26a6094f57014a9727663b6564"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x80, 0x3, [@generic={0x83, 0x23, "fa6f57e2652304d47bc36efb1e163b8efd90843f5c72e135105d6a1a0adffb7743c84afc649bdd55c825058fdb517634cfaa5dd689ae6627f618b8bc1d013dc919500070286239a01b3c405fc70f21282f896fceda0d7bbbcadd7ef38030c4bdd6d3165575855b05f10a786a3ac6187f189663d14b9fbc2136a03263f38c5399b0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x1f, 0x5, [@generic={0x23, 0x23, "8bf61244fcae440d4466be9e977604c465690fdc675806316cf26536bfbd4ce233"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x6, [@generic={0x20, 0x11, "2adb7e1f6b1e05150c218ba3268864f3afe029d4f42798d52646787dabff"}, @generic={0x9e, 0x1, "f637f4331d6677a6e8986aafdd215fea908e56db47bdda7381758f73576f9f85e038b76dbbacf289d9726f0131b87f008aebee7136239fc388639e69fd94be395cfae6177e72f759000e101b05b26139e6a3e793f854f7c87925cd2357523fe6b7dcd9deb233a1474bbacc7e76e7b4f8fb8b0c7b87bbf6f8909aaada726b6d7d00879cad62d84b767faa9cbe60642ff32c0e97e2b73915159be70728"}]}}, {{0x9, 0x5, 0x8e, 0x4, 0x10, 0x7, 0x4, 0xe0, [@generic={0x5e, 0x21, "fd920afbd516fae2fe25873d97d970d8affaa51ed06a3f543aca33c032912c94e99f49449e3c6cfcb4f1a6748bcbdc5999f9f3f1cfd91e901fd245a91177c8757695d4ce4406da27accb7219cdee11430d81f6409ab54705889b50f5"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0x6, 0x93, 0x8, 0x6}, 0x49, &(0x7f0000000100)={0x5, 0xf, 0x49, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x50, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x1, 0x81, 0x1}, @generic={0x15, 0x10, 0x2, "024d37c66c2608f02217a3d20508ff5125a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x35, 0x81, 0xfff8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0xfffa}]}, 0x1, [{0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="0e1c1f31b66da7dc070323759ac5c7"]}]}) syz_usb_connect$cdc_ecm(0x2, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x180, 0x8, [{{0x9, 0x4, 0x0, 0xb2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "903e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0xfffc, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0xdd, 0x5, 0xecf, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1f, 0x1d}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x24, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x5, 0xe, 0x0, 0x20, 0x70}, 0x19c, &(0x7f0000000f00)={0x5, 0xf, 0x19c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8a, 0x1f, 0x2, 0x19}, @ptm_cap={0x3}, @generic={0xfa, 0x10, 0x1, "822a792c9d112424bd4a2d363920c4eefc40f00be952f057978125c991a107e952683cbcfa4efd1faaeefbdec1efe02d2584ea0033acd8fd37680524a892470dbe0de97d60fa9fd5db0a86641b7c9e5bac4ed6d8fd51193fbfa569e71181cc64ad28a3588195141cf7a5a7e8637d536eb807632f11fa0ff4b3a3cfa0b9f553c9b0e2daff886771d06f3ba92e7a8f4f7cad03934405bdcff237e3e359d8b1521d7834fc24eb9db8c4ce054b7659acbfe80f2a9c5d834de05fe31d14afcd024bb0fb7747a80462f8bc7a4a4091ea09e593cba38ddb21ba4622032523f22356ebd1c84470039dc482f3a9241adc05de12318a8fe7c2beb999"}, @generic={0x8f, 0x10, 0xb, "e219e1e4866c8c678e59f5cb4bad384f26fe51526eeae6930ef80eb48911e3baaecf2c5b54fa6a68e09292a56ab849ce066b8de857b5af1897febe79843e851be7c70362eea13522cda456f2446513c4bb89876186c8cb6e32077080b027bb4217df912e38a73d45c85e8038b9c8584ce829b9b8e18741a25d436f9ef7cd724db54b0fca35bc4085592813e1"}]}, 0x5, [{0xf8, &(0x7f00000010c0)=@string={0xf8, 0x3, "58560da8ea0d6a5c05e26eeb350ef606cd5cd7b54d45eedc328c63801eedfd1ceafb1da2ab0bc280065ed0726352a40a5d1d980975334dfd5e147e3eecd25b55e5a703f65f366e9e11938dd0b50869939805e15b9537d6bf00eb59ccd28aec970fb8e450e2c82a6e151b9441967ba36d36144006593f4ff8fc0f56f290dd52e4095f3f4c4c4a912e7787ef7a2f46d56cdaf6cfbf2435f883abd2cc663caf867dd4d80a0c2447d9ad4e5036fa6db34f2494c59977918ef2c5814e7c9ee9bb06cb87c6d372e92f59633f9fa40e26bc46e503b4ff98edef2b7c34a7b9d1eca93f58cf9c178b9795dd4a8349ca5ad0419f506676b22f8561"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x200a}}, {0x48, &(0x7f0000001280)=@string={0x48, 0x3, "040bf149d6b60847c0e874e26afdeb8a90bb45dda65a28cf8d049445199de54d839a25c0427db3b6c8026727eec14ec5d20aac6e8d2f93186ae7f1cdffce7392b6833d30e52f"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14c, &(0x7f0000000d40)={[{0x97, 0x4e00, "4e7eba53455c127a786e453236dd77296b7eca5cd00a62325a56719961b1fef39dc45d674abcda26fe2d20ba45b8860631dbbc21a07358e5b612bc1e47fe7c3df5e7b5c0ad3e5e3e0ea6fc78a1fef014c9c9cdb34d20474d827d200e0978532a414c237c007b38e3f600c5a91be34660be35b06485856555ce28f4bd4982e9d4506a5cdaa99ae9e12f1b63ef8116ef3afa2445efb72dff"}, {0xaa, 0x4e00, "e87582a2ca3f2794628b1422d337c804be3375ddfbf9fa6d9d08e35ddd030f7efbd838aef75204a3bffaabf827a604c0a9a171f41a950c1526a96449a8a13adf2be759183ec56b2eb8cb759c9bf1a1b04cf5893f32b12588aa4218e436a03a001f827a718e7a2775b0b586256e89aabc5a01582aa6dd0668e5a143551cd7012104ed30683088ab7c68164cc91016934f3865111bcd8b4263d54a59b00e503ee645961fec1ba080b5941b"}]}) 04:04:54 executing program 5: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0xc8, 0x8, 0x2, 0x4, 0x1000}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0xc8, 0x8, 0x2, 0x4, 0x1000}}}, 0xe) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:04:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x5000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4800, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:54 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @fwd={0xd}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x10]}}, &(0x7f0000000140)=""/36, 0x4c, 0x24, 0x1, 0x6}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @fwd={0xd}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x10]}}, &(0x7f0000000140)=""/36, 0x4c, 0x24, 0x1, 0x6}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1810000020000000000000000004821cb6dc0960c9c15850682395000018000000448b000000000000000000806b482000ffffffff850000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x4a, '\x00', 0x0, 0x21, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x44f, 0x8}, 0x10, 0x0, r7, 0x6, &(0x7f00000003c0)=[r3, r2, 0x1, r4, r3, r8, r9, 0x1, r10, r11], &(0x7f0000000440)=[{0x0, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x2, 0x1, 0x9}, {0x5, 0x5, 0x7, 0xc}, {0x2, 0x2, 0xe, 0x5}, {0x0, 0x3, 0xe, 0xa}], 0x10, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1810000020000000000000000004821cb6dc0960c9c15850682395000018000000448b000000000000000000806b482000ffffffff850000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x4a, '\x00', 0x0, 0x21, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x44f, 0x8}, 0x10, 0x0, r7, 0x6, &(0x7f00000003c0)=[r3, r2, 0x1, r4, r3, r8, r9, 0x1, r10, r11], &(0x7f0000000440)=[{0x0, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x2, 0x1, 0x9}, {0x5, 0x5, 0x7, 0xc}, {0x2, 0x2, 0xe, 0x5}, {0x0, 0x3, 0xe, 0xa}], 0x10, 0x6}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3586.515000][T24482] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3586.532434][T24485] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3586.575372][T24481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3586.585350][T24481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:04:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4c00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3586.679997][T24481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3586.689689][T24481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:04:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3586.856819][T24497] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x5000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3587.147890][T24499] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:04:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x5173, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6573, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:57 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100007f5dee167d18fa58b7367e878a7bb2571a9f6120410e5150e8d5000000010902f98a5c84814eff7d80aed7c6"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x43dfdea1e7ef9d5b, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "9ef522510d"}, {0x5, 0x24, 0x0, 0xf666}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0xfbff}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x8, 0xb6}, @dmm={0x7, 0x24, 0x14, 0x40, 0xff01}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x2, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf8, 0x8f, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0xff, 0x7, 0x20, 0x8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x20, 0x0, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0dc134b682808bebca2b9996bf722ea8"}]}, 0x2, [{0x82, &(0x7f0000000140)=@string={0x82, 0x3, "fbda2601c956aa7fdb11adc1dd073809016ac8ac3ea58683d2285896b986061a5c6ceb91af0c73f44c5ddd9260b9941d9719ec5c85afdd48ef5a7faa6ba600d61e047c2333b9958e0632c31b257f930cfc25f44b12184d44bd2fbcc9cd2576c026e86fc679fb41f1d135bcf03ae1e159426076a00960ef3b70979b625dc622b2"}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "f8914752698c71a2f5fc00ae647d626cfa3fe98ba1e42d4be270ce9658b237d08512ca91d04f20a2604abf66066ad40eb4532a7485deaed534c1325bd067c9cc6761b24a45d5da60466e1689a1b6d3e75b1629242762e6e9aca8bbe3ec27659341cc3099658b1891324e8b50d9c5ab9e51f8"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:04:57 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @fwd={0xd}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x10]}}, &(0x7f0000000140)=""/36, 0x4c, 0x24, 0x1, 0x6}, 0x20) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1810000020000000000000000004821cb6dc0960c9c15850682395000018000000448b000000000000000000806b482000ffffffff850000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x4a, '\x00', 0x0, 0x21, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x44f, 0x8}, 0x10, 0x0, r7, 0x6, &(0x7f00000003c0)=[r3, r2, 0x1, r4, r3, r8, r9, 0x1, r10, r11], &(0x7f0000000440)=[{0x0, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x2, 0x1, 0x9}, {0x5, 0x5, 0x7, 0xc}, {0x2, 0x2, 0xe, 0x5}, {0x0, 0x3, 0xe, 0xa}], 0x10, 0x6}, 0x90) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:04:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6000, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x66ef, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:57 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'E'}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="0400000000000000"], 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5fbe0003000000026a7da5b50000a21b2cc21a9e98d611c4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "925f0351d8a9016d54cf71b2ffae724af9d2279a9416c4ca"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "83c00cad591f95f4bbc6eb66f922096c426fe7e5bd2b1efe"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:04:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3589.621733][T24518] net_ratelimit: 3 callbacks suppressed [ 3589.621797][T24518] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3589.653117][T24517] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6800, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6573, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3589.927576][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:04:58 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3590.033419][T24533] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3590.136788][T24536] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:04:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6c00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x66ef, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:04:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3590.512527][T24542] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3590.567014][T24544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3590.767897][T24546] sctp: [Deprecated]: syz-executor.3 (pid 24546) Use of int in maxseg socket option. [ 3590.767897][T24546] Use struct sctp_assoc_value instead 04:05:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100007f5dee167d18fa58b7367e878a7bb2571a9f6120410e5150e8d5000000010902f98a5c84814eff7d80aed7c6"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x43dfdea1e7ef9d5b, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "9ef522510d"}, {0x5, 0x24, 0x0, 0xf666}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0xfbff}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x8, 0xb6}, @dmm={0x7, 0x24, 0x14, 0x40, 0xff01}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x2, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf8, 0x8f, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0xff, 0x7, 0x20, 0x8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x20, 0x0, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0dc134b682808bebca2b9996bf722ea8"}]}, 0x2, [{0x82, &(0x7f0000000140)=@string={0x82, 0x3, "fbda2601c956aa7fdb11adc1dd073809016ac8ac3ea58683d2285896b986061a5c6ceb91af0c73f44c5ddd9260b9941d9719ec5c85afdd48ef5a7faa6ba600d61e047c2333b9958e0632c31b257f930cfc25f44b12184d44bd2fbcc9cd2576c026e86fc679fb41f1d135bcf03ae1e159426076a00960ef3b70979b625dc622b2"}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "f8914752698c71a2f5fc00ae647d626cfa3fe98ba1e42d4be270ce9658b237d08512ca91d04f20a2604abf66066ad40eb4532a7485deaed534c1325bd067c9cc6761b24a45d5da60466e1689a1b6d3e75b1629242762e6e9aca8bbe3ec27659341cc3099658b1891324e8b50d9c5ab9e51f8"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7365, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6800, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:00 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async, rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'E'}]}, 0x24}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="0400000000000000"], 0x24}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5fbe0003000000026a7da5b50000a21b2cc21a9e98d611c4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "925f0351d8a9016d54cf71b2ffae724af9d2279a9416c4ca"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "83c00cad591f95f4bbc6eb66f922096c426fe7e5bd2b1efe"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r12, 0xae80, 0x0) (rerun: 32) 04:05:00 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r3 = signalfd(r2, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) [ 3592.817791][T24548] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3592.943490][T24555] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3592.978070][T24559] sctp: [Deprecated]: syz-executor.3 (pid 24559) Use of int in maxseg socket option. [ 3592.978070][T24559] Use struct sctp_assoc_value instead 04:05:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6c00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3593.180178][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3593.187129][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:05:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7400, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:01 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'E'}]}, 0x24}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="0400000000000000"], 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5fbe0003000000026a7da5b50000a21b2cc21a9e98d611c4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "925f0351d8a9016d54cf71b2ffae724af9d2279a9416c4ca"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "83c00cad591f95f4bbc6eb66f922096c426fe7e5bd2b1efe"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:05:01 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) signalfd(r2, &(0x7f0000000000), 0x8) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) [ 3593.466750][T24573] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3593.469441][T24570] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3593.549512][T24572] sctp: [Deprecated]: syz-executor.3 (pid 24572) Use of int in maxseg socket option. [ 3593.549512][T24572] Use struct sctp_assoc_value instead 04:05:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7a00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100007f5dee167d18fa58b7367e878a7bb2571a9f6120410e5150e8d5000000010902f98a5c84814eff7d80aed7c6"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100007f5dee167d18fa58b7367e878a7bb2571a9f6120410e5150e8d5000000010902f98a5c84814eff7d80aed7c6"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x43dfdea1e7ef9d5b, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "9ef522510d"}, {0x5, 0x24, 0x0, 0xf666}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0xfbff}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x8, 0xb6}, @dmm={0x7, 0x24, 0x14, 0x40, 0xff01}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x2, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf8, 0x8f, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0xff, 0x7, 0x20, 0x8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x20, 0x0, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0dc134b682808bebca2b9996bf722ea8"}]}, 0x2, [{0x82, &(0x7f0000000140)=@string={0x82, 0x3, "fbda2601c956aa7fdb11adc1dd073809016ac8ac3ea58683d2285896b986061a5c6ceb91af0c73f44c5ddd9260b9941d9719ec5c85afdd48ef5a7faa6ba600d61e047c2333b9958e0632c31b257f930cfc25f44b12184d44bd2fbcc9cd2576c026e86fc679fb41f1d135bcf03ae1e159426076a00960ef3b70979b625dc622b2"}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "f8914752698c71a2f5fc00ae647d626cfa3fe98ba1e42d4be270ce9658b237d08512ca91d04f20a2604abf66066ad40eb4532a7485deaed534c1325bd067c9cc6761b24a45d5da60466e1689a1b6d3e75b1629242762e6e9aca8bbe3ec27659341cc3099658b1891324e8b50d9c5ab9e51f8"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7351, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x80fe, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:04 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x2000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="d9f8f08202000f2057672666660f3a40df292e0f38c96303f3ac66b80500000066b9003800000f01d90f20d86635200000000f22d8baf80c66b820303a8766efbafc0cec66b9800000c00f326635002000000f30", 0x54}], 0x1, 0x14, &(0x7f0000000140)=[@cstype3={0x5, 0xb}, @cr4={0x1, 0x42000}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x551, 0x4, 0x10, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x4, 0x3, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) connect(r4, &(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) syz_emit_vhci(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3596.006060][T24593] net_ratelimit: 1 callbacks suppressed [ 3596.006191][T24593] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3596.011284][T24595] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3596.040772][T24596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3596.050593][T24596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x990d, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7365, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3596.243771][T24598] sctp: [Deprecated]: syz-executor.3 (pid 24598) Use of int in maxseg socket option. [ 3596.243771][T24598] Use struct sctp_assoc_value instead 04:05:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:04 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x83, 0x6f05, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7, 0x0, 0x7fff, 0x7fff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d4060000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a000000300001e98d7d4e00040000001400020008000100"/50, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x6d4}, 0x1, 0x0, 0x0, 0x20008081}, 0x8001) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timerfd_gettime(r8, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000540)={&(0x7f00000004c0)=[r7, r10, r11, r12, r13, r7, 0x0], &(0x7f0000000500), 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000008c0)={&(0x7f0000000780)=[r10], &(0x7f00000007c0)=[0x3], 0x1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) [ 3596.397331][T24602] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3596.502971][T24604] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe02e, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3596.649289][T24609] sctp: [Deprecated]: syz-executor.3 (pid 24609) Use of int in maxseg socket option. [ 3596.649289][T24609] Use struct sctp_assoc_value instead 04:05:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7400, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:04 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async, rerun: 64) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x83, 0x6f05, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7, 0x0, 0x7fff, 0x7fff}}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d4060000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a000000300001e98d7d4e00040000001400020008000100"/50, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x6d4}, 0x1, 0x0, 0x0, 0x20008081}, 0x8001) r6 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) (async, rerun: 64) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) timerfd_gettime(r8, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000540)={&(0x7f00000004c0)=[r7, r10, r11, r12, r13, r7, 0x0], &(0x7f0000000500), 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000008c0)={&(0x7f0000000780)=[r10], &(0x7f00000007c0)=[0x3], 0x1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r14, 0xae80, 0x0) (rerun: 32) [ 3596.770785][T24611] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3596.967953][T24614] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:07 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x8, 0x20, 0x40, 0x80}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "34d0f8df7a575fba3151ccbb4ea2b93a01a743ce584333cf2c76bc95fad26e79a69ed91d5c12e7206dfa58bba02402386d48847540c9b9c79cbf8b4f260ba3f7099014c0f4978a6b0332bc11e1802be9a442c14410913b007d1ae3605597d2ddb16caf04a6c49d7cec8f77e3fb27ca77cc92693111f40569b9a39b9b794c374d532cc41befc3f6c209387169532f44b610e46e192e95df2c8f5d535116118c4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "23775bc0e64a0d01cda41b784d52f652b7a7371c67ba21a21e1af1523bff57ee79dcbaec8214b17c5914cba87b3636a953bb06ede922e0ad960231281c6b923dd86282cc7cf8464070fb8426ee8f05b3e3534d6106686ec2ed12612bc0c10f770be707b49b41b695503472e9a60d9bdd3e5d449fbae96525a53b52821d5bce5be9e1dc423d10ff5110eee124b2b13e4a785d006ec29f73b35983f41de33c229d3a245acdd553d9"}}, {0x1f, &(0x7f0000000340)=@string={0x1f, 0x3, "3cb64907977127ef417345f8942b6ca76424a57cca4a02408ec09d9315"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'V'}}]}) 04:05:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xe803, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:07 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x2000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="d9f8f08202000f2057672666660f3a40df292e0f38c96303f3ac66b80500000066b9003800000f01d90f20d86635200000000f22d8baf80c66b820303a8766efbafc0cec66b9800000c00f326635002000000f30", 0x54}], 0x1, 0x14, &(0x7f0000000140)=[@cstype3={0x5, 0xb}, @cr4={0x1, 0x42000}], 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x551, 0x4, 0x10, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x4, 0x3, 0x7}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) (async, rerun: 64) connect(r4, &(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x2}}, 0x80) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x7a00, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:07 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x83, 0x6f05, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7, 0x0, 0x7fff, 0x7fff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d4060000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a000000300001e98d7d4e00040000001400020008000100"/50, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="140002006970766c616e31000000000000000000140002006261746164765f736c6176655f3000001400020064766d727030000000000000000000000c0002800400038004000100a700030073e201a8a2ac33322f739f5c4e0b5dc0bb53d903f36289ba3f23bcb92f69d4204974dd94792d29ff035a1b99c159539d3cd640618208b92c86000100006e9e1c5b621c88e990dcc373b6cbaccc03a6238f54ca3dae3aa88def3b3db735007f583792a59dddb2bdda98a20d9f854f412ff2daa0dc07086012155317dec603a6bff274246ed975ca64f32444acf3bbe620eb0608cd3c7cb74e96b6f3b890ad14865f079100d740030005aece6db6dd5d7d920b6831b0e9140f2b13f64c0979a989d13e1da2260eaba1ca2a5a64c08a76dd2b7be6464af33da27b7959bf102716c01e5d1b90ba528dcd040bd5a3a421b377f1f232f72e6445416d90ac62a35473bef88c392c27153ee889249a64023c58b35f7feea519d28ecda244d483cf0247a80d5b004a5995fa94e404e2d40e0e0d5f33bea837641e141f84981c2258b5ae9b6ce1c74203949ca96d4434b91b264e1db8f24224f8ee73fee80c64ab0f9b962300ffff4c5f55120d1d19bfff4a1d2054b0b6778138004c000300beb31697f3a16d2d268fd5d484c71552bbb10d833e57a026911e42a9a6d15e875bb63fce41ad3baeafebb18913f4e199dd97487baac0e06bcc82417b724fd6e5134f7f783fd4ef1353000300a05c013805302b16338fad49e9b45a470ed7a76abd2db7dbe1a9654c967b7eaddfff8268958c682bc9ea788a0ca043ac7cbf24da18f0ac71cc89793be6bceaa3edd65c1b00"], 0x6d4}, 0x1, 0x0, 0x0, 0x20008081}, 0x8001) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timerfd_gettime(r8, 0x0) (async) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01064c2, &(0x7f0000000440)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000540)={&(0x7f00000004c0)=[r7, r10, r11, r12, r13, r7, 0x0], &(0x7f0000000500), 0x7, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000008c0)={&(0x7f0000000780)=[r10], &(0x7f00000007c0)=[0x3], 0x1, 0x1}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) [ 3599.170781][T24628] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3599.175896][T24624] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3599.224744][T24630] sctp: [Deprecated]: syz-executor.3 (pid 24630) Use of int in maxseg socket option. [ 3599.224744][T24630] Use struct sctp_assoc_value instead 04:05:07 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xef66, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x80fe, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3599.604522][T24645] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:07 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x2000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="d9f8f08202000f2057672666660f3a40df292e0f38c96303f3ac66b80500000066b9003800000f01d90f20d86635200000000f22d8baf80c66b820303a8766efbafc0cec66b9800000c00f326635002000000f30", 0x54}], 0x1, 0x14, &(0x7f0000000140)=[@cstype3={0x5, 0xb}, @cr4={0x1, 0x42000}], 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x551, 0x4, 0x10, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x4, 0x3, 0x7}, 0x48) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) (async, rerun: 64) connect(r4, &(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) (async) syz_emit_vhci(0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3599.646611][T24647] sctp: [Deprecated]: syz-executor.3 (pid 24647) Use of int in maxseg socket option. [ 3599.646611][T24647] Use struct sctp_assoc_value instead [ 3599.663317][T24646] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf401, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x8, 0x20, 0x40, 0x80}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "34d0f8df7a575fba3151ccbb4ea2b93a01a743ce584333cf2c76bc95fad26e79a69ed91d5c12e7206dfa58bba02402386d48847540c9b9c79cbf8b4f260ba3f7099014c0f4978a6b0332bc11e1802be9a442c14410913b007d1ae3605597d2ddb16caf04a6c49d7cec8f77e3fb27ca77cc92693111f40569b9a39b9b794c374d532cc41befc3f6c209387169532f44b610e46e192e95df2c8f5d535116118c4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "23775bc0e64a0d01cda41b784d52f652b7a7371c67ba21a21e1af1523bff57ee79dcbaec8214b17c5914cba87b3636a953bb06ede922e0ad960231281c6b923dd86282cc7cf8464070fb8426ee8f05b3e3534d6106686ec2ed12612bc0c10f770be707b49b41b695503472e9a60d9bdd3e5d449fbae96525a53b52821d5bce5be9e1dc423d10ff5110eee124b2b13e4a785d006ec29f73b35983f41de33c229d3a245acdd553d9"}}, {0x1f, &(0x7f0000000340)=@string={0x1f, 0x3, "3cb64907977127ef417345f8942b6ca76424a57cca4a02408ec09d9315"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'V'}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x8, 0x20, 0x40, 0x80}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "34d0f8df7a575fba3151ccbb4ea2b93a01a743ce584333cf2c76bc95fad26e79a69ed91d5c12e7206dfa58bba02402386d48847540c9b9c79cbf8b4f260ba3f7099014c0f4978a6b0332bc11e1802be9a442c14410913b007d1ae3605597d2ddb16caf04a6c49d7cec8f77e3fb27ca77cc92693111f40569b9a39b9b794c374d532cc41befc3f6c209387169532f44b610e46e192e95df2c8f5d535116118c4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "23775bc0e64a0d01cda41b784d52f652b7a7371c67ba21a21e1af1523bff57ee79dcbaec8214b17c5914cba87b3636a953bb06ede922e0ad960231281c6b923dd86282cc7cf8464070fb8426ee8f05b3e3534d6106686ec2ed12612bc0c10f770be707b49b41b695503472e9a60d9bdd3e5d449fbae96525a53b52821d5bce5be9e1dc423d10ff5110eee124b2b13e4a785d006ec29f73b35983f41de33c229d3a245acdd553d9"}}, {0x1f, &(0x7f0000000340)=@string={0x1f, 0x3, "3cb64907977127ef417345f8942b6ca76424a57cca4a02408ec09d9315"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'V'}}]}) (async) 04:05:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x990d, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfcff, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:10 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, &(0x7f0000000080)=""/27, 0x1b}}], 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000100)="0fed5f2d48b80b000000000000000f23c00f21f835010009000f23f866ba420066b89d6c66ef0f0f11940f20e035000100000f22e0660f38822166b873008ee045dc6208c4c21547fac4210972f400", 0x4f}], 0x1, 0x8, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:05:10 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3602.277943][T24658] net_ratelimit: 1 callbacks suppressed [ 3602.278022][T24658] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3602.298844][T24662] sctp: [Deprecated]: syz-executor.3 (pid 24662) Use of int in maxseg socket option. [ 3602.298844][T24662] Use struct sctp_assoc_value instead [ 3602.303511][T24664] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3602.413754][ T5020] Bluetooth: hci0: hardware error 0x01 04:05:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfe80, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xef66, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:10 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 3602.760102][T24677] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3602.822857][T24681] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfffc, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3602.953820][T24683] sctp: [Deprecated]: syz-executor.3 (pid 24683) Use of int in maxseg socket option. [ 3602.953820][T24683] Use struct sctp_assoc_value instead 04:05:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfe80, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3603.269674][T24687] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3603.270272][T24692] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3604.432096][ T5020] Bluetooth: hci0: Opcode 0x0c03 failed: -110 04:05:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x8, 0x20, 0x40, 0x80}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "34d0f8df7a575fba3151ccbb4ea2b93a01a743ce584333cf2c76bc95fad26e79a69ed91d5c12e7206dfa58bba02402386d48847540c9b9c79cbf8b4f260ba3f7099014c0f4978a6b0332bc11e1802be9a442c14410913b007d1ae3605597d2ddb16caf04a6c49d7cec8f77e3fb27ca77cc92693111f40569b9a39b9b794c374d532cc41befc3f6c209387169532f44b610e46e192e95df2c8f5d535116118c4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "23775bc0e64a0d01cda41b784d52f652b7a7371c67ba21a21e1af1523bff57ee79dcbaec8214b17c5914cba87b3636a953bb06ede922e0ad960231281c6b923dd86282cc7cf8464070fb8426ee8f05b3e3534d6106686ec2ed12612bc0c10f770be707b49b41b695503472e9a60d9bdd3e5d449fbae96525a53b52821d5bce5be9e1dc423d10ff5110eee124b2b13e4a785d006ec29f73b35983f41de33c229d3a245acdd553d9"}}, {0x1f, &(0x7f0000000340)=@string={0x1f, 0x3, "3cb64907977127ef417345f8942b6ca76424a57cca4a02408ec09d9315"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'V'}}]}) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x8, 0x20, 0x40, 0x80}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "34d0f8df7a575fba3151ccbb4ea2b93a01a743ce584333cf2c76bc95fad26e79a69ed91d5c12e7206dfa58bba02402386d48847540c9b9c79cbf8b4f260ba3f7099014c0f4978a6b0332bc11e1802be9a442c14410913b007d1ae3605597d2ddb16caf04a6c49d7cec8f77e3fb27ca77cc92693111f40569b9a39b9b794c374d532cc41befc3f6c209387169532f44b610e46e192e95df2c8f5d535116118c4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "23775bc0e64a0d01cda41b784d52f652b7a7371c67ba21a21e1af1523bff57ee79dcbaec8214b17c5914cba87b3636a953bb06ede922e0ad960231281c6b923dd86282cc7cf8464070fb8426ee8f05b3e3534d6106686ec2ed12612bc0c10f770be707b49b41b695503472e9a60d9bdd3e5d449fbae96525a53b52821d5bce5be9e1dc423d10ff5110eee124b2b13e4a785d006ec29f73b35983f41de33c229d3a245acdd553d9"}}, {0x1f, &(0x7f0000000340)=@string={0x1f, 0x3, "3cb64907977127ef417345f8942b6ca76424a57cca4a02408ec09d9315"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'V'}}]}) 04:05:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:13 executing program 0: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, &(0x7f0000000080)=""/27, 0x1b}}], 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000100)="0fed5f2d48b80b000000000000000f23c00f21f835010009000f23f866ba420066b89d6c66ef0f0f11940f20e035000100000f22e0660f38822166b873008ee045dc6208c4c21547fac4210972f400", 0x4f}], 0x1, 0x8, &(0x7f0000000340), 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000100)="0fed5f2d48b80b000000000000000f23c00f21f835010009000f23f866ba420066b89d6c66ef0f0f11940f20e035000100000f22e0660f38822166b873008ee045dc6208c4c21547fac4210972f400", 0x4f}], 0x1, 0x8, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:05:13 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800000064453bcfa9944d9a8f04aa247150c67f738acc03cfa27354e401f41ddfaed57774e1b08fe60ffef4a773514e3ca5c323", @ANYRES32=r0, @ANYBLOB="02000000000000402e2f66696c653000"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="0f2146baa000ed0f00d2b847000f00d00f8000800fc7bd92000fc71e21bd0fdf6700f2a50f08", 0x26}], 0x1, 0x20, &(0x7f0000000380), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r1, r4, &(0x7f0000000380), 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/arp\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r6 = dup3(r2, r3, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x33, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) readv(r7, &(0x7f0000000780)=[{&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x6) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 3605.456117][T24700] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3605.467981][T24705] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3605.486827][T24703] sctp: [Deprecated]: syz-executor.3 (pid 24703) Use of int in maxseg socket option. [ 3605.486827][T24703] Use struct sctp_assoc_value instead 04:05:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3605.841751][T24713] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x3, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3605.924465][T24718] sctp: [Deprecated]: syz-executor.3 (pid 24718) Use of int in maxseg socket option. [ 3605.924465][T24718] Use struct sctp_assoc_value instead [ 3605.946658][T24717] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x3, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:14 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, &(0x7f0000000080)=""/27, 0x1b}}], 0x1, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, &(0x7f0000000080)=""/27, 0x1b}}], 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000100)="0fed5f2d48b80b000000000000000f23c00f21f835010009000f23f866ba420066b89d6c66ef0f0f11940f20e035000100000f22e0660f38822166b873008ee045dc6208c4c21547fac4210972f400", 0x4f}], 0x1, 0x8, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:05:16 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:16 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800000064453bcfa9944d9a8f04aa247150c67f738acc03cfa27354e401f41ddfaed57774e1b08fe60ffef4a773514e3ca5c323", @ANYRES32=r0, @ANYBLOB="02000000000000402e2f66696c653000"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="0f2146baa000ed0f00d2b847000f00d00f8000800fc7bd92000fc71e21bd0fdf6700f2a50f08", 0x26}], 0x1, 0x20, &(0x7f0000000380), 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r1, r4, &(0x7f0000000380), 0x1) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/arp\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r6 = dup3(r2, r3, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x33, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) readv(r7, &(0x7f0000000780)=[{&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x6) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:05:16 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x20, 0x7fff, 0x8, 0x0, 0x0, 0x9, 0x7f, 0x8, 0xa2, 0x1, 0x6, 0x5a, 0x2}, {0x800, 0x8, 0x1, 0x40, 0x1, 0x2, 0x99, 0x7f, 0x2, 0xa1, 0xf7, 0x0, 0x7}, {0x400, 0x6, 0x0, 0x80, 0x1, 0x0, 0x20, 0xff, 0x8, 0x2, 0x8, 0x5b, 0x4}], 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x3, 0xf000, 0x1000, &(0x7f0000005000/0x1000)=nil}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3608.505416][T24731] sctp: [Deprecated]: syz-executor.3 (pid 24731) Use of int in maxseg socket option. [ 3608.505416][T24731] Use struct sctp_assoc_value instead 04:05:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3608.636892][T24736] net_ratelimit: 2 callbacks suppressed [ 3608.636962][T24736] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3608.657336][T24740] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x5, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3608.844510][T24748] sctp: [Deprecated]: syz-executor.3 (pid 24748) Use of int in maxseg socket option. [ 3608.844510][T24748] Use struct sctp_assoc_value instead 04:05:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x5, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:17 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x20, 0x7fff, 0x8, 0x0, 0x0, 0x9, 0x7f, 0x8, 0xa2, 0x1, 0x6, 0x5a, 0x2}, {0x800, 0x8, 0x1, 0x40, 0x1, 0x2, 0x99, 0x7f, 0x2, 0xa1, 0xf7, 0x0, 0x7}, {0x400, 0x6, 0x0, 0x80, 0x1, 0x0, 0x20, 0xff, 0x8, 0x2, 0x8, 0x5b, 0x4}], 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x3, 0xf000, 0x1000, &(0x7f0000005000/0x1000)=nil}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3609.065855][T24750] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3609.170521][T24752] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3609.222157][T24754] sctp: [Deprecated]: syz-executor.3 (pid 24754) Use of int in maxseg socket option. [ 3609.222157][T24754] Use struct sctp_assoc_value instead [ 3609.478538][T24762] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:19 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:19 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800000064453bcfa9944d9a8f04aa247150c67f738acc03cfa27354e401f41ddfaed57774e1b08fe60ffef4a773514e3ca5c323", @ANYRES32=r0, @ANYBLOB="02000000000000402e2f66696c653000"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="0f2146baa000ed0f00d2b847000f00d00f8000800fc7bd92000fc71e21bd0fdf6700f2a50f08", 0x26}], 0x1, 0x20, &(0x7f0000000380), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r1, r4, &(0x7f0000000380), 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/arp\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async, rerun: 64) r6 = dup3(r2, r3, 0x80000) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x33, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) readv(r7, &(0x7f0000000780)=[{&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x6) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 32) 04:05:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:19 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x20, 0x7fff, 0x8, 0x0, 0x0, 0x9, 0x7f, 0x8, 0xa2, 0x1, 0x6, 0x5a, 0x2}, {0x800, 0x8, 0x1, 0x40, 0x1, 0x2, 0x99, 0x7f, 0x2, 0xa1, 0xf7, 0x0, 0x7}, {0x400, 0x6, 0x0, 0x80, 0x1, 0x0, 0x20, 0xff, 0x8, 0x2, 0x8, 0x5b, 0x4}], 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x3, 0xf000, 0x1000, &(0x7f0000005000/0x1000)=nil}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3611.824122][T24764] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3611.852744][T24769] sctp: [Deprecated]: syz-executor.3 (pid 24769) Use of int in maxseg socket option. [ 3611.852744][T24769] Use struct sctp_assoc_value instead [ 3611.875865][T24770] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x8, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3612.224821][T24784] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3612.312080][T24786] sctp: [Deprecated]: syz-executor.3 (pid 24786) Use of int in maxseg socket option. [ 3612.312080][T24786] Use struct sctp_assoc_value instead 04:05:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3612.370610][T24788] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x8, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3612.647157][T24790] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3612.819912][T24794] sctp: [Deprecated]: syz-executor.3 (pid 24794) Use of int in maxseg socket option. [ 3612.819912][T24794] Use struct sctp_assoc_value instead 04:05:23 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xa, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) syz_emit_vhci(0x0, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000380)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x40, 0xc8, 0x78}}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x40, 0x0, 0x1, 0x0, r5, 0x2, '\x00', r4, r3, 0x1, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:23 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3615.006158][T24803] sctp: [Deprecated]: syz-executor.3 (pid 24803) Use of int in maxseg socket option. [ 3615.006158][T24803] Use struct sctp_assoc_value instead [ 3615.006377][T24802] net_ratelimit: 1 callbacks suppressed [ 3615.006429][T24802] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3615.080510][T24800] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xb, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) syz_emit_vhci(0x0, 0x18) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000380)=""/122, 0x4000}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x40, 0xc8, 0x78}}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (rerun: 64) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x40, 0x0, 0x1, 0x0, r5, 0x2, '\x00', r4, r3, 0x1, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xa, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3615.508134][T24817] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xc, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3615.672569][T24822] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3615.836904][T24827] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xb, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) syz_emit_vhci(0x0, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000380)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x40, 0xc8, 0x78}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x40, 0xc8, 0x78}}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x40, 0x0, 0x1, 0x0, r5, 0x2, '\x00', r4, r3, 0x1, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x40, 0x0, 0x1, 0x0, r5, 0x2, '\x00', r4, r3, 0x1, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:26 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 04:05:26 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_connect(0x3, 0xae6, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xe1, 0x3d, 0x7e, 0x40, 0x45e, 0x454, 0x950e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad4, 0x4, 0x9, 0x5, 0x90, 0x3f, [{{0x9, 0x4, 0xbb, 0x6, 0x7, 0x15, 0x8b, 0xa2, 0x1f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x28, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xac, 0x4, 0x1, 0x9, "", 'l'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1b, 0x4, 0x8, 0x1f, "", "97"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x20, 0x3, 0x6, 0x1, "eb9ff4a9a557b6"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x9d}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x2, 0x1], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x1, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x6, 0x3, 0x6, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6df5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xfd, 0x20, 0x40, [@generic={0x2d, 0xb, "7b9202e06aeda2ddb7b66bf26888042a8a5e471cf6b440707f1c0b5d44e315121218d0ab720c9ed8243699"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x0, 0xfd, [@generic={0x72, 0x7, "5a108fe9d2d98f15c1c706a536f093e680a884b83b9cede51f9324c56bc1629ad9e64b560e5b4fa35a7c96a235ca1c54e0f68be67eaaa9d14c32ba3c13e66abb2239065652a69e8cfc6c67abd74a63d9ebbde9b4428ea1fad690e8d6d5b72650d5560d07968a985c00718b36fd65b5f1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x71, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x46, 0x2, "880e09b9ff18aa65d4a41aebfe9a338153648ae239892139a7cb3c17fc6b2a09a78ba4f5ffec019c6c7c09f29fd86667e666d4022e9c86c39729017793f38014d9df3f29"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x81, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x2}, @generic={0x7a, 0x10, "43fb50e20010870c206af7d0589c0535597fac4cdc62a3401a0006ed0ab90381044668599f957140db5f94c9df74e29e49f2d3063da6d2922c4c57b616701ced63356db4c38d11001e6cdb2cf152b3c540c31be662f798d54b6c7174026e6c4711e5c70e0550bdd5af142d6943fc0c9411ee2ad6d37319d7"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x6, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x8000}]}}]}}, {{0x9, 0x4, 0x3e, 0x0, 0xa, 0xff, 0xd7, 0x78, 0xa7, [], [{{0x9, 0x5, 0x7, 0xc, 0x20, 0x20, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7fff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x80, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x200}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x56, 0x3f, [@generic={0x44, 0x1, "a38dbc8f100558969c2d52a43acb7ed40afbfd0c956457895828e95ad136e7f9a582cc60a970ae459b630b7bddfbdbdb865da5fa2998dece44131443dfbefca96afe"}, @generic={0xe7, 0x6, "3c34524c32c89b7942ff67c1616f47f0a8eaeabc63ce970be93dcc05a3faf0d18693279f5d64b472505a9c8f9188fff8e1a696041aa31d361e2f2a69460d6effc44044cfd681ce61054a6d3d607d967280e315c3d38e7e888eef11b6a398ad8480c5dd8841fd522a74f208f7a2e864715e25231282785d9cf781d16b21ef419fbd5986dbcc01917ec89afccd2dfd8e2f7e6f4147cb64693f95e92f0651925ed6a78cda0c07037f05be69d27034620dcdda3281eeef811309039f60e6df2091b65cb75ba68f418f66a9a3f2079d2de1089fc7a7a938c5e6efc30b11e5222d396d55529ecd43"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x20, 0x0, 0x80, [@generic={0xb3, 0xe, "82f63fa01752430b21a6c93cf27f0a7369aa123d392171c0d65c03ca6b9ea8922a8ae3a32d68a5c816d5420cba1c84432b3982f4a3dfb75f0f5835bd8d55f7c4475fa5b7ddf0b905c5e1943fa57234b9150e85f0123d3dce3a82bd6892f59e2a6b2ca1d4b9bb5ad6df4b7f2a7dc0f8cd9a527814e12bee4f796cb968f3d6de19802097a3a196639a5f720cc7cc56825e3bb584714c98561b76cebbb07aa2eb75f2cc95bee7591391798b9ad12185d1de0e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x76e}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}, @generic={0xf8, 0x23, "0d5f957c6427f7108cfe861dc859c6b048e4dae2d017151da4d5d157d794cc91946d0e70096b6558296374db4cee2e8d965f812943804e737a3d3653fa52873e4ec6d362dc61ca0ec64d5ba6e098c5629cda0a2a2281a13e2393a666d4a40006b770dbcea00b66466cfa349899981a3db235fc5819be8a519cd9c70c5181cc93331eabe646926db08ae9935c1deb8880e4d8e7706ce469c07757340ab7fff5ae3667870f6ce59afe5caac231468422764d5b9b709b11e4a3008dd91928b9437ff8962dd95290642c1f34acca5a3349b5a5746a764a28700c257981e15aad0afb24d280755bee7770885fae3a3cf5c770e78941f87f07"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x81, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xfd2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x7f, 0x81, [@generic={0x77, 0x21, "56eaa26d173e8a21654a2e37c2c8a07631c6fdff1cc969c4cc0e7b9e48a5c4dea6685766eea0605cb1b0c44b0616f6467a5c63ce7d4dd2e6c20bbb94dac11c29ccfd1d94120b8ae3db53e158470bcd10a99a7cd4f2cf043f96638e6d706ad790d1bc332103029ab02ec25c2fcee2558af8931d2c47"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x20, 0x7, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x64, 0x8}}]}}, {{0x9, 0x4, 0x98, 0x0, 0x6, 0x4d, 0x1a, 0x2f, 0xd5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "517314"}, {0x5, 0x24, 0x0, 0x6376}, {0xd, 0x24, 0xf, 0x1, 0x78f6, 0xff, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x10}, [@country_functional={0x12, 0x24, 0x7, 0x1f, 0xffff, [0x3, 0x5, 0x20f, 0x1, 0x5, 0x180]}, @mdlm_detail={0xa, 0x24, 0x13, 0x4, "ea91a6839e0e"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "7a1746d044"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x40, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x40, 0x1f, 0xfe}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0xcd, 0x7b, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7d, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xb7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x7}]}}, {{0x9, 0x5, 0xcc176eeb72ffcca3, 0x0, 0x400, 0x2, 0xee, 0x81, [@generic={0xc5, 0x30, "9a93fb82e02ea878786a2f9d73c15312b0e3e29cb85d7d258336087f4491facf96f016cec285f8c4d26a10f8d8474893c35cd1d32cad884d72199388d5617d5d884b5aae178837a4077c1bdf69ef4db1a2f031dc6783ccc13ddd15d6ceff060344b4fb363957d7a980905a1aed2655fe152e6c4172dd97d4b22d5ac87da9a0da046df3ec7a6d10bc21eff848c7a23d185377e0878bf4fc1dd7d557177225fa35dc8189299a0f1d0c12114f30fca58b96e24f62cb1a8ae3329a67223d729c8900593351"}, @uac_iso={0x7, 0x25, 0x1, 0xadab6cda323757a3, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x5d, 0x9, 0x7, 0xff, 0x2, 0x3d, 0xe9, [@generic={0xc0, 0x4, "798260d1430950d6d2334d790bef0157a7c0f82481b2d61718384eb26517c44828b45f65d67655a7a3d4e76e024618620910b23b818726d79b5df9e288a26afad5d28eb93d08e932903875fe7756c5bc10009b972bfa9ed29e9b92dcdb4305d5794202b14cced995428b1225ca02a2b6db8518666d24914b99e5b1b324ae9cda1cc04a1eedd2ac13fc7f3ab4a0c6733c2b96bba0742e1df5273ef0fdc2311c552f78d76a865092eda7b66b7983f8b8e53154a7ff15b6c1d9c507d2818ffe"}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x39, 0x0, "fb3fd658ba"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xaf2, 0x80, "aad39ea88c"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x15, "2a38ad88612a"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x200, 0xe3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0x80, 0x80, [@generic={0xd6, 0x1, "e8763d983b737bf176bff5933f0c686d90c46c41ce437b0de578f9daba7fd5742d359d0f314a31d3e29c04dc18bc689d2acb42bfac6498de4d246e02e808f279c7fb6b9d860fa336e9b84e39e8e3d9de4755cef3b12800340111bd964cc658b20ba16f554e513c964482d7a7f6b652335e659eaddf5af31179e91dd892fa5504c4fb762ca161a69f33e38b1840b97884e6ee4512e84f879acbe76f2f7cc86a08dbf7d5ffdde32f922cab5b6350b58a65eb357fa74745c09ab15bd93f0520c99a0ff7cc734a8ecca94f97a63679994f3b6370b619"}, @generic={0xe6, 0x22, "18801036c9710a587630638a3cd13d0313c31fb8a5a431a43a2c8dc9eb06928d49073050ecc3a12ce45e199bb105686428895116b43728a3b0ffbba4a6d524cb0994b40b4178336e87e6a6841e98b47b61e05770d2271726b19c4407a5715542e502eff9d59fc9b9157221a8dfe9bb9afd87da901459d746e18be51c78ec699a08c2791b6a597b98f654dfdcba19782bbbde11f197bc559304eb2c58578fa0c479a2ca4fb399193e7353971fa834899206aff07d43b5f8385dbeb7d5170b4d1269d3a61f3b5168c90aa035b8ee73e784e53da12f0fae7965fd9612db9bd49b0e71cf18b9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x7, 0x41, 0x0, [@generic={0x39, 0x9, "8769ab892e9db717a97b8180d451d1af3405f7747a27bdb0f7242b9c3dcf6952c38eb8a685811c7494b45c02d62afd5e268c73ce4af501"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0xf8, 0x8, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x476}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xd83}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x1, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x40, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x2, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xae, 0x2}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x20, 0x8f, 0x20, 0x8}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xc, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x9, 0xff}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x140, 0x81, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x80, 0x2}}]}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x1, 0x3f, 0x10, 0xff}, 0x1c7, &(0x7f0000000e40)={0x5, 0xf, 0x1c7, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x1f, 0x6, 0x1f, 0x6}, @generic={0xd9, 0x10, 0x1, "e52153b9bfad2c08164fa1022e39b3b4a515015824ecc4722e71757377f18fca29b57e53c081a11107745e285681b8938705ac7045f2b3bf087a67f40e8cf3f351611604e4ff731b8b280505d5891730e68b1b2df5437e270e055432583bb377d6fd0b2a0a2a789bf2a1d32d6e8630fc3892900362b0918888fadb0ba1a7be27783df1e2397daccf963c4444758156649c55bb34acf03d72f287df52b7b8d774852dad68004a6ea308719a4a74163b0277cad546f696ea551372daeb4e4b83fdd2b75a0ac20931a50489bcb3adc87f47ce813f08bb72"}, @generic={0xc2, 0x10, 0x4, "134b02139040bbd80ebbf11a11dcd6251745f43fe3aef6e4bf8d8dddcc72bb384c15993cc222488c93fb494875daaab7dd37605e7726e8748df33ab91f7f7aa27410c40631e66fd3ff22b241f239fab52fbf8e7c84c8c74bac71ed12e8df97f12b259258b0bac3f0fda60dfafbabd19df09472b84f14fce61f4e4266998dc1650390f37046b62edab94917005fd12d6d086620ffc02ea48fbe1daf25f6fab566ac42b432c285a6742792abb9fb1494df033b98fa50360569ffa24ef446739a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xe, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x6, 0xd, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xef, 0x2, 0x1f}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0x3b, &(0x7f00000001c0)=@string={0x3b, 0x3, "22b3071c8e665ee4d947185a530bf2c2f21c01d88df7655232f8ad3b475640f8fdcec12e683816a47ee650e6a14b54ed487c5e6cf08db1d0ae"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "8855e30a9718289a9a71a3489d04b3238a8a330757a6d5b5c5710fc229ee359ee468c7c7741aa9a5f4c96aa2f34de7bb8d74d7c3bd37311c9f5281af45a1c5910d4d4d7b6ef9344861a307785a342f0c12ad0aa187d2549cafff353679848aca53f91bfdb1b96ae3a52f8a592ff5"}}, {0x8a, &(0x7f0000001040)=@string={0x8a, 0x3, "b957ebffaf94431a8750d401c48905dfd2af6bc458d18c7d7c0c894d039eac0b82f66d321e0bfce17af2ff71557b994215cf24c1048a6b54424ee047265657ccc54e79b953af7b4d8212d004add94e92a359b35d34402eaec882ac6b16db1e436d3705ef45c168a6e278be5fddc7a56fbb9c49a70f366e0da4049f5a5e2cc2c8a2e10d317cc95760"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0x70, &(0x7f0000001100)=@string={0x70, 0x3, "6130715fc7933a87cb9cc6fb111b56acb2655cbcb92fdb984dfb986434ebe48e07342cec59844f1d29efbd63e2693b85deafd7db393da115ff29adc76e8cf37cc5aea1681acd5bb78ed87aede43fa7938c8cf81c66f77501412a08bd7fa7911b450decc4fc1b55c8c7f063e1ba81"}}, {0x45, &(0x7f0000001180)=@string={0x45, 0x3, "5b5d6413790d23dffcd298c1bd0bfe70c2e8aa456e8326bb83ba467ff220f61a5633f1a39e3406ffb340ea8531052d6e42024b79944e659bef34cb9927aec398a01d22"}}]}) syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x7, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "181f08ec"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x34}, [@mdlm={0x15, 0x24, 0x12, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xff, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xd9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x21, 0xd0, 0x1}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x200, 0x2, 0x5, 0xf9, 0xff, 0x3}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x80}]}, 0x1, [{0x79, &(0x7f00000013c0)=@string={0x79, 0x3, "dacdb42ca3787bd0035fa25fb7ece684040a53f322fa4d187749e260248d512beeb097177f93a45b92fa0fe0fff77d6cf377c572cb89b63ada8f0db78b384cf75a362a05ce38a1d62fe6704eec71ee54a150a24a0bcacd5d41c96cb640fe8747905bbfbf16840c5e56de23296c8da726b1324f78976c79"}}]}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001480)={{0x12, 0x1, 0x1efbd690a0ec2ff2, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0x60, 0x41, [{{0x9, 0x4, 0x0, 0x6b, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x1, 0x25, 0x1, {0x22, 0x199}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0xcd, 0x9}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x6, 0x1, 0x40, 0xcf, 0x7}, 0x1c, &(0x7f0000001500)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x700000, 0xf00, 0x6, [0xff000f]}]}, 0x1, [{0x16, &(0x7f0000001540)=@string={0x16, 0x3, "c340b080ed884963bfcc139d1642e431fd48f76d"}}]}) syz_usb_control_io(r1, &(0x7f0000001740)={0x2c, &(0x7f00000015c0)={0x40, 0x5, 0x37, {0x37, 0x22, "3e30179128c7d60d859eb6c6035d266a974a39445910fd8bbd7968d8677f331ac10de9894741fee7ded6d9a7d34db7d780a3fd1fcc"}}, &(0x7f0000001600)={0x0, 0x3, 0x51, @string={0x51, 0x3, "485fc258b1333b1a7fc0e689556f3f88e247b31eec1cebc1215cdcdf406db79e64de40df2d88726fae153f67f6e3c7053ad7a7d33c97180c21caf67fcae796f211d875d4a077eaf23dcd0203156eb3"}}, &(0x7f0000001680)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000016c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x20, 0x0, "a23908fb", "9ec38c42"}}, &(0x7f0000001700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x1, 0x0, 0xfc, 0x7, 0x5}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001780)={0x40, 0xe, 0x72, "394b693c0e2056580c3db44697e0f65ce7cd02acdb39e17a3f60b7f8a93cf412fd4075d9b03de00a4ce5d882d39447180053c057d8346835e5c9c99e05f4f5eda238f1b1c8ba3994450f276e3f55292fa9d7eec6c37581cdff0e549f55c5010045357a74690ad01b948c463023f087f41db5"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000018c0)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001980)={0x40, 0xb, 0x2, "0550"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "9918"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7, 0x87}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3f}}]}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x110, 0x0, 0x0, 0x1, 0x40, 0xcc}, 0x103, &(0x7f0000001d00)={0x5, 0xf, 0x103, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3f, 0x40, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "c1dddac8bc2d5c62f358c53aa9b4afcd"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7c, 0xf0f, 0x101, [0xff0f, 0xcf, 0xff3f0f]}, @generic={0xc1, 0x10, 0x2, "bb2a2cd30e70c4f647795945d2a143731db24bcc53762e65e973532f5ffbc6086e07a8de1edc488fb21b72c7e08e741e82e7e4ed122ea948bb1cd0acaa8a051423bbbfe730948a8eafa1da9751270b86b0b9b0bac69e7a98ff37e3d59fb1f1a274ae9895ced37899c08a6d8ba37f700bd712165f58dfb29d66f529d40bdb1d3e5a6b86d5b36395cbd4a9611f7df66f371efc1c359da66e047507225b33e4d5d19190584216a2dcc90162d7d75c6295563e40f5fe9c01c66e0322701fdb54"}]}, 0x1, [{0xa8, &(0x7f0000001e40)=@string={0xa8, 0x3, "2e2c88558546ea555d3103b2be6fa6a5d2a8a1694fe8e6faa8436a7903a887c7831356797bf04d51f6957d106eda01433f1eb6472ab62856525ee1189b42f1254131e6e448bdfb429c2c0c4b24f100bed2e53d167fcc8b5793c57194d5b80055b77f53539e0cc52351445fbcb240a0bb2ee7693714ba56f3184a6a21a34f18a7380fe36510031675e32b9030f12c708668daedd69e21da6b06407c113044042c27f9a84f28a3"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) [ 3618.184670][T24839] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3618.205231][T24837] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3618.369397][T24849] sctp: [Deprecated]: syz-executor.3 (pid 24849) Use of int in maxseg socket option. [ 3618.369397][T24849] Use struct sctp_assoc_value instead 04:05:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xc, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3618.684268][T24853] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3618.690486][T24854] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3618.745575][T24856] sctp: [Deprecated]: syz-executor.3 (pid 24856) Use of int in maxseg socket option. [ 3618.745575][T24856] Use struct sctp_assoc_value instead 04:05:27 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="adea258e0f65d2a21a8f7f390e90024d669bcb48e5c8c385787fee67ad57ddad82695a2a748364ac128e7952af121f9a90d8cc01497933e615c592dbc4318c03ca51a46177b31eb72c9abb78c9ccf2dd93b80fc3ab3275990abc23b75468ff3e790baa189cf8fcdd447d4f9dabc3b2536f3351ea9b64bbb99e220a27eb05846596cddee2211e8bf65afa93d0b9dde062b50478dea67ad270b717efc811be836f4b8c8f353e6e295928781582f77ce91f070f90dcb95197053ade301621e3b35e5dda6e5e98b917557e", &(0x7f0000000440)=""/245, &(0x7f0000000040)="48c504dc49ac5cb03d796913f9995f3467d63d6197eb20778fb2f80720d1e5d1a544e625782815f4811b1b2b8c4635926ad7b661bd97523f1643db5e2bdc", &(0x7f0000000540)="57c9a883a009ee6e8ecf99b1d73a2d2208d148fd6a03569604ed415b802160f6bd1a6b45f0ee919d68e0daff62e9", 0x400, r2}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8000, 0x200100) r7 = signalfd(r4, &(0x7f00000006c0)={[0x1]}, 0x8) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, &(0x7f0000000700)="f30f09360f1e32b8ad008ec0baf80c66b8e220e28266efbafc0cb80100ef0f07ba610066b80000000066ef0f01d70f082e0f019e0e00360f01c2", 0x3a}], 0x1, 0x5a, &(0x7f0000000780), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:27 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 04:05:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3619.069263][T24862] sctp: [Deprecated]: syz-executor.3 (pid 24862) Use of int in maxseg socket option. [ 3619.069263][T24862] Use struct sctp_assoc_value instead [ 3619.161146][T24869] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x11, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:29 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_connect(0x3, 0xae6, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xe1, 0x3d, 0x7e, 0x40, 0x45e, 0x454, 0x950e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad4, 0x4, 0x9, 0x5, 0x90, 0x3f, [{{0x9, 0x4, 0xbb, 0x6, 0x7, 0x15, 0x8b, 0xa2, 0x1f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x28, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xac, 0x4, 0x1, 0x9, "", 'l'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1b, 0x4, 0x8, 0x1f, "", "97"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x20, 0x3, 0x6, 0x1, "eb9ff4a9a557b6"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x9d}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x2, 0x1], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x1, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x6, 0x3, 0x6, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6df5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xfd, 0x20, 0x40, [@generic={0x2d, 0xb, "7b9202e06aeda2ddb7b66bf26888042a8a5e471cf6b440707f1c0b5d44e315121218d0ab720c9ed8243699"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x0, 0xfd, [@generic={0x72, 0x7, "5a108fe9d2d98f15c1c706a536f093e680a884b83b9cede51f9324c56bc1629ad9e64b560e5b4fa35a7c96a235ca1c54e0f68be67eaaa9d14c32ba3c13e66abb2239065652a69e8cfc6c67abd74a63d9ebbde9b4428ea1fad690e8d6d5b72650d5560d07968a985c00718b36fd65b5f1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x71, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x46, 0x2, "880e09b9ff18aa65d4a41aebfe9a338153648ae239892139a7cb3c17fc6b2a09a78ba4f5ffec019c6c7c09f29fd86667e666d4022e9c86c39729017793f38014d9df3f29"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x81, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x2}, @generic={0x7a, 0x10, "43fb50e20010870c206af7d0589c0535597fac4cdc62a3401a0006ed0ab90381044668599f957140db5f94c9df74e29e49f2d3063da6d2922c4c57b616701ced63356db4c38d11001e6cdb2cf152b3c540c31be662f798d54b6c7174026e6c4711e5c70e0550bdd5af142d6943fc0c9411ee2ad6d37319d7"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x6, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x8000}]}}]}}, {{0x9, 0x4, 0x3e, 0x0, 0xa, 0xff, 0xd7, 0x78, 0xa7, [], [{{0x9, 0x5, 0x7, 0xc, 0x20, 0x20, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7fff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x80, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x200}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x56, 0x3f, [@generic={0x44, 0x1, "a38dbc8f100558969c2d52a43acb7ed40afbfd0c956457895828e95ad136e7f9a582cc60a970ae459b630b7bddfbdbdb865da5fa2998dece44131443dfbefca96afe"}, @generic={0xe7, 0x6, "3c34524c32c89b7942ff67c1616f47f0a8eaeabc63ce970be93dcc05a3faf0d18693279f5d64b472505a9c8f9188fff8e1a696041aa31d361e2f2a69460d6effc44044cfd681ce61054a6d3d607d967280e315c3d38e7e888eef11b6a398ad8480c5dd8841fd522a74f208f7a2e864715e25231282785d9cf781d16b21ef419fbd5986dbcc01917ec89afccd2dfd8e2f7e6f4147cb64693f95e92f0651925ed6a78cda0c07037f05be69d27034620dcdda3281eeef811309039f60e6df2091b65cb75ba68f418f66a9a3f2079d2de1089fc7a7a938c5e6efc30b11e5222d396d55529ecd43"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x20, 0x0, 0x80, [@generic={0xb3, 0xe, "82f63fa01752430b21a6c93cf27f0a7369aa123d392171c0d65c03ca6b9ea8922a8ae3a32d68a5c816d5420cba1c84432b3982f4a3dfb75f0f5835bd8d55f7c4475fa5b7ddf0b905c5e1943fa57234b9150e85f0123d3dce3a82bd6892f59e2a6b2ca1d4b9bb5ad6df4b7f2a7dc0f8cd9a527814e12bee4f796cb968f3d6de19802097a3a196639a5f720cc7cc56825e3bb584714c98561b76cebbb07aa2eb75f2cc95bee7591391798b9ad12185d1de0e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x76e}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}, @generic={0xf8, 0x23, "0d5f957c6427f7108cfe861dc859c6b048e4dae2d017151da4d5d157d794cc91946d0e70096b6558296374db4cee2e8d965f812943804e737a3d3653fa52873e4ec6d362dc61ca0ec64d5ba6e098c5629cda0a2a2281a13e2393a666d4a40006b770dbcea00b66466cfa349899981a3db235fc5819be8a519cd9c70c5181cc93331eabe646926db08ae9935c1deb8880e4d8e7706ce469c07757340ab7fff5ae3667870f6ce59afe5caac231468422764d5b9b709b11e4a3008dd91928b9437ff8962dd95290642c1f34acca5a3349b5a5746a764a28700c257981e15aad0afb24d280755bee7770885fae3a3cf5c770e78941f87f07"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x81, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xfd2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x7f, 0x81, [@generic={0x77, 0x21, "56eaa26d173e8a21654a2e37c2c8a07631c6fdff1cc969c4cc0e7b9e48a5c4dea6685766eea0605cb1b0c44b0616f6467a5c63ce7d4dd2e6c20bbb94dac11c29ccfd1d94120b8ae3db53e158470bcd10a99a7cd4f2cf043f96638e6d706ad790d1bc332103029ab02ec25c2fcee2558af8931d2c47"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x20, 0x7, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x64, 0x8}}]}}, {{0x9, 0x4, 0x98, 0x0, 0x6, 0x4d, 0x1a, 0x2f, 0xd5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "517314"}, {0x5, 0x24, 0x0, 0x6376}, {0xd, 0x24, 0xf, 0x1, 0x78f6, 0xff, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x10}, [@country_functional={0x12, 0x24, 0x7, 0x1f, 0xffff, [0x3, 0x5, 0x20f, 0x1, 0x5, 0x180]}, @mdlm_detail={0xa, 0x24, 0x13, 0x4, "ea91a6839e0e"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "7a1746d044"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x40, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x40, 0x1f, 0xfe}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0xcd, 0x7b, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7d, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xb7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x7}]}}, {{0x9, 0x5, 0xcc176eeb72ffcca3, 0x0, 0x400, 0x2, 0xee, 0x81, [@generic={0xc5, 0x30, "9a93fb82e02ea878786a2f9d73c15312b0e3e29cb85d7d258336087f4491facf96f016cec285f8c4d26a10f8d8474893c35cd1d32cad884d72199388d5617d5d884b5aae178837a4077c1bdf69ef4db1a2f031dc6783ccc13ddd15d6ceff060344b4fb363957d7a980905a1aed2655fe152e6c4172dd97d4b22d5ac87da9a0da046df3ec7a6d10bc21eff848c7a23d185377e0878bf4fc1dd7d557177225fa35dc8189299a0f1d0c12114f30fca58b96e24f62cb1a8ae3329a67223d729c8900593351"}, @uac_iso={0x7, 0x25, 0x1, 0xadab6cda323757a3, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x5d, 0x9, 0x7, 0xff, 0x2, 0x3d, 0xe9, [@generic={0xc0, 0x4, "798260d1430950d6d2334d790bef0157a7c0f82481b2d61718384eb26517c44828b45f65d67655a7a3d4e76e024618620910b23b818726d79b5df9e288a26afad5d28eb93d08e932903875fe7756c5bc10009b972bfa9ed29e9b92dcdb4305d5794202b14cced995428b1225ca02a2b6db8518666d24914b99e5b1b324ae9cda1cc04a1eedd2ac13fc7f3ab4a0c6733c2b96bba0742e1df5273ef0fdc2311c552f78d76a865092eda7b66b7983f8b8e53154a7ff15b6c1d9c507d2818ffe"}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x39, 0x0, "fb3fd658ba"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xaf2, 0x80, "aad39ea88c"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x15, "2a38ad88612a"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x200, 0xe3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0x80, 0x80, [@generic={0xd6, 0x1, "e8763d983b737bf176bff5933f0c686d90c46c41ce437b0de578f9daba7fd5742d359d0f314a31d3e29c04dc18bc689d2acb42bfac6498de4d246e02e808f279c7fb6b9d860fa336e9b84e39e8e3d9de4755cef3b12800340111bd964cc658b20ba16f554e513c964482d7a7f6b652335e659eaddf5af31179e91dd892fa5504c4fb762ca161a69f33e38b1840b97884e6ee4512e84f879acbe76f2f7cc86a08dbf7d5ffdde32f922cab5b6350b58a65eb357fa74745c09ab15bd93f0520c99a0ff7cc734a8ecca94f97a63679994f3b6370b619"}, @generic={0xe6, 0x22, "18801036c9710a587630638a3cd13d0313c31fb8a5a431a43a2c8dc9eb06928d49073050ecc3a12ce45e199bb105686428895116b43728a3b0ffbba4a6d524cb0994b40b4178336e87e6a6841e98b47b61e05770d2271726b19c4407a5715542e502eff9d59fc9b9157221a8dfe9bb9afd87da901459d746e18be51c78ec699a08c2791b6a597b98f654dfdcba19782bbbde11f197bc559304eb2c58578fa0c479a2ca4fb399193e7353971fa834899206aff07d43b5f8385dbeb7d5170b4d1269d3a61f3b5168c90aa035b8ee73e784e53da12f0fae7965fd9612db9bd49b0e71cf18b9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x7, 0x41, 0x0, [@generic={0x39, 0x9, "8769ab892e9db717a97b8180d451d1af3405f7747a27bdb0f7242b9c3dcf6952c38eb8a685811c7494b45c02d62afd5e268c73ce4af501"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0xf8, 0x8, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x476}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xd83}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x1, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x40, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x2, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xae, 0x2}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x20, 0x8f, 0x20, 0x8}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xc, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x9, 0xff}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x140, 0x81, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x80, 0x2}}]}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x1, 0x3f, 0x10, 0xff}, 0x1c7, &(0x7f0000000e40)={0x5, 0xf, 0x1c7, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x1f, 0x6, 0x1f, 0x6}, @generic={0xd9, 0x10, 0x1, "e52153b9bfad2c08164fa1022e39b3b4a515015824ecc4722e71757377f18fca29b57e53c081a11107745e285681b8938705ac7045f2b3bf087a67f40e8cf3f351611604e4ff731b8b280505d5891730e68b1b2df5437e270e055432583bb377d6fd0b2a0a2a789bf2a1d32d6e8630fc3892900362b0918888fadb0ba1a7be27783df1e2397daccf963c4444758156649c55bb34acf03d72f287df52b7b8d774852dad68004a6ea308719a4a74163b0277cad546f696ea551372daeb4e4b83fdd2b75a0ac20931a50489bcb3adc87f47ce813f08bb72"}, @generic={0xc2, 0x10, 0x4, "134b02139040bbd80ebbf11a11dcd6251745f43fe3aef6e4bf8d8dddcc72bb384c15993cc222488c93fb494875daaab7dd37605e7726e8748df33ab91f7f7aa27410c40631e66fd3ff22b241f239fab52fbf8e7c84c8c74bac71ed12e8df97f12b259258b0bac3f0fda60dfafbabd19df09472b84f14fce61f4e4266998dc1650390f37046b62edab94917005fd12d6d086620ffc02ea48fbe1daf25f6fab566ac42b432c285a6742792abb9fb1494df033b98fa50360569ffa24ef446739a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xe, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x6, 0xd, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xef, 0x2, 0x1f}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0x3b, &(0x7f00000001c0)=@string={0x3b, 0x3, "22b3071c8e665ee4d947185a530bf2c2f21c01d88df7655232f8ad3b475640f8fdcec12e683816a47ee650e6a14b54ed487c5e6cf08db1d0ae"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "8855e30a9718289a9a71a3489d04b3238a8a330757a6d5b5c5710fc229ee359ee468c7c7741aa9a5f4c96aa2f34de7bb8d74d7c3bd37311c9f5281af45a1c5910d4d4d7b6ef9344861a307785a342f0c12ad0aa187d2549cafff353679848aca53f91bfdb1b96ae3a52f8a592ff5"}}, {0x8a, &(0x7f0000001040)=@string={0x8a, 0x3, "b957ebffaf94431a8750d401c48905dfd2af6bc458d18c7d7c0c894d039eac0b82f66d321e0bfce17af2ff71557b994215cf24c1048a6b54424ee047265657ccc54e79b953af7b4d8212d004add94e92a359b35d34402eaec882ac6b16db1e436d3705ef45c168a6e278be5fddc7a56fbb9c49a70f366e0da4049f5a5e2cc2c8a2e10d317cc95760"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0x70, &(0x7f0000001100)=@string={0x70, 0x3, "6130715fc7933a87cb9cc6fb111b56acb2655cbcb92fdb984dfb986434ebe48e07342cec59844f1d29efbd63e2693b85deafd7db393da115ff29adc76e8cf37cc5aea1681acd5bb78ed87aede43fa7938c8cf81c66f77501412a08bd7fa7911b450decc4fc1b55c8c7f063e1ba81"}}, {0x45, &(0x7f0000001180)=@string={0x45, 0x3, "5b5d6413790d23dffcd298c1bd0bfe70c2e8aa456e8326bb83ba467ff220f61a5633f1a39e3406ffb340ea8531052d6e42024b79944e659bef34cb9927aec398a01d22"}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x7, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "181f08ec"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x34}, [@mdlm={0x15, 0x24, 0x12, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xff, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xd9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x21, 0xd0, 0x1}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x200, 0x2, 0x5, 0xf9, 0xff, 0x3}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x80}]}, 0x1, [{0x79, &(0x7f00000013c0)=@string={0x79, 0x3, "dacdb42ca3787bd0035fa25fb7ece684040a53f322fa4d187749e260248d512beeb097177f93a45b92fa0fe0fff77d6cf377c572cb89b63ada8f0db78b384cf75a362a05ce38a1d62fe6704eec71ee54a150a24a0bcacd5d41c96cb640fe8747905bbfbf16840c5e56de23296c8da726b1324f78976c79"}}]}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001480)={{0x12, 0x1, 0x1efbd690a0ec2ff2, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0x60, 0x41, [{{0x9, 0x4, 0x0, 0x6b, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x1, 0x25, 0x1, {0x22, 0x199}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0xcd, 0x9}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x6, 0x1, 0x40, 0xcf, 0x7}, 0x1c, &(0x7f0000001500)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x700000, 0xf00, 0x6, [0xff000f]}]}, 0x1, [{0x16, &(0x7f0000001540)=@string={0x16, 0x3, "c340b080ed884963bfcc139d1642e431fd48f76d"}}]}) (rerun: 64) syz_usb_control_io(r1, &(0x7f0000001740)={0x2c, &(0x7f00000015c0)={0x40, 0x5, 0x37, {0x37, 0x22, "3e30179128c7d60d859eb6c6035d266a974a39445910fd8bbd7968d8677f331ac10de9894741fee7ded6d9a7d34db7d780a3fd1fcc"}}, &(0x7f0000001600)={0x0, 0x3, 0x51, @string={0x51, 0x3, "485fc258b1333b1a7fc0e689556f3f88e247b31eec1cebc1215cdcdf406db79e64de40df2d88726fae153f67f6e3c7053ad7a7d33c97180c21caf67fcae796f211d875d4a077eaf23dcd0203156eb3"}}, &(0x7f0000001680)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000016c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x20, 0x0, "a23908fb", "9ec38c42"}}, &(0x7f0000001700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x1, 0x0, 0xfc, 0x7, 0x5}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001780)={0x40, 0xe, 0x72, "394b693c0e2056580c3db44697e0f65ce7cd02acdb39e17a3f60b7f8a93cf412fd4075d9b03de00a4ce5d882d39447180053c057d8346835e5c9c99e05f4f5eda238f1b1c8ba3994450f276e3f55292fa9d7eec6c37581cdff0e549f55c5010045357a74690ad01b948c463023f087f41db5"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000018c0)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001980)={0x40, 0xb, 0x2, "0550"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "9918"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7, 0x87}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3f}}]}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x110, 0x0, 0x0, 0x1, 0x40, 0xcc}, 0x103, &(0x7f0000001d00)={0x5, 0xf, 0x103, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3f, 0x40, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "c1dddac8bc2d5c62f358c53aa9b4afcd"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7c, 0xf0f, 0x101, [0xff0f, 0xcf, 0xff3f0f]}, @generic={0xc1, 0x10, 0x2, "bb2a2cd30e70c4f647795945d2a143731db24bcc53762e65e973532f5ffbc6086e07a8de1edc488fb21b72c7e08e741e82e7e4ed122ea948bb1cd0acaa8a051423bbbfe730948a8eafa1da9751270b86b0b9b0bac69e7a98ff37e3d59fb1f1a274ae9895ced37899c08a6d8ba37f700bd712165f58dfb29d66f529d40bdb1d3e5a6b86d5b36395cbd4a9611f7df66f371efc1c359da66e047507225b33e4d5d19190584216a2dcc90162d7d75c6295563e40f5fe9c01c66e0322701fdb54"}]}, 0x1, [{0xa8, &(0x7f0000001e40)=@string={0xa8, 0x3, "2e2c88558546ea555d3103b2be6fa6a5d2a8a1694fe8e6faa8436a7903a887c7831356797bf04d51f6957d106eda01433f1eb6472ab62856525ee1189b42f1254131e6e448bdfb429c2c0c4b24f100bed2e53d167fcc8b5793c57194d5b80055b77f53539e0cc52351445fbcb240a0bb2ee7693714ba56f3184a6a21a34f18a7380fe36510031675e32b9030f12c708668daedd69e21da6b06407c113044042c27f9a84f28a3"}}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:29 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (rerun: 64) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="adea258e0f65d2a21a8f7f390e90024d669bcb48e5c8c385787fee67ad57ddad82695a2a748364ac128e7952af121f9a90d8cc01497933e615c592dbc4318c03ca51a46177b31eb72c9abb78c9ccf2dd93b80fc3ab3275990abc23b75468ff3e790baa189cf8fcdd447d4f9dabc3b2536f3351ea9b64bbb99e220a27eb05846596cddee2211e8bf65afa93d0b9dde062b50478dea67ad270b717efc811be836f4b8c8f353e6e295928781582f77ce91f070f90dcb95197053ade301621e3b35e5dda6e5e98b917557e", &(0x7f0000000440)=""/245, &(0x7f0000000040)="48c504dc49ac5cb03d796913f9995f3467d63d6197eb20778fb2f80720d1e5d1a544e625782815f4811b1b2b8c4635926ad7b661bd97523f1643db5e2bdc", &(0x7f0000000540)="57c9a883a009ee6e8ecf99b1d73a2d2208d148fd6a03569604ed415b802160f6bd1a6b45f0ee919d68e0daff62e9", 0x400, r2}, 0x38) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8000, 0x200100) r7 = signalfd(r4, &(0x7f00000006c0)={[0x1]}, 0x8) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, &(0x7f0000000700)="f30f09360f1e32b8ad008ec0baf80c66b8e220e28266efbafc0cb80100ef0f07ba610066b80000000066ef0f01d70f082e0f019e0e00360f01c2", 0x3a}], 0x1, 0x5a, &(0x7f0000000780), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x12, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:29 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x0, 0x6f0289ac, 0xc0f, 0x243, r3, 0x20, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x80000001}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000080)="03fe7edd0c040a6357bde9610c7ad6a81e668f0f9f83186e3fb3f1d6c16eef733c3d6adfa685ddd46f301fc848b353e89f0d4156821d7ff080461f5397029229a9d71be7adcf3f79ceb958028c"}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3621.344553][T24885] net_ratelimit: 2 callbacks suppressed [ 3621.344616][T24885] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3621.358345][T24890] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3621.449813][T24898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3621.459920][T24898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:05:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x25, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 04:05:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xf, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:29 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x0, 0x6f0289ac, 0xc0f, 0x243, r3, 0x20, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x80000001}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000080)="03fe7edd0c040a6357bde9610c7ad6a81e668f0f9f83186e3fb3f1d6c16eef733c3d6adfa685ddd46f301fc848b353e89f0d4156821d7ff080461f5397029229a9d71be7adcf3f79ceb958028c"}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:30 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_connect(0x3, 0xae6, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xe1, 0x3d, 0x7e, 0x40, 0x45e, 0x454, 0x950e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad4, 0x4, 0x9, 0x5, 0x90, 0x3f, [{{0x9, 0x4, 0xbb, 0x6, 0x7, 0x15, 0x8b, 0xa2, 0x1f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x28, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xac, 0x4, 0x1, 0x9, "", 'l'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1b, 0x4, 0x8, 0x1f, "", "97"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x20, 0x3, 0x6, 0x1, "eb9ff4a9a557b6"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x9d}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x2, 0x1], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x1, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x6, 0x3, 0x6, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6df5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xfd, 0x20, 0x40, [@generic={0x2d, 0xb, "7b9202e06aeda2ddb7b66bf26888042a8a5e471cf6b440707f1c0b5d44e315121218d0ab720c9ed8243699"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x0, 0xfd, [@generic={0x72, 0x7, "5a108fe9d2d98f15c1c706a536f093e680a884b83b9cede51f9324c56bc1629ad9e64b560e5b4fa35a7c96a235ca1c54e0f68be67eaaa9d14c32ba3c13e66abb2239065652a69e8cfc6c67abd74a63d9ebbde9b4428ea1fad690e8d6d5b72650d5560d07968a985c00718b36fd65b5f1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x71, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x46, 0x2, "880e09b9ff18aa65d4a41aebfe9a338153648ae239892139a7cb3c17fc6b2a09a78ba4f5ffec019c6c7c09f29fd86667e666d4022e9c86c39729017793f38014d9df3f29"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x81, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x2}, @generic={0x7a, 0x10, "43fb50e20010870c206af7d0589c0535597fac4cdc62a3401a0006ed0ab90381044668599f957140db5f94c9df74e29e49f2d3063da6d2922c4c57b616701ced63356db4c38d11001e6cdb2cf152b3c540c31be662f798d54b6c7174026e6c4711e5c70e0550bdd5af142d6943fc0c9411ee2ad6d37319d7"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x6, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x8000}]}}]}}, {{0x9, 0x4, 0x3e, 0x0, 0xa, 0xff, 0xd7, 0x78, 0xa7, [], [{{0x9, 0x5, 0x7, 0xc, 0x20, 0x20, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7fff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x80, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x200}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x56, 0x3f, [@generic={0x44, 0x1, "a38dbc8f100558969c2d52a43acb7ed40afbfd0c956457895828e95ad136e7f9a582cc60a970ae459b630b7bddfbdbdb865da5fa2998dece44131443dfbefca96afe"}, @generic={0xe7, 0x6, "3c34524c32c89b7942ff67c1616f47f0a8eaeabc63ce970be93dcc05a3faf0d18693279f5d64b472505a9c8f9188fff8e1a696041aa31d361e2f2a69460d6effc44044cfd681ce61054a6d3d607d967280e315c3d38e7e888eef11b6a398ad8480c5dd8841fd522a74f208f7a2e864715e25231282785d9cf781d16b21ef419fbd5986dbcc01917ec89afccd2dfd8e2f7e6f4147cb64693f95e92f0651925ed6a78cda0c07037f05be69d27034620dcdda3281eeef811309039f60e6df2091b65cb75ba68f418f66a9a3f2079d2de1089fc7a7a938c5e6efc30b11e5222d396d55529ecd43"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x20, 0x0, 0x80, [@generic={0xb3, 0xe, "82f63fa01752430b21a6c93cf27f0a7369aa123d392171c0d65c03ca6b9ea8922a8ae3a32d68a5c816d5420cba1c84432b3982f4a3dfb75f0f5835bd8d55f7c4475fa5b7ddf0b905c5e1943fa57234b9150e85f0123d3dce3a82bd6892f59e2a6b2ca1d4b9bb5ad6df4b7f2a7dc0f8cd9a527814e12bee4f796cb968f3d6de19802097a3a196639a5f720cc7cc56825e3bb584714c98561b76cebbb07aa2eb75f2cc95bee7591391798b9ad12185d1de0e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x76e}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}, @generic={0xf8, 0x23, "0d5f957c6427f7108cfe861dc859c6b048e4dae2d017151da4d5d157d794cc91946d0e70096b6558296374db4cee2e8d965f812943804e737a3d3653fa52873e4ec6d362dc61ca0ec64d5ba6e098c5629cda0a2a2281a13e2393a666d4a40006b770dbcea00b66466cfa349899981a3db235fc5819be8a519cd9c70c5181cc93331eabe646926db08ae9935c1deb8880e4d8e7706ce469c07757340ab7fff5ae3667870f6ce59afe5caac231468422764d5b9b709b11e4a3008dd91928b9437ff8962dd95290642c1f34acca5a3349b5a5746a764a28700c257981e15aad0afb24d280755bee7770885fae3a3cf5c770e78941f87f07"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x81, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xfd2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x7f, 0x81, [@generic={0x77, 0x21, "56eaa26d173e8a21654a2e37c2c8a07631c6fdff1cc969c4cc0e7b9e48a5c4dea6685766eea0605cb1b0c44b0616f6467a5c63ce7d4dd2e6c20bbb94dac11c29ccfd1d94120b8ae3db53e158470bcd10a99a7cd4f2cf043f96638e6d706ad790d1bc332103029ab02ec25c2fcee2558af8931d2c47"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x20, 0x7, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x64, 0x8}}]}}, {{0x9, 0x4, 0x98, 0x0, 0x6, 0x4d, 0x1a, 0x2f, 0xd5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "517314"}, {0x5, 0x24, 0x0, 0x6376}, {0xd, 0x24, 0xf, 0x1, 0x78f6, 0xff, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x10}, [@country_functional={0x12, 0x24, 0x7, 0x1f, 0xffff, [0x3, 0x5, 0x20f, 0x1, 0x5, 0x180]}, @mdlm_detail={0xa, 0x24, 0x13, 0x4, "ea91a6839e0e"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "7a1746d044"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x40, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x40, 0x1f, 0xfe}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0xcd, 0x7b, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7d, 0x40, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xb7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x7}]}}, {{0x9, 0x5, 0xcc176eeb72ffcca3, 0x0, 0x400, 0x2, 0xee, 0x81, [@generic={0xc5, 0x30, "9a93fb82e02ea878786a2f9d73c15312b0e3e29cb85d7d258336087f4491facf96f016cec285f8c4d26a10f8d8474893c35cd1d32cad884d72199388d5617d5d884b5aae178837a4077c1bdf69ef4db1a2f031dc6783ccc13ddd15d6ceff060344b4fb363957d7a980905a1aed2655fe152e6c4172dd97d4b22d5ac87da9a0da046df3ec7a6d10bc21eff848c7a23d185377e0878bf4fc1dd7d557177225fa35dc8189299a0f1d0c12114f30fca58b96e24f62cb1a8ae3329a67223d729c8900593351"}, @uac_iso={0x7, 0x25, 0x1, 0xadab6cda323757a3, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x5d, 0x9, 0x7, 0xff, 0x2, 0x3d, 0xe9, [@generic={0xc0, 0x4, "798260d1430950d6d2334d790bef0157a7c0f82481b2d61718384eb26517c44828b45f65d67655a7a3d4e76e024618620910b23b818726d79b5df9e288a26afad5d28eb93d08e932903875fe7756c5bc10009b972bfa9ed29e9b92dcdb4305d5794202b14cced995428b1225ca02a2b6db8518666d24914b99e5b1b324ae9cda1cc04a1eedd2ac13fc7f3ab4a0c6733c2b96bba0742e1df5273ef0fdc2311c552f78d76a865092eda7b66b7983f8b8e53154a7ff15b6c1d9c507d2818ffe"}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x39, 0x0, "fb3fd658ba"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xaf2, 0x80, "aad39ea88c"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x15, "2a38ad88612a"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x200, 0xe3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0x80, 0x80, [@generic={0xd6, 0x1, "e8763d983b737bf176bff5933f0c686d90c46c41ce437b0de578f9daba7fd5742d359d0f314a31d3e29c04dc18bc689d2acb42bfac6498de4d246e02e808f279c7fb6b9d860fa336e9b84e39e8e3d9de4755cef3b12800340111bd964cc658b20ba16f554e513c964482d7a7f6b652335e659eaddf5af31179e91dd892fa5504c4fb762ca161a69f33e38b1840b97884e6ee4512e84f879acbe76f2f7cc86a08dbf7d5ffdde32f922cab5b6350b58a65eb357fa74745c09ab15bd93f0520c99a0ff7cc734a8ecca94f97a63679994f3b6370b619"}, @generic={0xe6, 0x22, "18801036c9710a587630638a3cd13d0313c31fb8a5a431a43a2c8dc9eb06928d49073050ecc3a12ce45e199bb105686428895116b43728a3b0ffbba4a6d524cb0994b40b4178336e87e6a6841e98b47b61e05770d2271726b19c4407a5715542e502eff9d59fc9b9157221a8dfe9bb9afd87da901459d746e18be51c78ec699a08c2791b6a597b98f654dfdcba19782bbbde11f197bc559304eb2c58578fa0c479a2ca4fb399193e7353971fa834899206aff07d43b5f8385dbeb7d5170b4d1269d3a61f3b5168c90aa035b8ee73e784e53da12f0fae7965fd9612db9bd49b0e71cf18b9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x7, 0x41, 0x0, [@generic={0x39, 0x9, "8769ab892e9db717a97b8180d451d1af3405f7747a27bdb0f7242b9c3dcf6952c38eb8a685811c7494b45c02d62afd5e268c73ce4af501"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0xf8, 0x8, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x476}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xd83}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x1, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x40, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x2, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xae, 0x2}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x20, 0x8f, 0x20, 0x8}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xc, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x9, 0xff}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x140, 0x81, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x80, 0x2}}]}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x1, 0x3f, 0x10, 0xff}, 0x1c7, &(0x7f0000000e40)={0x5, 0xf, 0x1c7, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x1f, 0x6, 0x1f, 0x6}, @generic={0xd9, 0x10, 0x1, "e52153b9bfad2c08164fa1022e39b3b4a515015824ecc4722e71757377f18fca29b57e53c081a11107745e285681b8938705ac7045f2b3bf087a67f40e8cf3f351611604e4ff731b8b280505d5891730e68b1b2df5437e270e055432583bb377d6fd0b2a0a2a789bf2a1d32d6e8630fc3892900362b0918888fadb0ba1a7be27783df1e2397daccf963c4444758156649c55bb34acf03d72f287df52b7b8d774852dad68004a6ea308719a4a74163b0277cad546f696ea551372daeb4e4b83fdd2b75a0ac20931a50489bcb3adc87f47ce813f08bb72"}, @generic={0xc2, 0x10, 0x4, "134b02139040bbd80ebbf11a11dcd6251745f43fe3aef6e4bf8d8dddcc72bb384c15993cc222488c93fb494875daaab7dd37605e7726e8748df33ab91f7f7aa27410c40631e66fd3ff22b241f239fab52fbf8e7c84c8c74bac71ed12e8df97f12b259258b0bac3f0fda60dfafbabd19df09472b84f14fce61f4e4266998dc1650390f37046b62edab94917005fd12d6d086620ffc02ea48fbe1daf25f6fab566ac42b432c285a6742792abb9fb1494df033b98fa50360569ffa24ef446739a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xe, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x6, 0xd, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xef, 0x2, 0x1f}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0x3b, &(0x7f00000001c0)=@string={0x3b, 0x3, "22b3071c8e665ee4d947185a530bf2c2f21c01d88df7655232f8ad3b475640f8fdcec12e683816a47ee650e6a14b54ed487c5e6cf08db1d0ae"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "8855e30a9718289a9a71a3489d04b3238a8a330757a6d5b5c5710fc229ee359ee468c7c7741aa9a5f4c96aa2f34de7bb8d74d7c3bd37311c9f5281af45a1c5910d4d4d7b6ef9344861a307785a342f0c12ad0aa187d2549cafff353679848aca53f91bfdb1b96ae3a52f8a592ff5"}}, {0x8a, &(0x7f0000001040)=@string={0x8a, 0x3, "b957ebffaf94431a8750d401c48905dfd2af6bc458d18c7d7c0c894d039eac0b82f66d321e0bfce17af2ff71557b994215cf24c1048a6b54424ee047265657ccc54e79b953af7b4d8212d004add94e92a359b35d34402eaec882ac6b16db1e436d3705ef45c168a6e278be5fddc7a56fbb9c49a70f366e0da4049f5a5e2cc2c8a2e10d317cc95760"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0x70, &(0x7f0000001100)=@string={0x70, 0x3, "6130715fc7933a87cb9cc6fb111b56acb2655cbcb92fdb984dfb986434ebe48e07342cec59844f1d29efbd63e2693b85deafd7db393da115ff29adc76e8cf37cc5aea1681acd5bb78ed87aede43fa7938c8cf81c66f77501412a08bd7fa7911b450decc4fc1b55c8c7f063e1ba81"}}, {0x45, &(0x7f0000001180)=@string={0x45, 0x3, "5b5d6413790d23dffcd298c1bd0bfe70c2e8aa456e8326bb83ba467ff220f61a5633f1a39e3406ffb340ea8531052d6e42024b79944e659bef34cb9927aec398a01d22"}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x7, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "181f08ec"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x34}, [@mdlm={0x15, 0x24, 0x12, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xff, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xd9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x21, 0xd0, 0x1}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x200, 0x2, 0x5, 0xf9, 0xff, 0x3}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x80}]}, 0x1, [{0x79, &(0x7f00000013c0)=@string={0x79, 0x3, "dacdb42ca3787bd0035fa25fb7ece684040a53f322fa4d187749e260248d512beeb097177f93a45b92fa0fe0fff77d6cf377c572cb89b63ada8f0db78b384cf75a362a05ce38a1d62fe6704eec71ee54a150a24a0bcacd5d41c96cb640fe8747905bbfbf16840c5e56de23296c8da726b1324f78976c79"}}]}) (async) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001480)={{0x12, 0x1, 0x1efbd690a0ec2ff2, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0x60, 0x41, [{{0x9, 0x4, 0x0, 0x6b, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x1, 0x25, 0x1, {0x22, 0x199}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0xcd, 0x9}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x6, 0x1, 0x40, 0xcf, 0x7}, 0x1c, &(0x7f0000001500)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x700000, 0xf00, 0x6, [0xff000f]}]}, 0x1, [{0x16, &(0x7f0000001540)=@string={0x16, 0x3, "c340b080ed884963bfcc139d1642e431fd48f76d"}}]}) syz_usb_control_io(r1, &(0x7f0000001740)={0x2c, &(0x7f00000015c0)={0x40, 0x5, 0x37, {0x37, 0x22, "3e30179128c7d60d859eb6c6035d266a974a39445910fd8bbd7968d8677f331ac10de9894741fee7ded6d9a7d34db7d780a3fd1fcc"}}, &(0x7f0000001600)={0x0, 0x3, 0x51, @string={0x51, 0x3, "485fc258b1333b1a7fc0e689556f3f88e247b31eec1cebc1215cdcdf406db79e64de40df2d88726fae153f67f6e3c7053ad7a7d33c97180c21caf67fcae796f211d875d4a077eaf23dcd0203156eb3"}}, &(0x7f0000001680)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000016c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x20, 0x0, "a23908fb", "9ec38c42"}}, &(0x7f0000001700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x1, 0x0, 0xfc, 0x7, 0x5}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001780)={0x40, 0xe, 0x72, "394b693c0e2056580c3db44697e0f65ce7cd02acdb39e17a3f60b7f8a93cf412fd4075d9b03de00a4ce5d882d39447180053c057d8346835e5c9c99e05f4f5eda238f1b1c8ba3994450f276e3f55292fa9d7eec6c37581cdff0e549f55c5010045357a74690ad01b948c463023f087f41db5"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000018c0)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001980)={0x40, 0xb, 0x2, "0550"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "9918"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7, 0x87}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3f}}]}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x110, 0x0, 0x0, 0x1, 0x40, 0xcc}, 0x103, &(0x7f0000001d00)={0x5, 0xf, 0x103, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3f, 0x40, 0xfe00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "c1dddac8bc2d5c62f358c53aa9b4afcd"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7c, 0xf0f, 0x101, [0xff0f, 0xcf, 0xff3f0f]}, @generic={0xc1, 0x10, 0x2, "bb2a2cd30e70c4f647795945d2a143731db24bcc53762e65e973532f5ffbc6086e07a8de1edc488fb21b72c7e08e741e82e7e4ed122ea948bb1cd0acaa8a051423bbbfe730948a8eafa1da9751270b86b0b9b0bac69e7a98ff37e3d59fb1f1a274ae9895ced37899c08a6d8ba37f700bd712165f58dfb29d66f529d40bdb1d3e5a6b86d5b36395cbd4a9611f7df66f371efc1c359da66e047507225b33e4d5d19190584216a2dcc90162d7d75c6295563e40f5fe9c01c66e0322701fdb54"}]}, 0x1, [{0xa8, &(0x7f0000001e40)=@string={0xa8, 0x3, "2e2c88558546ea555d3103b2be6fa6a5d2a8a1694fe8e6faa8436a7903a887c7831356797bf04d51f6957d106eda01433f1eb6472ab62856525ee1189b42f1254131e6e448bdfb429c2c0c4b24f100bed2e53d167fcc8b5793c57194d5b80055b77f53539e0cc52351445fbcb240a0bb2ee7693714ba56f3184a6a21a34f18a7380fe36510031675e32b9030f12c708668daedd69e21da6b06407c113044042c27f9a84f28a3"}}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) [ 3621.878979][T24907] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3621.952361][T24912] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:30 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_emit_vhci(&(0x7f0000000640)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="adea258e0f65d2a21a8f7f390e90024d669bcb48e5c8c385787fee67ad57ddad82695a2a748364ac128e7952af121f9a90d8cc01497933e615c592dbc4318c03ca51a46177b31eb72c9abb78c9ccf2dd93b80fc3ab3275990abc23b75468ff3e790baa189cf8fcdd447d4f9dabc3b2536f3351ea9b64bbb99e220a27eb05846596cddee2211e8bf65afa93d0b9dde062b50478dea67ad270b717efc811be836f4b8c8f353e6e295928781582f77ce91f070f90dcb95197053ade301621e3b35e5dda6e5e98b917557e", &(0x7f0000000440)=""/245, &(0x7f0000000040)="48c504dc49ac5cb03d796913f9995f3467d63d6197eb20778fb2f80720d1e5d1a544e625782815f4811b1b2b8c4635926ad7b661bd97523f1643db5e2bdc", &(0x7f0000000540)="57c9a883a009ee6e8ecf99b1d73a2d2208d148fd6a03569604ed415b802160f6bd1a6b45f0ee919d68e0daff62e9", 0x400, r2}, 0x38) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8000, 0x200100) (async) r7 = signalfd(r4, &(0x7f00000006c0)={[0x1]}, 0x8) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, &(0x7f0000000700)="f30f09360f1e32b8ad008ec0baf80c66b8e220e28266efbafc0cb80100ef0f07ba610066b80000000066ef0f01d70f082e0f019e0e00360f01c2", 0x3a}], 0x1, 0x5a, &(0x7f0000000780), 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3622.008529][T24917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3622.018717][T24917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:05:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000200)) 04:05:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x48, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3622.326436][T24929] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000200)) 04:05:30 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x41, {0x41, 0x3, "9aec33922bdbb8d8bed8e59fcb996b5b1a23b22eb5efc59d6626c1b45518675deec2941bc64168206768d6815517d4e5c9ea15d2bc8c360c5ef9c5f3fb268a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x36, "7da66964a24ccf83d6dde3a516313e32c03c531282b804230ed2b91f8f168916d31831a20329a69efdffc28d9eb2351c2d4268450870"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "25a7e6"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "ae0c7f"}, &(0x7f0000000280)={0x20, 0x83, 0x3, "dc2164"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "f114d0"}}) [ 3622.496359][T24934] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:30 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, &(0x7f00000005c0)="0e816961dccdab03f416ab98584d87deabd7d482d1e50569ab63c50c6eb234b0ace217b7acc76ca24a98413f691b21d2c28f593b570748764802bcac6b1e009341741fff507bf53b2e7e695491bf293de7ad44e3714f01f02e52ae0657ee1cd938ba5ce4a2a26a4bd8281160476ce6e6a421c443", 0x74, 0x7020c191, 0x0, 0x1, r2}, &(0x7f0000000680)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x40880, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/tty', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000024000b0f00060000000000000000120067988a076214f8006ccd6328e853ffe6991bf898ddfe61fe7267cb", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000007000000226bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="18000180e2f306000200000068bdedd90500020006000000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0xa1) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') syz_kvm_setup_cpu$x86(r10, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="c7442400a3000000c74424028f000000ff2c240f01f80f20d835200000000f22d8c744240067000000c7442402d4000000ff1c2466baa100ec3e6426f3a76546dfda0fc7bfa600000066410f3821e0f4", 0x50}], 0x1, 0x1, &(0x7f00000003c0), 0x0) 04:05:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4c, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x11, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000200)) [ 3622.938488][T24944] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3622.960641][T24945] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3623.042183][T24940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:31 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x0, 0x6f0289ac, 0xc0f, 0x243, r3, 0x20, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x80000001}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000080)="03fe7edd0c040a6357bde9610c7ad6a81e668f0f9f83186e3fb3f1d6c16eef733c3d6adfa685ddd46f301fc848b353e89f0d4156821d7ff080461f5397029229a9d71be7adcf3f79ceb958028c"}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x50, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x12, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x0) [ 3623.341052][T24953] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3623.369798][T24952] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x25, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x0) 04:05:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x60, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:33 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x41, {0x41, 0x3, "9aec33922bdbb8d8bed8e59fcb996b5b1a23b22eb5efc59d6626c1b45518675deec2941bc64168206768d6815517d4e5c9ea15d2bc8c360c5ef9c5f3fb268a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x36, "7da66964a24ccf83d6dde3a516313e32c03c531282b804230ed2b91f8f168916d31831a20329a69efdffc28d9eb2351c2d4268450870"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "25a7e6"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "ae0c7f"}, &(0x7f0000000280)={0x20, 0x83, 0x3, "dc2164"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "f114d0"}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x41, {0x41, 0x3, "9aec33922bdbb8d8bed8e59fcb996b5b1a23b22eb5efc59d6626c1b45518675deec2941bc64168206768d6815517d4e5c9ea15d2bc8c360c5ef9c5f3fb268a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x36, "7da66964a24ccf83d6dde3a516313e32c03c531282b804230ed2b91f8f168916d31831a20329a69efdffc28d9eb2351c2d4268450870"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "25a7e6"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "ae0c7f"}, &(0x7f0000000280)={0x20, 0x83, 0x3, "dc2164"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "f114d0"}}) (async) 04:05:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x48, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x0) 04:05:33 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x7f) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r5, 0x8, r7) syz_open_procfs$namespace(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:05:33 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, &(0x7f00000005c0)="0e816961dccdab03f416ab98584d87deabd7d482d1e50569ab63c50c6eb234b0ace217b7acc76ca24a98413f691b21d2c28f593b570748764802bcac6b1e009341741fff507bf53b2e7e695491bf293de7ad44e3714f01f02e52ae0657ee1cd938ba5ce4a2a26a4bd8281160476ce6e6a421c443", 0x74, 0x7020c191, 0x0, 0x1, r2}, &(0x7f0000000680)) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x40880, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/tty', 0x0, 0x2) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000024000b0f00060000000000000000120067988a076214f8006ccd6328e853ffe6991bf898ddfe61fe7267cb", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000007000000226bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="18000180e2f306000200000068bdedd90500020006000000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0xa1) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') syz_kvm_setup_cpu$x86(r10, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="c7442400a3000000c74424028f000000ff2c240f01f80f20d835200000000f22d8c744240067000000c7442402d4000000ff1c2466baa100ec3e6426f3a76546dfda0fc7bfa600000066410f3821e0f4", 0x50}], 0x1, 0x1, &(0x7f00000003c0), 0x0) 04:05:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x68, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4c, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6c, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x60, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:34 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, &(0x7f00000005c0)="0e816961dccdab03f416ab98584d87deabd7d482d1e50569ab63c50c6eb234b0ace217b7acc76ca24a98413f691b21d2c28f593b570748764802bcac6b1e009341741fff507bf53b2e7e695491bf293de7ad44e3714f01f02e52ae0657ee1cd938ba5ce4a2a26a4bd8281160476ce6e6a421c443", 0x74, 0x7020c191, 0x0, 0x1, r2}, &(0x7f0000000680)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x40880, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x40880, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/tty', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000024000b0f00060000000000000000120067988a076214f8006ccd6328e853ffe6991bf898ddfe61fe7267cb", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000024000b0f00060000000000000000120067988a076214f8006ccd6328e853ffe6991bf898ddfe61fe7267cb", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000007000000226bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="18000180e2f306000200000068bdedd90500020006000000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0xa1) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') syz_kvm_setup_cpu$x86(r10, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="c7442400a3000000c74424028f000000ff2c240f01f80f20d835200000000f22d8c744240067000000c7442402d4000000ff1c2466baa100ec3e6426f3a76546dfda0fc7bfa600000066410f3821e0f4", 0x50}], 0x1, 0x1, &(0x7f00000003c0), 0x0) 04:05:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4e, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x74, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3626.516263][T25001] net_ratelimit: 6 callbacks suppressed [ 3626.516450][T25001] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3626.689746][T25006] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:37 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x41, {0x41, 0x3, "9aec33922bdbb8d8bed8e59fcb996b5b1a23b22eb5efc59d6626c1b45518675deec2941bc64168206768d6815517d4e5c9ea15d2bc8c360c5ef9c5f3fb268a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x36, "7da66964a24ccf83d6dde3a516313e32c03c531282b804230ed2b91f8f168916d31831a20329a69efdffc28d9eb2351c2d4268450870"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "25a7e6"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "ae0c7f"}, &(0x7f0000000280)={0x20, 0x83, 0x3, "dc2164"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "f114d0"}}) 04:05:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7a, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:37 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004845}, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x50, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:37 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) (async) fcntl$setown(r2, 0x8, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x7f) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) (async) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) (async) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r5, 0x8, r7) (async) fcntl$setown(r5, 0x8, r7) syz_open_procfs$namespace(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 3628.959073][T25012] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3628.966330][T25015] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:37 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x7f) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r5, 0x8, r7) syz_open_procfs$namespace(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:05:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x300, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x60, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3629.370966][T25028] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3629.470225][T25030] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x500, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x68, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3629.764548][T25032] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3629.785086][T25034] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x600, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3630.096972][T25036] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:40 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401041286eee240090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:40 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004845}, 0x4004000) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004845}, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x700, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:40 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6c, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:40 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) (async) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x7f) (async) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r5, 0x8, r7) (async, rerun: 32) syz_open_procfs$namespace(r7, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 64) [ 3632.185903][T25044] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3632.209828][T25046] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x900, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x74, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3632.606607][T25059] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:41 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3632.690202][T25060] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xa00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7a, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3633.094715][T25066] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3633.115508][T25067] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xb00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3633.429156][T25069] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:43 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401041286eee240090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1f4, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:43 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004845}, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004845}, 0x4004000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 04:05:43 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xc00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:43 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3635.322862][T25075] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3635.358306][T25071] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x300, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:43 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3635.779224][T25096] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd99, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x3e8, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:44 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:46 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401041286eee240090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:46 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, r2, 0x1}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c00000024000b0f0000000000001e00000012001255ed0607d393248dd295cfdb2f45cd5660050b3126c69b8b2253632975bbe3f259600f92362e68195d3fa9ad6ad89c4e5ddfad96cb8b746e86f549590105d9106f940e7d1637", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="8c01000024000b0f000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x18c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x9, 0xfadd, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8, 0x915, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0xffffffffffffff62, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a40)={&(0x7f0000000340), 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@RTM_NEWMDB={0x118, 0x54, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x1, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty, 0x105ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x3, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x4, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x1, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@loopback, 0x90f6a94a0408a561}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) getgroups(0x4, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xee00]) fchown(r3, 0xee00, r11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:05:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x500, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:46 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f350f20e06635004000000f22e0640f01c50fc7a9ffff66b809349be50f23d80f21f86635c00000700f23f80ff187a8002e0f1bd93e0fc772f666b98505000066b80a00000066ba000000000f3066b9800000c00f326635008000000f30", 0x5e}], 0x1, 0x1, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_NMI(r3, 0xae9a) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000580)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x10001, 0x200) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x7, 0x2, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xab9e}, {@broadcast, 0x1}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_newaddr={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000c000/0x3000)=nil, 0x930, 0x0, 0x10, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:46 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3638.536323][T25115] net_ratelimit: 3 callbacks suppressed [ 3638.536387][T25115] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3638.542781][T25120] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3638.629149][T25116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1100, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:47 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x600, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3638.983145][T25131] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3639.037585][T25133] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1200, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x700, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:47 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3639.377698][T25136] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3639.548224][T25138] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:49 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eeea00090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2500, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:49 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f350f20e06635004000000f22e0640f01c50fc7a9ffff66b809349be50f23d80f21f86635c00000700f23f80ff187a8002e0f1bd93e0fc772f666b98505000066b80a00000066ba000000000f3066b9800000c00f326635008000000f30", 0x5e}], 0x1, 0x1, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_NMI(r3, 0xae9a) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000580)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000580)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x10001, 0x200) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x7, 0x2, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xab9e}, {@broadcast, 0x1}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_newaddr={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_newaddr={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000c000/0x3000)=nil, 0x930, 0x0, 0x10, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f000000c000/0x3000)=nil, 0x930, 0x0, 0x10, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:05:49 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, r2, 0x1}) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c00000024000b0f0000000000001e00000012001255ed0607d393248dd295cfdb2f45cd5660050b3126c69b8b2253632975bbe3f259600f92362e68195d3fa9ad6ad89c4e5ddfad96cb8b746e86f549590105d9106f940e7d1637", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="8c01000024000b0f000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x18c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x9, 0xfadd, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8, 0x915, 0x7}}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0xffffffffffffff62, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000a40)={&(0x7f0000000340), 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@RTM_NEWMDB={0x118, 0x54, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x1, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty, 0x105ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x3, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x4, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x1, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@loopback, 0x90f6a94a0408a561}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) getgroups(0x4, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xee00]) fchown(r3, 0xee00, r11) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) 04:05:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x900, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:49 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3641.685146][T25152] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3641.693036][T25151] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3641.797704][T25150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xa00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4000, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:50 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:05:50 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, r2, 0x1}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c00000024000b0f0000000000001e00000012001255ed0607d393248dd295cfdb2f45cd5660050b3126c69b8b2253632975bbe3f259600f92362e68195d3fa9ad6ad89c4e5ddfad96cb8b746e86f549590105d9106f940e7d1637", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000f000100706669666f5f6661737400000600050000000000"], 0x3c}}, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="8c01000024000b0f000000000000000000001200", @ANYRES32=r6, @ANYBLOB="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"], 0x18c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x9, 0xfadd, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8, 0x915, 0x7}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0xffffffffffffff62, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a40)={&(0x7f0000000340), 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@RTM_NEWMDB={0x118, 0x54, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x1, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty, 0x105ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x3, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x4, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x1, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@loopback, 0x90f6a94a0408a561}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) (async) getgroups(0x4, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xee00]) fchown(r3, 0xee00, r11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) [ 3642.109646][T25165] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3642.140648][T25166] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xb00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4800, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:52 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eeea00090582"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eeea00090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4c00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xc00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:52 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x1d0, 0x17, 0x1, 0x70bd28, 0x25dfdbfb, {0x19}, [@generic="a0deadb0401c47c374e725df6737bb496d284f55b326c29e4a5828a1b53b16380d3cffd8094867c00ed41fc6e73348c4574d78c5c5c92a0a0dc7ed7bba85ef6206469c7e213a2268b7a1dc0c00323fea0bf527ddccc94856c98154f74a86b2da54", @nested={0x158, 0x8d, 0x0, 0x1, [@typed={0x4, 0x68}, @typed={0x8, 0x60, 0x0, 0x0, @pid}, @typed={0x8, 0x1d, 0x0, 0x0, @uid}, @generic="f91a8e068cc6b76d6c8edb291d440b8803fe6cb10f6dd5635357efbc5ecd8a3ddaa5c72145a5e3d8cf368fd32703b6e457d41769ad3979d5afd2afd6b9498ddf39f1b0153e9264e4d29c54784a1e67d7e178603c856f0a794c0efb6005555d", @generic="11b9f96155a8de0eead63402ef384a008799fd67095df0612eccaff1b72f2881342c95b9965103b41d3700ebf917edb675d69c379a80971a899d23f28692df9cdadfe1f93590a61223d5f9c52b4ad7ee479d9b46fc39dbe73ec7375745adc5582affff9f88f9492c5b93e446663098c456ac39203b8164354bf9d5cc163b71112b3f536898e126ae5e3810160350cf914218deac9250197d874a2a0f6bd7eed74658ef4c6350cebccda3ac61ff8549179b8b2c8cd0e19eafd928cf5c2bd53933c1688c0375d0ff09a6de9be35e2f1f34a349feacbcd0d4c500", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000015}, 0x8840) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:05:52 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:05:52 executing program 0: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f350f20e06635004000000f22e0640f01c50fc7a9ffff66b809349be50f23d80f21f86635c00000700f23f80ff187a8002e0f1bd93e0fc772f666b98505000066b80a00000066ba000000000f3066b9800000c00f326635008000000f30", 0x5e}], 0x1, 0x1, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f350f20e06635004000000f22e0640f01c50fc7a9ffff66b809349be50f23d80f21f86635c00000700f23f80ff187a8002e0f1bd93e0fc772f666b98505000066b80a00000066ba000000000f3066b9800000c00f326635008000000f30", 0x5e}], 0x1, 0x1, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_NMI(r3, 0xae9a) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000580)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000580)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x10001, 0x200) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x7, 0x2, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xab9e}, {@broadcast, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x7, 0x2, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xab9e}, {@broadcast, 0x1}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_newaddr={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_newaddr={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000c000/0x3000)=nil, 0x930, 0x0, 0x10, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3644.865128][T25188] net_ratelimit: 2 callbacks suppressed [ 3644.865199][T25188] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3644.881012][T25193] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3644.899905][T25192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3644.910462][T25192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:05:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x5000, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:53 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r8 = open(&(0x7f0000000380)='./file0\x00', 0x880, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x4c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0xb8, &(0x7f0000000080)=""/184, 0x40f00, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r2, r10, r11], &(0x7f0000000600)=[{0x5, 0x2, 0x8}, {0x1, 0x4, 0xc, 0x9}, {0x0, 0x4, 0xb, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x1}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:05:53 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3645.342525][T25203] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3645.359462][T25204] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x5173, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xd99, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3645.706230][T25212] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3645.881132][T25214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:56 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eeea00090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:05:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6000, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:56 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:56 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) write(r2, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) recvmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x1d0, 0x17, 0x1, 0x70bd28, 0x25dfdbfb, {0x19}, [@generic="a0deadb0401c47c374e725df6737bb496d284f55b326c29e4a5828a1b53b16380d3cffd8094867c00ed41fc6e73348c4574d78c5c5c92a0a0dc7ed7bba85ef6206469c7e213a2268b7a1dc0c00323fea0bf527ddccc94856c98154f74a86b2da54", @nested={0x158, 0x8d, 0x0, 0x1, [@typed={0x4, 0x68}, @typed={0x8, 0x60, 0x0, 0x0, @pid}, @typed={0x8, 0x1d, 0x0, 0x0, @uid}, @generic="f91a8e068cc6b76d6c8edb291d440b8803fe6cb10f6dd5635357efbc5ecd8a3ddaa5c72145a5e3d8cf368fd32703b6e457d41769ad3979d5afd2afd6b9498ddf39f1b0153e9264e4d29c54784a1e67d7e178603c856f0a794c0efb6005555d", @generic="11b9f96155a8de0eead63402ef384a008799fd67095df0612eccaff1b72f2881342c95b9965103b41d3700ebf917edb675d69c379a80971a899d23f28692df9cdadfe1f93590a61223d5f9c52b4ad7ee479d9b46fc39dbe73ec7375745adc5582affff9f88f9492c5b93e446663098c456ac39203b8164354bf9d5cc163b71112b3f536898e126ae5e3810160350cf914218deac9250197d874a2a0f6bd7eed74658ef4c6350cebccda3ac61ff8549179b8b2c8cd0e19eafd928cf5c2bd53933c1688c0375d0ff09a6de9be35e2f1f34a349feacbcd0d4c500", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000015}, 0x8840) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:05:56 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000000000000090000c0090000000400000001feffff03200000010100007fb60000000000000000000000000000000000c0ffffffff01000000ff0500003f080000040000003f000000000000000000000000000000020000000800000002000000030000000100000040000000c96900000000000000000000000000000f000000ffffff7f040000003569000004000000000100002e5700000000000000000000000000000a00000005000000040000001f000000ab000000020000001f000000000000000000000000000000cd12e5bbe036a0641cac5a319f96bf4dfc323a0b1cde4b56a9e114c975f80d5cd00ba7faa419c23c658de5f0a47412d4bc27dd9764434c9bf8c9989a71887efb71f155b27453db8716d4f4cde163952748e874d3f2a75a391c78484bf5c9efc6d8345c25208c226ebe668ade5decfbb817053e285cd3ea7caf1f69dc8dc434c198b00bc541a52e550d43ac1687e0b135950394242519928a817ac3ad76d3b65d"]) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r8 = open(&(0x7f0000000380)='./file0\x00', 0x880, 0x40) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x4c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0xb8, &(0x7f0000000080)=""/184, 0x40f00, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r2, r10, r11], &(0x7f0000000600)=[{0x5, 0x2, 0x8}, {0x1, 0x4, 0xc, 0x9}, {0x0, 0x4, 0xb, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x1}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3647.970268][T25221] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3648.044591][T25220] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6573, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xf00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:56 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) r8 = open(&(0x7f0000000380)='./file0\x00', 0x880, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x4c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0xb8, &(0x7f0000000080)=""/184, 0x40f00, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r2, r10, r11], &(0x7f0000000600)=[{0x5, 0x2, 0x8}, {0x1, 0x4, 0xc, 0x9}, {0x0, 0x4, 0xb, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x1}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:05:56 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3648.473973][T25239] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:56 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) write(r2, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x1d0, 0x17, 0x1, 0x70bd28, 0x25dfdbfb, {0x19}, [@generic="a0deadb0401c47c374e725df6737bb496d284f55b326c29e4a5828a1b53b16380d3cffd8094867c00ed41fc6e73348c4574d78c5c5c92a0a0dc7ed7bba85ef6206469c7e213a2268b7a1dc0c00323fea0bf527ddccc94856c98154f74a86b2da54", @nested={0x158, 0x8d, 0x0, 0x1, [@typed={0x4, 0x68}, @typed={0x8, 0x60, 0x0, 0x0, @pid}, @typed={0x8, 0x1d, 0x0, 0x0, @uid}, @generic="f91a8e068cc6b76d6c8edb291d440b8803fe6cb10f6dd5635357efbc5ecd8a3ddaa5c72145a5e3d8cf368fd32703b6e457d41769ad3979d5afd2afd6b9498ddf39f1b0153e9264e4d29c54784a1e67d7e178603c856f0a794c0efb6005555d", @generic="11b9f96155a8de0eead63402ef384a008799fd67095df0612eccaff1b72f2881342c95b9965103b41d3700ebf917edb675d69c379a80971a899d23f28692df9cdadfe1f93590a61223d5f9c52b4ad7ee479d9b46fc39dbe73ec7375745adc5582affff9f88f9492c5b93e446663098c456ac39203b8164354bf9d5cc163b71112b3f536898e126ae5e3810160350cf914218deac9250197d874a2a0f6bd7eed74658ef4c6350cebccda3ac61ff8549179b8b2c8cd0e19eafd928cf5c2bd53933c1688c0375d0ff09a6de9be35e2f1f34a349feacbcd0d4c500", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000015}, 0x8840) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3648.539539][T25241] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1100, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:59 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee210090582e1675cd054a0ce3773fb"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) 04:05:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x66ef, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1200, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:59 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:59 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x48) setns(0xffffffffffffffff, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x1, 0x0, 0x0, 0x200, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ab707219cbf501f8c9413df1b08fe8cbbe0e8b2f8108a49654666ebd00"/40, 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029000000430000000300000000800000"], 0x18}}], 0x1, 0x0) r7 = getuid() r8 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x4, 0x400000, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9e6, 0x0, 0x0, 0xa9, 0xd000, 0xfffffffb, r9, 0xee01, 0x0, 0x2}}}, 0x90) r10 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)=[{&(0x7f00000006c0)={0x278, 0x24, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x2c, 0x0, 0x0, @u64=0x100000001}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @generic="3a3bd1232bf6ea7b2e3965d1", @generic="dd065dcd165e6fe70c374e1522e48013ad58fec3677594982ef0c6acd2756c0c230437bdecb097e8f7406a40b6b487e538415b4e1ad7213d0713ff5b2fbf16da28c9477d899e5b54299b4181878184b0c1dbba5fcfafd1e664c2bc4668900299be4e21cd1f9dffc434c289a4a02bf3a994246b4407a796bc31dfef3034e7ee629d1d73caa17ea92a0d8cce4dc72d5e9c5cb94209f6ff5c9a05fa0ea0282dc9da10b0df3be4616cf287f2ca782482c58641056d42aec11064c3eef68c30fc640b269da556b2b21590a562ded569c4bb19df2d38d54884f620408b1ee6b902937de7267b1a9d7ec35676c35df703c28e42ca349681f7fef3a630ad09a7eb", @typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@local}, @nested={0x129, 0x22, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @generic="051874605f81a58d4ea00932486021409e124f0cd440dc6f75538d3191e4d37a6f01de29816806fa7610c857", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@remote}, @generic="4543f560493fcad577472382be313d34528e48acc616895385457117277a0323c2f18f9e5d9a4b5f1471f81e1f56f8d6ef628c3bd6347523cc3ab8f07d219560ae9cdabe3b58cf62bd970c1efb81bd15742d4f89fe7cf72a947870e6b079024b922b5be77856c7bb6d2f316b42f33ffbd4f76915525c785e521d0d07da978530a531786797e6e91cced6e11f84b336f9e270128f9f91668af8cbf123efc811efe5d0a67e8ddeeb29cd4f85b7762d7967c329a71f338e24d637d07f6ff54b1704acc5beaba566804c7335970bd2af67b6b22eb20273bad12445f7c6ad446d19834c37898d7e"]}]}, 0x278}, {&(0x7f0000001640)={0x10, 0x2b, 0x400, 0x70bd27, 0x25dfdbfb}, 0x10}, {&(0x7f0000000c40)={0x2b8, 0x2f, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast2}, @generic="826f1c346f025d840f0178614068315eb5a6d4e3b07d61bcd163830ba3b0bf6c5ebfc74c37fc1f08210cb1a6ae1d123ccbda22691c2288c70f1cb4df589fa2bbf665e9f0b261a0ea25400457fdd6494c16ad518d4b22580dcf2a085fa5243ac0f61dc3d72400a1e12e6628512bc54372fcc2fd6f3aa2a5174af0607aa5cd376c3a7a55cf6eb2d4d9761fc43dd9628435f8f40daa4e4a9a74b6b133fed1819b185305b7b097f1413171849a02880747069459dab3", @nested={0x1df, 0x7b, 0x0, 0x1, [@generic="876c68a38685c8da440c76404d1a81066cd05e5829c51ca5abb258a4e20869110b7cd35175c0b20ff8448891c3e0b0effde2d9a1a92721831ef5ab5824aad7b955cf9c4423b0c7fce7d127fe1ba20be6fad7b31a581f2c5af020fd14766213cec735747517085a88c38672d4b4a0a43c043e542a2226ec57a6c427d42885d66572f955f741f8bf978e8caa2a70a34f81b4118e5733ad13", @generic="d606648dfc7bc9b0c4471c469e0596d84cccbea887f77fab411d5f1253b5a198bce089bf755c53d013e8d02d9192d4af81d1550909b6459cda1d993a8aa31aaebedef973191125e0ae5ececb", @generic="0df71751d9a78b1e55777608aa54cd921e7b7180940924da11135220938650249be5c59ae5e2ace0776afb1e653a97aebb4b153002192f687b5123549953cce54bf5bf6aa7c474fb8ce4c1fda1d335ea0648acd466a9ec4565561f443910ee4fad1a30555aa5094bc3e0fe40c43de3f40589e1d185351d09fa31167966bebfb81345f00a5a1d06a29cb40a93af8fb760da4707f279429f9d4f20c0de761475c00ba8d6d6ea7190af5aa4a76c1fd28ae5f6211c902526be9ee88091b4b7bc15981e8c3e37c342a250ac6141a9d9180188a27bfd8c2b0747bfcbe23e3c673460674846d9f3", @typed={0x4, 0x29}, @typed={0xd, 0x21, 0x0, 0x0, @str='/dev/kvm\x00'}]}]}, 0x2b8}, {&(0x7f0000000f00)={0x6bc, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@generic="f290cb214a4cb6f837dd77b19f40b2fc061f5d02b0e61dd0f7db595ceb94ad9965fb0d3d13c99bbec85004ffe31d765b82fac92bac23d6032f1357d0ec8e4ff3dbfb03c6f86916c5fc3af2d93b91388c41f12c76b4676684099e81f06b46d6fc538ca2ed67525bdb960b697211b727f8746c288376ee29ca45bf87fbe86b0ae7a3683f8177f0cae700fa336b6b63cd81aea4c6604c9fc857341cb95b0cf53dbe9b0b21955103d9b0e012ad35963203a14b910ad8c4", @nested={0x2e, 0x90, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @uid}, @generic="5a27e607cf241f7fa60ab063fb2caa138845345b4ef88c55a0e5c9e0a519ed028171"]}, @nested={0xe5, 0x9, 0x0, 0x1, [@typed={0x4, 0x90}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="df2aea5475e753a3c5c703669a876d60a33259c2e23ba0ead931d2e5bec473b4a4370487a1269fbc6f2d1977ee22d1e78fbc6fc18b4a2adb866efc6b736395034e736c35402642bb338fab3d353d01d7f6cff91e73c332f951e9ab936e983579004ce64df99b0023768446a8c097028b70b836ed37893b1b1b77dfc4571188368a0e07dc9fe70fc8d730421a52709372b05ee0aeffa17f6fb954e37d67705c7921310c344d23c8532a632aeb2ef3eb241d89e34b47be2849b4295153582aa3280afae4d3572fa62b51"]}, @nested={0x12d, 0x10, 0x0, 0x1, [@typed={0x9d, 0x3c, 0x0, 0x0, @binary="8f7371e765906f18d196ac1c050bfef4c992972b9b256da57956d68c2e8092ae47b8ea668d58fc3619004caa2e4a57b801f121d6e5adba099645031777b1bfd3794797fc7a062b16c52b555dc08da042447c9029233bfcb9e6563fbd4954087778f1aa6f1ae72a2d4bb0d9901bca12137c0fed0d5e6e7ccab2ec6c846b894196e60721bf5256a2b3bd4ed73a9e4293d5256c2e5dbca5e590f1"}, @generic="a80f43734f673f1d8072ca6bff1fa8a603dd95b2a30ba2dfb61e2a972ab1b4dbc44744e9256e8ee23da6aa1ca42353a169ad0379ba712b69eab6b3fbefa2158b7298fd54002ad3895547f2d545c08cb0a21ed28e799fa6cd4b", @typed={0xd, 0x37, 0x0, 0x0, @str='/dev/kvm\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x10000}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0xd9a}]}, @generic="a0d376eb1c047a3330b47fc6d6a1a47aad88a306e419d76627e1f0f3bad8323c85a6be83b59f255b7dea7c7e0b122e686b9ae94abe5a071d1ddd5c39d862d356d06e78b46feb0611aff7893a7b", @generic="429e977fa91f5d070789c9a332e45ecb854d6044b49504af2b909f00e311f289485cf838686b920c3c062b081fd84cc9227252b94267e6f1dd9b3e13e343e2511537f894c73891ecd7e3ad5060076ac76a0d2c38429762ac8dfe09b68bed625cc571626ab50a179d38d8a8e195553e8edd1309648dc0343de825893cfc3f50926932d89cc7e13c4901a21f90738322d731e2", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@broadcast}, @generic="3ffeee7c7ee19f496de2dd3ba43138d0d9e91525d745aa9ff98422af4ed166fb8013f913c2a425672c6611bd4b4334c00cef17cb2fb9791b8fe046d8b5db7d4ab23531d4a236d5e30b640f64826ce6937908b2c01e0efe331f851cdced15718f2c", @generic="8bf78e85b481ad4b576ef4f43f37c09f4b831af2c76ee018b2db8d1e8e089e7b281c3a0e1bca3b20d5f9358854337da6894cf439678e54167b0fded625cca97dd7e4bdfe6539e6960f630e333309cb671143110b0c05ecfbb880a84a4ecff10abbd172591dca0be3ce8fdd62895db11b7acd8b4bed3835f5ad07aa3315429cf8852d0faeaa8a228e39144e7dbf1b83a5f7041cd9029fed0d8de4de628a846c55d76888f671fa51c3a1eaed6621cbaf909a516f19e913b0286dd87cdeb2a63ec8fdb4603af1eb6ee4ce96b5cad059b82212210b743ce0cfa006", @nested={0x18c, 0x6c, 0x0, 0x1, [@typed={0x5, 0x3b, 0x0, 0x0, @str='\x00'}, @generic="691862154bfe695fe9bbdb4ead7b4e18955ad3bcaf63008e93a654da8d0abd642759fc5ad3fb75d80d169de8813c77d5cafaaa65be705f42beb3641c66a49a46214933a7bbbe43f3e35b509a83e586cd9b3ae42585f3c34ec12bdd5974611f387f9bcb2935a6e2b8529110d3f0dae744ef6ad0714819c45ce0537e1c9b5ad2556a1053533fc7c846cd1c6aed22a6d6aa2439015767ffc0ec9bfc347993c441f2f28ddc37c531a915b551075a89a5557ce16c66571bb91d20faec30fa53e11e14e4d45716340454a2713969e7694332056f28a18d3b763c0a9fe7e427ed87f15c7a417ed8", @generic="7cab0ca3b9c431b27ef75eb7018379b8f70c5696da5a9a3425bcaf86a62c664e0927cf808fcc093b2cc74653074683cf4248", @typed={0xe, 0x73, 0x0, 0x0, @binary="218d165e80a28dba167f"}, @typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="e7d4b9", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0xfffffe23}, @typed={0xe, 0x4b, 0x0, 0x0, @str='^&-*\xdf-+-[\x00'}, @generic="ec9ad464dc1f81b8199e9ab06181ce671fd8c3036befebf7ebccc53a3cdfefb726a612"]}]}, 0x6bc}, {&(0x7f0000000480)={0x10, 0x34, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}, {&(0x7f0000000940)={0x70, 0x21, 0x400, 0x70bd28, 0x25dfdbfd, "", [@nested={0x48, 0x79, 0x0, 0x1, [@generic="786fc0dfc36282e887c7de67f4920c330c9cd8b743e02eda5aafcc388a28aeca9ad91d1826342fd8374c85ba9ff09a326425174d0a649c1689dbf1f91220f0be", @typed={0x4, 0x74}]}, @typed={0x10, 0x43, 0x0, 0x0, @str=':*/{(!*.-.]\x00'}, @generic, @typed={0x8, 0x2a, 0x0, 0x0, @pid}]}, 0x70}], 0x6, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0xc0, 0x40}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:05:59 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x2a}], 0x1, 0x0, 0x0, 0x2d) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3651.178679][T25270] net_ratelimit: 1 callbacks suppressed [ 3651.178743][T25270] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3651.228329][T25269] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2500, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:05:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6800, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3651.558857][T25281] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3651.609494][T25282] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:05:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6c00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:05:59 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2b4f, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:00 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x2a}], 0x1, 0x0, 0x0, 0x2d) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3651.890276][T25286] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3651.951660][T25288] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:02 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee210090582e1675cd054a0ce3773fb"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) 04:06:02 executing program 0: syz_emit_vhci(0x0, 0x18) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x48) (async) setns(0xffffffffffffffff, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x1, 0x0, 0x0, 0x200, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x94) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) (async) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ab707219cbf501f8c9413df1b08fe8cbbe0e8b2f8108a49654666ebd00"/40, 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029000000430000000300000000800000"], 0x18}}], 0x1, 0x0) (async) r7 = getuid() r8 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x4, 0x400000, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9e6, 0x0, 0x0, 0xa9, 0xd000, 0xfffffffb, r9, 0xee01, 0x0, 0x2}}}, 0x90) (async) r10 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)=[{&(0x7f00000006c0)={0x278, 0x24, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x2c, 0x0, 0x0, @u64=0x100000001}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @generic="3a3bd1232bf6ea7b2e3965d1", @generic="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", @typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@local}, @nested={0x129, 0x22, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @generic="051874605f81a58d4ea00932486021409e124f0cd440dc6f75538d3191e4d37a6f01de29816806fa7610c857", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@remote}, @generic="4543f560493fcad577472382be313d34528e48acc616895385457117277a0323c2f18f9e5d9a4b5f1471f81e1f56f8d6ef628c3bd6347523cc3ab8f07d219560ae9cdabe3b58cf62bd970c1efb81bd15742d4f89fe7cf72a947870e6b079024b922b5be77856c7bb6d2f316b42f33ffbd4f76915525c785e521d0d07da978530a531786797e6e91cced6e11f84b336f9e270128f9f91668af8cbf123efc811efe5d0a67e8ddeeb29cd4f85b7762d7967c329a71f338e24d637d07f6ff54b1704acc5beaba566804c7335970bd2af67b6b22eb20273bad12445f7c6ad446d19834c37898d7e"]}]}, 0x278}, {&(0x7f0000001640)={0x10, 0x2b, 0x400, 0x70bd27, 0x25dfdbfb}, 0x10}, {&(0x7f0000000c40)={0x2b8, 0x2f, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast2}, @generic="826f1c346f025d840f0178614068315eb5a6d4e3b07d61bcd163830ba3b0bf6c5ebfc74c37fc1f08210cb1a6ae1d123ccbda22691c2288c70f1cb4df589fa2bbf665e9f0b261a0ea25400457fdd6494c16ad518d4b22580dcf2a085fa5243ac0f61dc3d72400a1e12e6628512bc54372fcc2fd6f3aa2a5174af0607aa5cd376c3a7a55cf6eb2d4d9761fc43dd9628435f8f40daa4e4a9a74b6b133fed1819b185305b7b097f1413171849a02880747069459dab3", @nested={0x1df, 0x7b, 0x0, 0x1, [@generic="876c68a38685c8da440c76404d1a81066cd05e5829c51ca5abb258a4e20869110b7cd35175c0b20ff8448891c3e0b0effde2d9a1a92721831ef5ab5824aad7b955cf9c4423b0c7fce7d127fe1ba20be6fad7b31a581f2c5af020fd14766213cec735747517085a88c38672d4b4a0a43c043e542a2226ec57a6c427d42885d66572f955f741f8bf978e8caa2a70a34f81b4118e5733ad13", @generic="d606648dfc7bc9b0c4471c469e0596d84cccbea887f77fab411d5f1253b5a198bce089bf755c53d013e8d02d9192d4af81d1550909b6459cda1d993a8aa31aaebedef973191125e0ae5ececb", @generic="0df71751d9a78b1e55777608aa54cd921e7b7180940924da11135220938650249be5c59ae5e2ace0776afb1e653a97aebb4b153002192f687b5123549953cce54bf5bf6aa7c474fb8ce4c1fda1d335ea0648acd466a9ec4565561f443910ee4fad1a30555aa5094bc3e0fe40c43de3f40589e1d185351d09fa31167966bebfb81345f00a5a1d06a29cb40a93af8fb760da4707f279429f9d4f20c0de761475c00ba8d6d6ea7190af5aa4a76c1fd28ae5f6211c902526be9ee88091b4b7bc15981e8c3e37c342a250ac6141a9d9180188a27bfd8c2b0747bfcbe23e3c673460674846d9f3", @typed={0x4, 0x29}, @typed={0xd, 0x21, 0x0, 0x0, @str='/dev/kvm\x00'}]}]}, 0x2b8}, {&(0x7f0000000f00)={0x6bc, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@generic="f290cb214a4cb6f837dd77b19f40b2fc061f5d02b0e61dd0f7db595ceb94ad9965fb0d3d13c99bbec85004ffe31d765b82fac92bac23d6032f1357d0ec8e4ff3dbfb03c6f86916c5fc3af2d93b91388c41f12c76b4676684099e81f06b46d6fc538ca2ed67525bdb960b697211b727f8746c288376ee29ca45bf87fbe86b0ae7a3683f8177f0cae700fa336b6b63cd81aea4c6604c9fc857341cb95b0cf53dbe9b0b21955103d9b0e012ad35963203a14b910ad8c4", @nested={0x2e, 0x90, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @uid}, @generic="5a27e607cf241f7fa60ab063fb2caa138845345b4ef88c55a0e5c9e0a519ed028171"]}, @nested={0xe5, 0x9, 0x0, 0x1, [@typed={0x4, 0x90}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="df2aea5475e753a3c5c703669a876d60a33259c2e23ba0ead931d2e5bec473b4a4370487a1269fbc6f2d1977ee22d1e78fbc6fc18b4a2adb866efc6b736395034e736c35402642bb338fab3d353d01d7f6cff91e73c332f951e9ab936e983579004ce64df99b0023768446a8c097028b70b836ed37893b1b1b77dfc4571188368a0e07dc9fe70fc8d730421a52709372b05ee0aeffa17f6fb954e37d67705c7921310c344d23c8532a632aeb2ef3eb241d89e34b47be2849b4295153582aa3280afae4d3572fa62b51"]}, @nested={0x12d, 0x10, 0x0, 0x1, [@typed={0x9d, 0x3c, 0x0, 0x0, @binary="8f7371e765906f18d196ac1c050bfef4c992972b9b256da57956d68c2e8092ae47b8ea668d58fc3619004caa2e4a57b801f121d6e5adba099645031777b1bfd3794797fc7a062b16c52b555dc08da042447c9029233bfcb9e6563fbd4954087778f1aa6f1ae72a2d4bb0d9901bca12137c0fed0d5e6e7ccab2ec6c846b894196e60721bf5256a2b3bd4ed73a9e4293d5256c2e5dbca5e590f1"}, @generic="a80f43734f673f1d8072ca6bff1fa8a603dd95b2a30ba2dfb61e2a972ab1b4dbc44744e9256e8ee23da6aa1ca42353a169ad0379ba712b69eab6b3fbefa2158b7298fd54002ad3895547f2d545c08cb0a21ed28e799fa6cd4b", @typed={0xd, 0x37, 0x0, 0x0, @str='/dev/kvm\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x10000}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0xd9a}]}, @generic="a0d376eb1c047a3330b47fc6d6a1a47aad88a306e419d76627e1f0f3bad8323c85a6be83b59f255b7dea7c7e0b122e686b9ae94abe5a071d1ddd5c39d862d356d06e78b46feb0611aff7893a7b", @generic="429e977fa91f5d070789c9a332e45ecb854d6044b49504af2b909f00e311f289485cf838686b920c3c062b081fd84cc9227252b94267e6f1dd9b3e13e343e2511537f894c73891ecd7e3ad5060076ac76a0d2c38429762ac8dfe09b68bed625cc571626ab50a179d38d8a8e195553e8edd1309648dc0343de825893cfc3f50926932d89cc7e13c4901a21f90738322d731e2", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@broadcast}, @generic="3ffeee7c7ee19f496de2dd3ba43138d0d9e91525d745aa9ff98422af4ed166fb8013f913c2a425672c6611bd4b4334c00cef17cb2fb9791b8fe046d8b5db7d4ab23531d4a236d5e30b640f64826ce6937908b2c01e0efe331f851cdced15718f2c", @generic="8bf78e85b481ad4b576ef4f43f37c09f4b831af2c76ee018b2db8d1e8e089e7b281c3a0e1bca3b20d5f9358854337da6894cf439678e54167b0fded625cca97dd7e4bdfe6539e6960f630e333309cb671143110b0c05ecfbb880a84a4ecff10abbd172591dca0be3ce8fdd62895db11b7acd8b4bed3835f5ad07aa3315429cf8852d0faeaa8a228e39144e7dbf1b83a5f7041cd9029fed0d8de4de628a846c55d76888f671fa51c3a1eaed6621cbaf909a516f19e913b0286dd87cdeb2a63ec8fdb4603af1eb6ee4ce96b5cad059b82212210b743ce0cfa006", @nested={0x18c, 0x6c, 0x0, 0x1, [@typed={0x5, 0x3b, 0x0, 0x0, @str='\x00'}, @generic="691862154bfe695fe9bbdb4ead7b4e18955ad3bcaf63008e93a654da8d0abd642759fc5ad3fb75d80d169de8813c77d5cafaaa65be705f42beb3641c66a49a46214933a7bbbe43f3e35b509a83e586cd9b3ae42585f3c34ec12bdd5974611f387f9bcb2935a6e2b8529110d3f0dae744ef6ad0714819c45ce0537e1c9b5ad2556a1053533fc7c846cd1c6aed22a6d6aa2439015767ffc0ec9bfc347993c441f2f28ddc37c531a915b551075a89a5557ce16c66571bb91d20faec30fa53e11e14e4d45716340454a2713969e7694332056f28a18d3b763c0a9fe7e427ed87f15c7a417ed8", @generic="7cab0ca3b9c431b27ef75eb7018379b8f70c5696da5a9a3425bcaf86a62c664e0927cf808fcc093b2cc74653074683cf4248", @typed={0xe, 0x73, 0x0, 0x0, @binary="218d165e80a28dba167f"}, @typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="e7d4b9", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0xfffffe23}, @typed={0xe, 0x4b, 0x0, 0x0, @str='^&-*\xdf-+-[\x00'}, @generic="ec9ad464dc1f81b8199e9ab06181ce671fd8c3036befebf7ebccc53a3cdfefb726a612"]}]}, 0x6bc}, {&(0x7f0000000480)={0x10, 0x34, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}, {&(0x7f0000000940)={0x70, 0x21, 0x400, 0x70bd28, 0x25dfdbfd, "", [@nested={0x48, 0x79, 0x0, 0x1, [@generic="786fc0dfc36282e887c7de67f4920c330c9cd8b743e02eda5aafcc388a28aeca9ad91d1826342fd8374c85ba9ff09a326425174d0a649c1689dbf1f91220f0be", @typed={0x4, 0x74}]}, @typed={0x10, 0x43, 0x0, 0x0, @str=':*/{(!*.-.]\x00'}, @generic, @typed={0x8, 0x2a, 0x0, 0x0, @pid}]}, 0x70}], 0x6, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0xc0, 0x40}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:06:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7351, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x2ee0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:02 executing program 5: syz_emit_vhci(0x0, 0x18) (async) syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x2a}], 0x1, 0x0, 0x0, 0x2d) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x2a}], 0x1, 0x0, 0x0, 0x2d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:02 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3654.329769][T25301] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3654.333188][T25306] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4000, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7365, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3654.607422][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3654.614141][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:06:02 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x48) setns(0xffffffffffffffff, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x1, 0x0, 0x0, 0x200, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x1, 0x0, 0x0, 0x200, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ab707219cbf501f8c9413df1b08fe8cbbe0e8b2f8108a49654666ebd00"/40, 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029000000430000000300000000800000"], 0x18}}], 0x1, 0x0) r7 = getuid() getgid() (async) r8 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x4, 0x400000, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9e6, 0x0, 0x0, 0xa9, 0xd000, 0xfffffffb, r9, 0xee01, 0x0, 0x2}}}, 0x90) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x4, 0x400000, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9e6, 0x0, 0x0, 0xa9, 0xd000, 0xfffffffb, r9, 0xee01, 0x0, 0x2}}}, 0x90) r10 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)=[{&(0x7f00000006c0)={0x278, 0x24, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x2c, 0x0, 0x0, @u64=0x100000001}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @generic="3a3bd1232bf6ea7b2e3965d1", @generic="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", @typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@local}, @nested={0x129, 0x22, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @generic="051874605f81a58d4ea00932486021409e124f0cd440dc6f75538d3191e4d37a6f01de29816806fa7610c857", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@remote}, @generic="4543f560493fcad577472382be313d34528e48acc616895385457117277a0323c2f18f9e5d9a4b5f1471f81e1f56f8d6ef628c3bd6347523cc3ab8f07d219560ae9cdabe3b58cf62bd970c1efb81bd15742d4f89fe7cf72a947870e6b079024b922b5be77856c7bb6d2f316b42f33ffbd4f76915525c785e521d0d07da978530a531786797e6e91cced6e11f84b336f9e270128f9f91668af8cbf123efc811efe5d0a67e8ddeeb29cd4f85b7762d7967c329a71f338e24d637d07f6ff54b1704acc5beaba566804c7335970bd2af67b6b22eb20273bad12445f7c6ad446d19834c37898d7e"]}]}, 0x278}, {&(0x7f0000001640)={0x10, 0x2b, 0x400, 0x70bd27, 0x25dfdbfb}, 0x10}, {&(0x7f0000000c40)={0x2b8, 0x2f, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast2}, @generic="826f1c346f025d840f0178614068315eb5a6d4e3b07d61bcd163830ba3b0bf6c5ebfc74c37fc1f08210cb1a6ae1d123ccbda22691c2288c70f1cb4df589fa2bbf665e9f0b261a0ea25400457fdd6494c16ad518d4b22580dcf2a085fa5243ac0f61dc3d72400a1e12e6628512bc54372fcc2fd6f3aa2a5174af0607aa5cd376c3a7a55cf6eb2d4d9761fc43dd9628435f8f40daa4e4a9a74b6b133fed1819b185305b7b097f1413171849a02880747069459dab3", @nested={0x1df, 0x7b, 0x0, 0x1, [@generic="876c68a38685c8da440c76404d1a81066cd05e5829c51ca5abb258a4e20869110b7cd35175c0b20ff8448891c3e0b0effde2d9a1a92721831ef5ab5824aad7b955cf9c4423b0c7fce7d127fe1ba20be6fad7b31a581f2c5af020fd14766213cec735747517085a88c38672d4b4a0a43c043e542a2226ec57a6c427d42885d66572f955f741f8bf978e8caa2a70a34f81b4118e5733ad13", @generic="d606648dfc7bc9b0c4471c469e0596d84cccbea887f77fab411d5f1253b5a198bce089bf755c53d013e8d02d9192d4af81d1550909b6459cda1d993a8aa31aaebedef973191125e0ae5ececb", @generic="0df71751d9a78b1e55777608aa54cd921e7b7180940924da11135220938650249be5c59ae5e2ace0776afb1e653a97aebb4b153002192f687b5123549953cce54bf5bf6aa7c474fb8ce4c1fda1d335ea0648acd466a9ec4565561f443910ee4fad1a30555aa5094bc3e0fe40c43de3f40589e1d185351d09fa31167966bebfb81345f00a5a1d06a29cb40a93af8fb760da4707f279429f9d4f20c0de761475c00ba8d6d6ea7190af5aa4a76c1fd28ae5f6211c902526be9ee88091b4b7bc15981e8c3e37c342a250ac6141a9d9180188a27bfd8c2b0747bfcbe23e3c673460674846d9f3", @typed={0x4, 0x29}, @typed={0xd, 0x21, 0x0, 0x0, @str='/dev/kvm\x00'}]}]}, 0x2b8}, {&(0x7f0000000f00)={0x6bc, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@generic="f290cb214a4cb6f837dd77b19f40b2fc061f5d02b0e61dd0f7db595ceb94ad9965fb0d3d13c99bbec85004ffe31d765b82fac92bac23d6032f1357d0ec8e4ff3dbfb03c6f86916c5fc3af2d93b91388c41f12c76b4676684099e81f06b46d6fc538ca2ed67525bdb960b697211b727f8746c288376ee29ca45bf87fbe86b0ae7a3683f8177f0cae700fa336b6b63cd81aea4c6604c9fc857341cb95b0cf53dbe9b0b21955103d9b0e012ad35963203a14b910ad8c4", @nested={0x2e, 0x90, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @uid}, @generic="5a27e607cf241f7fa60ab063fb2caa138845345b4ef88c55a0e5c9e0a519ed028171"]}, @nested={0xe5, 0x9, 0x0, 0x1, [@typed={0x4, 0x90}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="df2aea5475e753a3c5c703669a876d60a33259c2e23ba0ead931d2e5bec473b4a4370487a1269fbc6f2d1977ee22d1e78fbc6fc18b4a2adb866efc6b736395034e736c35402642bb338fab3d353d01d7f6cff91e73c332f951e9ab936e983579004ce64df99b0023768446a8c097028b70b836ed37893b1b1b77dfc4571188368a0e07dc9fe70fc8d730421a52709372b05ee0aeffa17f6fb954e37d67705c7921310c344d23c8532a632aeb2ef3eb241d89e34b47be2849b4295153582aa3280afae4d3572fa62b51"]}, @nested={0x12d, 0x10, 0x0, 0x1, [@typed={0x9d, 0x3c, 0x0, 0x0, @binary="8f7371e765906f18d196ac1c050bfef4c992972b9b256da57956d68c2e8092ae47b8ea668d58fc3619004caa2e4a57b801f121d6e5adba099645031777b1bfd3794797fc7a062b16c52b555dc08da042447c9029233bfcb9e6563fbd4954087778f1aa6f1ae72a2d4bb0d9901bca12137c0fed0d5e6e7ccab2ec6c846b894196e60721bf5256a2b3bd4ed73a9e4293d5256c2e5dbca5e590f1"}, @generic="a80f43734f673f1d8072ca6bff1fa8a603dd95b2a30ba2dfb61e2a972ab1b4dbc44744e9256e8ee23da6aa1ca42353a169ad0379ba712b69eab6b3fbefa2158b7298fd54002ad3895547f2d545c08cb0a21ed28e799fa6cd4b", @typed={0xd, 0x37, 0x0, 0x0, @str='/dev/kvm\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x10000}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0xd9a}]}, @generic="a0d376eb1c047a3330b47fc6d6a1a47aad88a306e419d76627e1f0f3bad8323c85a6be83b59f255b7dea7c7e0b122e686b9ae94abe5a071d1ddd5c39d862d356d06e78b46feb0611aff7893a7b", @generic="429e977fa91f5d070789c9a332e45ecb854d6044b49504af2b909f00e311f289485cf838686b920c3c062b081fd84cc9227252b94267e6f1dd9b3e13e343e2511537f894c73891ecd7e3ad5060076ac76a0d2c38429762ac8dfe09b68bed625cc571626ab50a179d38d8a8e195553e8edd1309648dc0343de825893cfc3f50926932d89cc7e13c4901a21f90738322d731e2", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@broadcast}, @generic="3ffeee7c7ee19f496de2dd3ba43138d0d9e91525d745aa9ff98422af4ed166fb8013f913c2a425672c6611bd4b4334c00cef17cb2fb9791b8fe046d8b5db7d4ab23531d4a236d5e30b640f64826ce6937908b2c01e0efe331f851cdced15718f2c", @generic="8bf78e85b481ad4b576ef4f43f37c09f4b831af2c76ee018b2db8d1e8e089e7b281c3a0e1bca3b20d5f9358854337da6894cf439678e54167b0fded625cca97dd7e4bdfe6539e6960f630e333309cb671143110b0c05ecfbb880a84a4ecff10abbd172591dca0be3ce8fdd62895db11b7acd8b4bed3835f5ad07aa3315429cf8852d0faeaa8a228e39144e7dbf1b83a5f7041cd9029fed0d8de4de628a846c55d76888f671fa51c3a1eaed6621cbaf909a516f19e913b0286dd87cdeb2a63ec8fdb4603af1eb6ee4ce96b5cad059b82212210b743ce0cfa006", @nested={0x18c, 0x6c, 0x0, 0x1, [@typed={0x5, 0x3b, 0x0, 0x0, @str='\x00'}, @generic="691862154bfe695fe9bbdb4ead7b4e18955ad3bcaf63008e93a654da8d0abd642759fc5ad3fb75d80d169de8813c77d5cafaaa65be705f42beb3641c66a49a46214933a7bbbe43f3e35b509a83e586cd9b3ae42585f3c34ec12bdd5974611f387f9bcb2935a6e2b8529110d3f0dae744ef6ad0714819c45ce0537e1c9b5ad2556a1053533fc7c846cd1c6aed22a6d6aa2439015767ffc0ec9bfc347993c441f2f28ddc37c531a915b551075a89a5557ce16c66571bb91d20faec30fa53e11e14e4d45716340454a2713969e7694332056f28a18d3b763c0a9fe7e427ed87f15c7a417ed8", @generic="7cab0ca3b9c431b27ef75eb7018379b8f70c5696da5a9a3425bcaf86a62c664e0927cf808fcc093b2cc74653074683cf4248", @typed={0xe, 0x73, 0x0, 0x0, @binary="218d165e80a28dba167f"}, @typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="e7d4b9", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0xfffffe23}, @typed={0xe, 0x4b, 0x0, 0x0, @str='^&-*\xdf-+-[\x00'}, @generic="ec9ad464dc1f81b8199e9ab06181ce671fd8c3036befebf7ebccc53a3cdfefb726a612"]}]}, 0x6bc}, {&(0x7f0000000480)={0x10, 0x34, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}, {&(0x7f0000000940)={0x70, 0x21, 0x400, 0x70bd28, 0x25dfdbfd, "", [@nested={0x48, 0x79, 0x0, 0x1, [@generic="786fc0dfc36282e887c7de67f4920c330c9cd8b743e02eda5aafcc388a28aeca9ad91d1826342fd8374c85ba9ff09a326425174d0a649c1689dbf1f91220f0be", @typed={0x4, 0x74}]}, @typed={0x10, 0x43, 0x0, 0x0, @str=':*/{(!*.-.]\x00'}, @generic, @typed={0x8, 0x2a, 0x0, 0x0, @pid}]}, 0x70}], 0x6, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0xc0, 0x40}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:06:03 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x2, 0x4}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xff, 0x9, 0x2, 0x1300, r0, 0x2, '\x00', r2, r4, 0x1, 0x0, 0x1}, 0x48) [ 3654.828370][T25316] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3654.883264][T25318] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4800, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7400, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:05 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee210090582e1675cd054a0ce3773fb"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee210090582e1675cd054a0ce3773fb"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) (async) 04:06:05 executing program 5: syz_emit_vhci(0x0, 0x18) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x2, 0x4}, 0xc) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (rerun: 64) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xff, 0x9, 0x2, 0x1300, r0, 0x2, '\x00', r2, r4, 0x1, 0x0, 0x1}, 0x48) 04:06:05 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7a00, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4c00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:05 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x86}, "88805ad8776bc14798bd78a2a3bee663047e71ed30bbe0da49d4422a741f17b9c209054a8149aab3179af856e91beaaf09296af6c56e781c48bd102af3b7171e47d81caba2e4326164ad39ea7888b329529c2ae87bef2c12907705f8298bc142878e2f19f415866a670f1bd98a7b93b91112f139feab073c86833d48d56e1805ae1dd7fd5b6f"}, 0x8a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0xbbf}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r4 = syz_io_uring_complete(0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="66ba430066edc4e259be841b631e000066ba400066b8270066efb9800000c00f3235008000000f300f20e035000040000f22e026450f01c28399749c0000040f01c5b805000000b991cabc080f01c1b8010000000f01c1", 0x57}], 0x1, 0x0, &(0x7f00000003c0)=[@flags={0x3, 0x200000}, @dstype3={0x7, 0xb}], 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1f, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000a7010000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000590400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000077a7b9372068f0645d7d2271c1837354b4035f2efdf0e5682eff955d744896c2c3a17b58d7c2ba278a6df019387b7d81031f6d39906e5261c8dde62f9d12a97678572d7f369f111f80019cfb251f39a75ee01bedc99921617532b20060", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d527c0ff0400000018000000000400000000000007000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x2}, 0x10, 0x0, r5, 0x5, 0x0, &(0x7f0000000340)=[{0x29, 0x3, 0x3, 0x8}, {0x0, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x5, 0x2}, {0x5, 0x2, 0x10, 0xb}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0x3965}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3657.496037][T25333] net_ratelimit: 2 callbacks suppressed [ 3657.496101][T25333] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3657.566205][T25341] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:05 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x2, 0x4}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xff, 0x9, 0x2, 0x1300, r0, 0x2, '\x00', r2, r4, 0x1, 0x0, 0x1}, 0x48) syz_emit_vhci(0x0, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x2, 0x4}, 0xc) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (async) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xff, 0x9, 0x2, 0x1300, r0, 0x2, '\x00', r2, r4, 0x1, 0x0, 0x1}, 0x48) (async) 04:06:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x80fe, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4e00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3657.934709][T25353] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:06 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3658.025766][T25358] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x990d, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x4f2b, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3658.387390][T25363] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3658.656565][T25365] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:08 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:06:08 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xef66, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x5000, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:08 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x86}, "88805ad8776bc14798bd78a2a3bee663047e71ed30bbe0da49d4422a741f17b9c209054a8149aab3179af856e91beaaf09296af6c56e781c48bd102af3b7171e47d81caba2e4326164ad39ea7888b329529c2ae87bef2c12907705f8298bc142878e2f19f415866a670f1bd98a7b93b91112f139feab073c86833d48d56e1805ae1dd7fd5b6f"}, 0x8a) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0xbbf}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) (async) r4 = syz_io_uring_complete(0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="66ba430066edc4e259be841b631e000066ba400066b8270066efb9800000c00f3235008000000f300f20e035000040000f22e026450f01c28399749c0000040f01c5b805000000b991cabc080f01c1b8010000000f01c1", 0x57}], 0x1, 0x0, &(0x7f00000003c0)=[@flags={0x3, 0x200000}, @dstype3={0x7, 0xb}], 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1f, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000a7010000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000590400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000077a7b9372068f0645d7d2271c1837354b4035f2efdf0e5682eff955d744896c2c3a17b58d7c2ba278a6df019387b7d81031f6d39906e5261c8dde62f9d12a97678572d7f369f111f80019cfb251f39a75ee01bedc99921617532b20060", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d527c0ff0400000018000000000400000000000007000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x2}, 0x10, 0x0, r5, 0x5, 0x0, &(0x7f0000000340)=[{0x29, 0x3, 0x3, 0x8}, {0x0, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x5, 0x2}, {0x5, 0x2, 0x10, 0xb}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0x3965}, 0x90) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:06:08 executing program 5: syz_emit_vhci(0x0, 0x18) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async, rerun: 32) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3660.593884][T25369] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3660.727608][T25375] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xfe80, {[@mptcp=@add_addr={0x1e, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6000, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:09 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3661.046209][T25390] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:09 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x86}, "88805ad8776bc14798bd78a2a3bee663047e71ed30bbe0da49d4422a741f17b9c209054a8149aab3179af856e91beaaf09296af6c56e781c48bd102af3b7171e47d81caba2e4326164ad39ea7888b329529c2ae87bef2c12907705f8298bc142878e2f19f415866a670f1bd98a7b93b91112f139feab073c86833d48d56e1805ae1dd7fd5b6f"}, 0x8a) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') (rerun: 64) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0xbbf}) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_vhci(0x0, 0x0) r4 = syz_io_uring_complete(0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="66ba430066edc4e259be841b631e000066ba400066b8270066efb9800000c00f3235008000000f300f20e035000040000f22e026450f01c28399749c0000040f01c5b805000000b991cabc080f01c1b8010000000f01c1", 0x57}], 0x1, 0x0, &(0x7f00000003c0)=[@flags={0x3, 0x200000}, @dstype3={0x7, 0xb}], 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1f, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000a7010000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000590400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000077a7b9372068f0645d7d2271c1837354b4035f2efdf0e5682eff955d744896c2c3a17b58d7c2ba278a6df019387b7d81031f6d39906e5261c8dde62f9d12a97678572d7f369f111f80019cfb251f39a75ee01bedc99921617532b20060", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d527c0ff0400000018000000000400000000000007000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x2}, 0x10, 0x0, r5, 0x5, 0x0, &(0x7f0000000340)=[{0x29, 0x3, 0x3, 0x8}, {0x0, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x5, 0x2}, {0x5, 0x2, 0x10, 0xb}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0x3965}, 0x90) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3661.169960][T25392] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x2, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6573, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:11 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:06:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x3, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:11 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 04:06:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x66ef, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:11 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:11 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0xffff0000, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000c40)="65b8e15b69477d79a78e94f10d9cba2568fa51bf9cf6c8688531bd482e07f06c333c263af579dacc6d0fdfd98c272fd4c7a174f15c23bd24883ee2bb87c1bf308c85b7799156782d50f4f521c237b856f631990a9e01a2857873e37facde2c45a88247c7b99638f9cf44d25783e62afc705d4255557698765aec592b0dbc2a4cb9d3836a62196e6d98c7f6ffef49a5ce6884921c2fe29ed28552a9baedefe44578e58ad2904539461d09aa33ae68653267d7c146f3d6854945e73abf0b1d2b4d2818746eef8ad9a011cc9251443b02427b1e109a711067e8e52aa76161626207ebd37558fd09df5392c43cc890d8a14134f68b37cbde32a9cd9c06f7c4dc8d257f4e8ce7c7c4c9acee06f21f4c7c364299ad45c8f27664b252374e17f1852474be282286fbc128be43834a612ab670fc9f79587e4d557c2da3e38d9867a514cc4371719c293e0edf9afcfda5e4631d85a1ce815c7f25bfe227149299f8a9bbbee51cfcf0ec9600333dc3f0127757d72ffbbe2f867049674634a6b9a65b7cbd46fb78ed7421fc937570bb556b8adac9a9afd29a6b4288096e46c93342da07e78961a3b2bfeed46189dc85e2c7c186fb4ff6bc83576121fa1057c4ceafec25050ee36f4a7a022da7b9755930021af1a46824e75430035766b4598e6c2cb1ff29715dfaefbe236d366a0d2a3e68c464f14ae899c0615e15e6e08690a0861170fc3610a71593a5b0b93abf168af53eab744c87b147ca25f3f6ff67de9409f3875535a4f4449768a6d43ed6240ae4d45af8d67876926ddec5bfe7dd6ac381f58c7f362b4fe9bdb3fc36fb99cd07a64646d0ac344e2122c2b5251f9d5fc610de6935823e832aeaa4fd9e6670bb059f36b3ce23b836dc98e6b5fe8665fb0c1f1a68c30b6c22f925ff4a16d456148045cd8b5185e770694997de211bb35377dc2d490b562e674c2bc1bab559623ceaf579925ddebafbad50c0915adafdc0048ea6edcca3d13d833dee991bc955291c51951622756b25c49ff19ba301a5ce853dbe453d5d3ca852b74971c5ff7b508d5c7657cd91f5f0171ea1c23fbcbcb6e52b57a9a96930736b51a7985b04e930c34eef77a2640ed2ed08692bfafe22f9d5951269f89c65fb203755ff9407ccfa30d845f6c9d153b58eb5a8d08eba687e856c463661e3aaeece8f76bd1951ab1933545997cdb42cb786b59ce5a60397a0c4cc82d46c4ffbc136e9e78b621326907e128c14acce30844c1c6108aff09ebfd3f6255b278d4cdabdd75a0f734109b05d36d68b646284c4a1477a7b78b9b8e3ace7eae25794f7580d9288a6bdbb18b1f85b3f4bcfac24b0c3cc50809cdc6df4d5e39f355143fbb7eb9ae7c1c5989deed37ce57d1dc86201c3f38655e050700ed078ce535c1eee5899e59c841014bdfb3a101888eeed30d613943f53e00cc8af9267645ee02f35a7af06f3024b1c419e7ea6b252f89f25b3cacc72a2a9b3c9b8e0b073f48585d3584cf03511e46f5852fcf087b7d21d84b92c238ebcb3ed963827e2d76f6727cb4373b222de3a9be4a7e64ad03881497c6b502da45d9e9fe24ba045c456cdde5b424a2c665520651921950377f720f401428b5cdddd8bc9f2ba9a729ae24951c3741bb4c235468515a9a4a8511d32a004de489c9d19f651accd3152c256c190b26e815443b1771186bf8af32ebb8e8ce3187bcf48adc65b1adfc1d6c575ce0e304e9b67caefe70d9873940c966d59097ad74fd150e5472b94aa0dede4a98989ea5c27c33e9c2a3665f0549e031fd9438f57a230c4bda0c46735d7685923de1d547d02d44ef5ad4248b3a50cfac13c9b2ae3f870974ddd48dc452d24947ff6cadda9f1b9668e6bfedce50a75c6966af1aa98f83d8cd912893ede8fba35c5140ec5d670759554bb2f3d23949d39a4005d17e2611574629af652cad33ef37aa2b1bde8bcf8c6006187d0a59a8fbd67badbb0494bb4576054425eefb6a76c709386ef217ae15b71e557c32392df6864b39d06522ac48550efaf049b15eadeb201dd8fd36ebe5ab76aa16ae0228bea900aee4738231e3ae9b50eb14b8c0dc79b0a894d1901635baac0eceb99f24eeb7244fe927c6afc6f79e086cd6b69ba67befba6e438aea9e0c42751dbf1e0e379490c0d4e8ba3a13fb756e21911d83f805bb4d09c9cea2ad78278b8755f9117b328d003cd174a5355ebd21b371e9644424c053752157edf315de57b36b0c213a2b24859cca19d770e46dfdc0dac5ed8c923b4584a447d94c19dedd08579eea74323b245e5d96bb0c8756083ded08bf8fb1ad33604c7e85417c07edc94d0718691ec1ac86587b52f9a70b42a40b0560e8443ec8d34fc3a81c53bd0ad955bdf3e5e3f8d17401b45099d0e5e7b90ea056a4fd08b7ee07a044ca2bfecd456ebe5e52360fc7e48df00131cf8564ced0b26e6e2b76e663092648a745a4ece2f474e0304e88f0bccd976df40e674b3a6850b8c3135c40773ae312d32b5fff52f7113bad7995fff842cd44cc3d615d41f0d44a23a3ad9be7bd0e0e653b6c8dda1a30407fa0ee797e8176c32d79dde93983736578c82360052687f14423df96b8ecc2a2db29b55800ea2e7cec579887925449da6bc2b3c32b5f364dc14387d44cc614a62f8a26644b0ed744251616154055ce148cb224107c2e7aeb9a675b8a83684dc86ba37b5fe19fd3780a2f5095b21c2f4060688b7f77157411bbe066f90104a261ca4ef3497252c39c65ad8c50e8c24151403734e53eeb091da5d583d9c9e24883e0e502da361428f79af3db53e9f2a29d960c511b96605d8c7147d8027f2879ae34d9c931faf7b47bceac99dadbee6efbb73976e7f2c46bad150263e37d6396574f0e4d2ca599d72b67e21640491455cf26dd876eed3f3eb2e032e7880b541992e33442821f79fee1bcf08c57a282db1cca2049834b1ea7bc7dc9889c92c8a8621c9d080c97cbd65ee8d23c4c6d7f78692ecae4139b8bd4cc792edca646a052816efc9398abe5894a4936a1b9756a5a0cabdac7203e09a184bc5c91ad7b4967495709b250f1f0c3b03a57890f0c6cdc91ed2c06f081398dd69dd8770400be3d597b84ee283990fce4f629de27c3c6f23ef3f59477edba3c0fb6448a84a887acc5938b5b8332d59615950bddb1c6c2a1d8359e286326a4a97a7392d194a0f10b1bbc67a8d77411b357238c8a8c0d748961f263a2ac81ce9fd0df7ba7632089d244efa01afae9b725057e0afa1ce22dca3b5457c63b3455eea15756af6bbef762a7f526a56bfcdd30707275a7b668bdb287be6a2ab59b45c2a62751dd7f5c27731b5b43210650d27cabcad504c304f3817b7568dd8f477aeea97a48d19f437eab25e2b4baec6668c090f9ea7c1ea72afa86251c988b55a9f3fe85b5c47bc3b5aac9ad9a5445b1b4ccdefe9a35cb20eeaed0117a79b77789e207d419ee31fbdf1fa7cba28407daafa66a2e266019584a88a92c2f5819876feece388dfe1afde87d11b92a69df86b50e6115dc59daea769c2977b79bd7a1bdb1307cf096612a149b0d8bb0ee0a030a2ca399c43883b0c0417b7437d72ffce8237f479a759b90afd653a0e5bd150f455b058e6bdc902571eb127c149559d5f2c4cadaf1e4c40f2ab1bb205731fc4f6d5d899522ba995e518508a456424bdc5a59b1b85a7816eee25bf751879c15ad5fb18142c13cb95dcb132a54d22b23dacc7f91ae2eb88236ab5ac079b29583291e96469b90891aa3993dd2037a23981ba51bb0d3e1727772b0bdddba779ea7f5449ba0ef020d770eaec274f9f71d9f5469614a988736d893d940bb7d298701835dd8caea10564ba174483e72afb62f83af6c2f88fadca6c9aadbf7a5bfb7f3ff10ba27f4ea37638557e518fc804a97e92839cabdb789c51441bff3333a188dc8756deb88060f92ddf6b6883982a16f4380d0ba8c00c83931fe19bd00525010b0e9dd299915c2395292deda59355d9adf4b55115a08e08517d2477eadd7a7d82f7c0869d6b8b3bb96a102f74958ca58a0e8d7c12c66c75b8a696d41605d2db66d9fa18d3e42e6859b78444e6b04241dd44d20910cfa246d33200ff2da7fcd14eaffc1fd9ca83b9abff0e6bf283ffdd9e917cfedad3afc480216413308a8e610754c159e267b97db2525487c37d52d39fdb7eab2f2cc71699e71ca1db82afd6e71d1052c1fad5a4bdc1544b6244aa8ce8c61f75303bbaf99ca5c9a2af32d8c2c885440660a051983d1b430f1143e3b0dade30f3fedc9660b19301192a340d60c5ca5f73854f382bab3b321d17dbcf19017aa7d42057647fb71fdae722abd8a8c1ee9fafee0ec2a2083caa745dc586be7809fa805b78730c021cfb497f4b314e45fedac7aeda3e3cafbb40bcf3649bf5985d0ac856a7d29ddc021be8ea82762cd62cd9c619554fa882bcbe4e179477d2aae810ef917a3de872561cbe534181923633f52aefcd99a59df1e428c176fc9a307bfcaacff716c3ac561ac17065a3c3d373691551057d45a99971ef5894ae4b27acf0dddf8ae9276bd812c99f3d3fada89af493d843f75cf24a19c1eefd34ed82af162a34ad83f80e736e5ce78b9ddc1ed12b882e39cd64333083eada516b597c1a41524577c7c8c448f81fb78b2e630523983ee41eb3064b9dba50b99c0e02a65bde09fcf9bcc1683f47e9efaf4ce74ede07567525bc1f96fba2c1111d0dd1e3b8b1973f9cd92e3db5fc24cf5944c6af84ac7acfffeeab61816e8a1284f5afe0c99a86a226778f81cbbb74ef95ed777cef3cc348b7a0007d476b9e8015996a65e338818726d9e3c764578e533d9682e047bba980ee9ed311a044c152a81b2f86ec840acb7ed5eb23c269cf063bf37f91f10299155a33d02ebd858e57fc0b2dd261f07bdcbe7b35ec406d88f42b70142522c5c4c10df242deef1df879e17f1cf27aa304637b89ca8ff34a4668ebcf829c7fcef0f5b8672ff71dde60dfe6693b6e9ad0055cddfd4d869743b37468b372ae3d7324bafef57a1b18d0bb9c0a5ecd3f84cfc86aab354cee673e95d26973f520b7ada004d19d7982bd8ba92e993c34ae6e533891301f58c5609d52f3e9dfd65728bf11389134164980c50d67b30a1fa4df77aa5665609f3e629a99be1fe5ba7a403d20d5db5123cbb3e8d250beaeeef224c45c1aad37581f572e8d4a59bd5b59049326904ac9e11f71d8b553dafb0e8cdbc81721f4faa1f00ceac40d84f7612d61b333e509bb85a6647e5d33a1308bdd9bb95840e8f80fd349a57011cd29e15aab280ad12b66fef1aa8f851d6cfd1bfd3511573ffff56599fbae703afb74b550e7a593d1fc2027bc741c0bbd6585fffd98299de80c7b148611de4ec582aa3cafd7b0220bd923a7e7f7869c4823b4da1f9e1a52afa32660522de26ff8dcb706683318a70c6108279707292d930756f6a537e2e24e88c9acecf0197335cb765a06daf681715e955288484a78a45f425cf0997a0489ff5af85f419f7c99951710423d1d5bc90a6bab3df8b35436cc228b16594a3a19919cba62129cd7819ca6fdccf97a3a82d6ccce53c21940ab582ba1140a9cd3c3697806961c95a80f98a0aa923856981610a05b225e97fc480333d72bc8e856595d993c5061d86df22019ad7b195e0210e1e875573ee82685ab388fc4932db030aa0e2e624938e3c2b3eede63b9de9245ded20706ddbc0119552bfba1d4f27011a7e744e926432247b0e517f0ff323ff81bdcaad10ba0354bd0b07c9e9f538ce0870f0fe854807bc7b938d9fce562dc60a1e6045070265b5177f8a980", &(0x7f0000000300)=""/123}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3663.679572][T25409] net_ratelimit: 2 callbacks suppressed [ 3663.679637][T25409] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x4, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3663.861312][T25416] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6800, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3664.073311][T25426] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3664.219021][T25428] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x5, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x6c00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) [ 3664.571141][T25430] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3664.669325][T25432] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x8, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:13 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0xffff0000, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000c40)="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", &(0x7f0000000300)=""/123}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3664.921063][T25434] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:15 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)={[{}]}) 04:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7365, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:15 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_emit_vhci(0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 32) 04:06:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x13, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:15 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:15 executing program 5: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0xffff0000, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000c40)="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", &(0x7f0000000300)=""/123}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3666.975323][T25444] TCP segment has incorrect auth options set for [fe80::aa].0->[fe80::aa].20002 [S] [ 3667.115506][T25455] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1d, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7400, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:15 executing program 0: syz_emit_vhci(0x0, 0x18) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x7ad5, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 04:06:15 executing program 5: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x15, 0x100, 0x2, 0xcdb, 0x188, r3, 0x1ff, '\x00', 0x0, r2, 0x3, 0x1, 0x3}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3667.487905][T25460] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x22, 0x11, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7a00, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:18 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000041436120410e5150e8d50000001186ee09050d001000"/37], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB]) 04:06:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x2, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) 04:06:18 executing program 3: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000440)="fae8b9d73dce44a542b31a32e1865feefa38825958560e278b90af0c1beecc66cdedd3fa8582aa16898742fce43d55b40c6d70d01ccdb21ded1e7d5ab81bc8861a1eca1b0c1d033a0f946c6630b16c32b957c2c067c4dfe262e7ad434df33958de006b41958316c95b0ce68d2577a7ec270ab74317df51f1dc256bc24d2886fd1ca6510c2d1a5e0b26a19618fedf12ce8b56e5bbbf05449aca6ddb5065bd290d48f68d700f3c0f4fd65b783474ee33d39965255a244d634e96df7112fd1a1e376c73375de1401d39c500"/214, &(0x7f0000000080)=""/112, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x80fe, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:18 executing program 0: syz_emit_vhci(0x0, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0xfffffff9, 0x120, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x0, 0x3f, 0xc77, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)="ab707219cbf501f8c941c27d655ce8cbbe0e8b213e33a49654373f6754f6baa1ef8d2e6253ed6ebd", 0x28}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000004300b5000000000000000000"], 0x18}}], 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:06:18 executing program 5: syz_emit_vhci(0x0, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=""/122, 0x4000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x1, 0x8000, 0x3f, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x15, 0x100, 0x2, 0xcdb, 0x188, r3, 0x1ff, '\x00', 0x0, r2, 0x3, 0x1, 0x3}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b821010f00d0660f38825f07c200000f01d466c1200066edb8ed0000000f23d80f21f835c00000e00f23f866b8f1000f00d8b9800000c00f3235001000008fca781007f1fac93f", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3670.128564][T25489] net_ratelimit: 3 callbacks suppressed [ 3670.128628][T25489] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3670.164558][T25485] TCP segment has incorrect auth options set for [fe80::aa].0->[fe80::aa].20002 [S] 04:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x990d, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x3, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3670.586163][T25501] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3670.608990][T25500] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe02e, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xc, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3670.994501][T25503] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3671.053117][T25505] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 04:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xe803, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0x0, @loopback, 0x0, "7a7cf3dfba9ee27b"}]}}}}}}}}, 0x0) 04:06:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x2, 0x11, 0x0, @loopback, 0x0, "7a7cf3dfba9ee2"}]}}}}}}}}, 0x0) [ 3671.287579][T25507] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3671.418369][T25509] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3671.429589][T25509] ===================================================== [ 3671.437015][T25509] BUG: KMSAN: uninit-value in subflow_check_req+0x1028/0x15d0 [ 3671.444763][T25509] subflow_check_req+0x1028/0x15d0 [ 3671.450086][T25509] subflow_v6_route_req+0x269/0x410 [ 3671.455583][T25509] tcp_conn_request+0x153a/0x4240 [ 3671.460774][T25509] subflow_v6_conn_request+0x3ee/0x510 [ 3671.466528][T25509] tcp_rcv_state_process+0x2e1/0x4ac0 [ 3671.472271][T25509] tcp_v6_do_rcv+0x11bf/0x1fe0 [ 3671.477240][T25509] tcp_v6_rcv+0x480b/0x4fb0 [ 3671.482030][T25509] ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 3671.487854][T25509] ip6_input+0x15d/0x430 [ 3671.492362][T25509] ip6_rcv_finish+0x5db/0x870 [ 3671.497245][T25509] ipv6_rcv+0xda/0x390 [ 3671.501471][T25509] __netif_receive_skb+0x1a6/0x5a0 [ 3671.506893][T25509] netif_receive_skb+0x58/0x660 [ 3671.511994][T25509] tun_rx_batched+0x3ee/0x980 [ 3671.516842][T25509] tun_get_user+0x53af/0x66d0 [ 3671.521776][T25509] tun_chr_write_iter+0x3af/0x5d0 [ 3671.526966][T25509] vfs_write+0x8ef/0x1490 [ 3671.531432][T25509] ksys_write+0x20f/0x4c0 [ 3671.535976][T25509] __x64_sys_write+0x93/0xd0 [ 3671.540713][T25509] do_syscall_64+0x44/0x110 [ 3671.545488][T25509] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3671.551568][T25509] [ 3671.554155][T25509] Local variable mp_opt created at: [ 3671.559465][T25509] subflow_check_req+0x6d/0x15d0 [ 3671.564699][T25509] subflow_v6_route_req+0x269/0x410 [ 3671.570086][T25509] [ 3671.572581][T25509] CPU: 1 PID: 25509 Comm: syz-executor.2 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 3671.583362][T25509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3671.593660][T25509] ===================================================== [ 3671.600698][T25509] Disabling lock debugging due to kernel taint [ 3671.607042][T25509] Kernel panic - not syncing: kmsan.panic set ... [ 3671.613647][T25509] CPU: 1 PID: 25509 Comm: syz-executor.2 Tainted: G B 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 3671.625709][T25509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3671.635898][T25509] Call Trace: [ 3671.639269][T25509] [ 3671.642286][T25509] dump_stack_lvl+0x1bf/0x240 [ 3671.647126][T25509] dump_stack+0x1e/0x20 [ 3671.651411][T25509] panic+0x4de/0xc90 [ 3671.655494][T25509] ? add_taint+0x108/0x1a0 [ 3671.660079][T25509] kmsan_report+0x2d0/0x2d0 [ 3671.664767][T25509] ? kmsan_internal_chain_origin+0xba/0xd0 [ 3671.670761][T25509] ? __msan_warning+0x96/0x110 [ 3671.675716][T25509] ? subflow_check_req+0x1028/0x15d0 [ 3671.681195][T25509] ? subflow_v6_route_req+0x269/0x410 [ 3671.686742][T25509] ? tcp_conn_request+0x153a/0x4240 [ 3671.692086][T25509] ? subflow_v6_conn_request+0x3ee/0x510 [ 3671.697916][T25509] ? tcp_rcv_state_process+0x2e1/0x4ac0 [ 3671.703625][T25509] ? tcp_v6_do_rcv+0x11bf/0x1fe0 [ 3671.708754][T25509] ? tcp_v6_rcv+0x480b/0x4fb0 [ 3671.713613][T25509] ? ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 3671.719603][T25509] ? ip6_input+0x15d/0x430 [ 3671.724188][T25509] ? ip6_rcv_finish+0x5db/0x870 [ 3671.729283][T25509] ? ipv6_rcv+0xda/0x390 [ 3671.733675][T25509] ? __netif_receive_skb+0x1a6/0x5a0 [ 3671.739124][T25509] ? netif_receive_skb+0x58/0x660 [ 3671.744287][T25509] ? tun_rx_batched+0x3ee/0x980 [ 3671.749299][T25509] ? tun_get_user+0x53af/0x66d0 [ 3671.754390][T25509] ? tun_chr_write_iter+0x3af/0x5d0 [ 3671.759742][T25509] ? vfs_write+0x8ef/0x1490 [ 3671.764376][T25509] ? ksys_write+0x20f/0x4c0 [ 3671.769009][T25509] ? __x64_sys_write+0x93/0xd0 [ 3671.773898][T25509] ? do_syscall_64+0x44/0x110 [ 3671.778707][T25509] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3671.784923][T25509] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3671.791171][T25509] ? kmsan_internal_poison_memory+0x90/0xa0 [ 3671.797243][T25509] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3671.803239][T25509] __msan_warning+0x96/0x110 [ 3671.808163][T25509] subflow_check_req+0x1028/0x15d0 [ 3671.813483][T25509] ? tcp_v6_route_req+0x57a/0x5d0 [ 3671.818695][T25509] subflow_v6_route_req+0x269/0x410 [ 3671.824072][T25509] ? subflow_v6_req_destructor+0x190/0x190 [ 3671.830061][T25509] tcp_conn_request+0x153a/0x4240 [ 3671.835280][T25509] subflow_v6_conn_request+0x3ee/0x510 [ 3671.840933][T25509] ? subflow_v6_send_synack+0x1d0/0x1d0 [ 3671.846662][T25509] tcp_rcv_state_process+0x2e1/0x4ac0 [ 3671.852195][T25509] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3671.858199][T25509] ? tcp_rcv_state_process+0x279/0x4ac0 [ 3671.863896][T25509] tcp_v6_do_rcv+0x11bf/0x1fe0 [ 3671.868857][T25509] tcp_v6_rcv+0x480b/0x4fb0 [ 3671.873602][T25509] ? tcp_checksum_complete+0x2e0/0x2e0 [ 3671.879427][T25509] ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 3671.885245][T25509] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3671.891269][T25509] ip6_input+0x15d/0x430 [ 3671.895671][T25509] ? ip6_input+0x430/0x430 [ 3671.900518][T25509] ? ipv6_is_mld+0x3a0/0x3a0 [ 3671.905519][T25509] ip6_rcv_finish+0x5db/0x870 [ 3671.910363][T25509] ipv6_rcv+0xda/0x390 [ 3671.914586][T25509] ? net_zcopy_put_abort+0xa0/0xa0 [ 3671.919869][T25509] __netif_receive_skb+0x1a6/0x5a0 [ 3671.925154][T25509] ? ip6_rcv_finish+0x870/0x870 [ 3671.930179][T25509] netif_receive_skb+0x58/0x660 [ 3671.935338][T25509] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3671.941427][T25509] ? tun_rx_batched+0x37c/0x980 [ 3671.946519][T25509] tun_rx_batched+0x3ee/0x980 [ 3671.951354][T25509] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3671.957356][T25509] tun_get_user+0x53af/0x66d0 [ 3671.962281][T25509] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 3671.969499][T25509] ? vfs_read+0xbc0/0xe00 [ 3671.974027][T25509] tun_chr_write_iter+0x3af/0x5d0 [ 3671.979308][T25509] ? tun_chr_read_iter+0x670/0x670 [ 3671.984577][T25509] vfs_write+0x8ef/0x1490 [ 3671.989056][T25509] ksys_write+0x20f/0x4c0 [ 3671.993526][T25509] __x64_sys_write+0x93/0xd0 [ 3671.998251][T25509] do_syscall_64+0x44/0x110 [ 3672.002890][T25509] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3672.008930][T25509] RIP: 0033:0x7f67fa67b82f [ 3672.013454][T25509] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 3672.033242][T25509] RSP: 002b:00007f67fb3e0090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3672.041813][T25509] RAX: ffffffffffffffda RBX: 00007f67fa79bf80 RCX: 00007f67fa67b82f [ 3672.049913][T25509] RDX: 000000000000005e RSI: 00000000200000c0 RDI: 00000000000000c8 [ 3672.058015][T25509] RBP: 00007f67fa6c847a R08: 0000000000000000 R09: 0000000000000000 [ 3672.066100][T25509] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000000 [ 3672.074178][T25509] R13: 000000000000000b R14: 00007f67fa79bf80 R15: 00007f67fa8bfa48 [ 3672.082471][T25509] [ 3672.085886][T25509] Kernel Offset: disabled [ 3672.090265][T25509] Rebooting in 86400 seconds..