ister$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:26:48 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r1, &(0x7f0000001640)=@nfc, &(0x7f00000016c0)=0x80) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001400)={'syztnl0\x00', &(0x7f0000001300)={'gre0\x00', 0x0, 0xa3ba63b4ef686985, 0x40, 0x20, 0x81, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x65, 0x0, 0x6, 0x4, 0x0, @loopback, @empty, {[@noop, @generic={0x94, 0x2}, @timestamp={0x44, 0x10, 0x2f, 0x0, 0xa, [0x0, 0x5b2, 0x7fff]}, @end, @generic={0x44, 0xb, "740c8fa55281ee8ac5"}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @cipso={0x86, 0x32, 0x3, [{0x0, 0x10, "dcc3aa429d30c3a42ef6a75fb486"}, {0x1, 0x8, "baf5c32b8d0b"}, {0x5, 0xb, "e6f3ac9975d6f5291e"}, {0x1, 0x9, "c2cdcbce8dc4b9"}]}]}}}}}) socket$inet6(0xa, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x33a73c6a59f49de2, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000002c80)={0x80000000, 0x1c, "76baf9cb7126f9c03d425ed979f446cd5ba999083549a3d4d5a05e5f"}) 00:26:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:48 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000140)=""/4096, 0x1000) 00:26:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) [ 3426.493898][T27975] random: crng reseeded on system resumption [ 3426.500337][T21076] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3426.805937][T21076] usb 1-1: Using ep0 maxpacket: 8 [ 3426.926286][T21076] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3426.940124][T21076] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3426.950035][T21076] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3426.963588][T21076] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3426.973605][T21076] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3427.146416][T21076] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3427.156001][T21076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.164166][T21076] usb 1-1: Product: syz [ 3427.168898][T21076] usb 1-1: Manufacturer: syz [ 3427.173500][T21076] usb 1-1: SerialNumber: syz [ 3427.456682][T21076] cdc_ncm 1-1:1.0: bind() failure [ 3427.464530][T21076] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3427.471820][T21076] cdc_ncm 1-1:1.1: bind() failure [ 3427.485306][T21076] usb 1-1: USB disconnect, device number 95 00:26:50 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}}]}}, 0x0) 00:26:50 executing program 3: r0 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x70c2, &(0x7f0000000140), &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) syz_io_uring_setup(0x6af3, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) r2 = syz_io_uring_setup(0x678f, &(0x7f0000000700)={0x0, 0x7cfb, 0x4, 0x1, 0x26a, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000780)) r3 = io_uring_setup(0x1c78, &(0x7f0000001e00)={0x0, 0x364e, 0x1000, 0x1, 0x285}) syz_io_uring_setup(0x3264, &(0x7f0000001e80)={0x0, 0x97e9, 0x20, 0x3, 0x201, 0x0, r3}, &(0x7f0000001f00), &(0x7f0000001f40)) io_uring_setup(0x35e8, &(0x7f00000007c0)={0x0, 0x13bc, 0x0, 0x1, 0x95, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002600)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000fddfe5bbeab4862fc299337f6c222cff5ecb43e9c90275db51974c143b1b377affdfefea887e4b40ae5fca03553d9818529aa0cf1cfbf778e5d473ed784edcea897497ba1fa7ebb1f02beee91a1a84082b60ce53a2ad5f8b0b462f2370da8423851494d5ea9bb1ab5d92823b1665a1e5f592195df66e549c30d1f1d7ff25ccb73ee66debf656f51e3487636760cd471bf1a80c4f983b08035c7dc38343440ed15fd9", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/46, 0x2e}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001980)=""/217, 0xd9}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/198, 0xc6}, {&(0x7f0000001c40)=""/100, 0x64}], 0x7, &(0x7f0000001d40)=""/82, 0x52}, 0x20002000) syz_genetlink_get_family_id$devlink(&(0x7f0000001940), 0xffffffffffffffff) 00:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40086602, &(0x7f00000000c0)={{0xffffffffffffffff}}) 00:26:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, 0x0) 00:26:50 executing program 5: r0 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x70c2, &(0x7f0000000140), &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) syz_io_uring_setup(0x6af3, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) r2 = syz_io_uring_setup(0x678f, &(0x7f0000000700)={0x0, 0x7cfb, 0x4, 0x1, 0x26a, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000780)) r3 = io_uring_setup(0x1c78, &(0x7f0000001e00)={0x0, 0x364e, 0x1000, 0x1, 0x285}) syz_io_uring_setup(0x3264, &(0x7f0000001e80)={0x0, 0x97e9, 0x20, 0x3, 0x201, 0x0, r3}, &(0x7f0000001f00), &(0x7f0000001f40)) io_uring_setup(0x35e8, &(0x7f00000007c0)={0x0, 0x13bc, 0x0, 0x1, 0x95, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002600)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000fddfe5bbeab4862fc299337f6c222cff5ecb43e9c90275db51974c143b1b377affdfefea887e4b40ae5fca03553d9818529aa0cf1cfbf778e5d473ed784edcea897497ba1fa7ebb1f02beee91a1a84082b60ce53a2ad5f8b0b462f2370da8423851494d5ea9bb1ab5d92823b1665a1e5f592195df66e549c30d1f1d7ff25ccb73ee66debf656f51e3487636760cd471bf1a80c4f983b08035c7dc38343440ed15fd9", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/46, 0x2e}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001980)=""/217, 0xd9}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/198, 0xc6}, {&(0x7f0000001c40)=""/100, 0x64}], 0x7, &(0x7f0000001d40)=""/82, 0x52}, 0x20002000) syz_genetlink_get_family_id$devlink(&(0x7f0000001940), 0xffffffffffffffff) 00:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:26:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) [ 3428.001306][T28002] binder: 28000:28002 ioctl 400c620e 0 returned -14 00:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) writev(r3, &(0x7f0000000880)=[{&(0x7f00000003c0)="6e36acac4733968dbe213579732bb0acc852f2ce1370b24a7e5b65f9df05fed9e6afe59b0705324779fd5ce73094f424355b267ea69f0aea731b8316e51973935f6fd0251a3da74ed549c384fa2cbb663a989c0fdec394065760e379e777e1c9b678e09f7fd55071f4117e9277d9462fb2ba246065f4ac13e4cc0496c60952df693d1252c36fcf", 0x87}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="b767f9f1f2f6b1dbadeea8720d8662d179d51dd7f643bce35870269e959f7197f60d66bfacd9203df5dfb5ebcc1529e2a0636009c05fd1252cbddbdb431c86d78d0e70d541d736c72f10c497f3e59675b63c9bf254b5b45c037763e4545fc593674b8b5e96ab53090d80709389c07c0ec7e08f0d928730362759f50c00bfd4b79143ede5deb4649a04863456b59c19f0696443f1306c51ec16b49b2a7c1b4c6f612cddd5a30ccc7eb9", 0xa9}, {&(0x7f0000000580)="3148716b8e4770bf9ab35b5784403006df7a78dd5cccbea0e84ab35f030285bbc59ac88679743333a58eff290c4a66219873bc70732feb73826f9bc559e7fbf9aeb43ac56fc303e8cf9989dac1f9bd1adff9fd13c9d7d3d42226e8f6a6df16d86f7db7f68851080b20a2e006b35c133ae55ab43baf654363d619eb6c22eba82e81a252a9e0a864cd5c38dba7309378a799f9d44df738a81bce4f82aef0a1570f9667d9401b7e4c90f65d596e668b65bf246d94def2494d03e317839688a9d8f08b76b4568e84", 0xc6}, {&(0x7f0000000680)="e15bd9bb2c850d45f6802dddbcd6dc0bdc4d82be06d5acb8b0f9fb37936ede9c30d7bdbe36751342aa34cbd4aa68c5c6d671e863619447848d34ed2e5193373750ad79997d6d6b34da999195e4989517b030015a4779ebae652d1c0ee43af54c9491e7f690c1a7f13f0df437253c862573a170", 0x73}, {&(0x7f0000000700)="c2879152c26f4d169a591d76a1f8a061f85595e4ceb994f95f0f4d4028e4ac6cd89df5df17875c3642a44741259df5b4609cf378e3b2ee8ca1a73080a39bbab4741d5f422b1c791cbb447598c1bc93e0b9ac14192cef0f5b1ff2bc9ed054437845ac2fbfdda0d7a1e52d2012f17eb0e04010e11091a7146f3e86a839065d0efe7346873e0db4102043479ffadc07ae486e8ffc0daa63f543e915941e51b9711851226fd921913dc6973bdd01794099e118c83e888609a768afb6d3f706cd83cd69f8d820ea07709d", 0xc8}, {&(0x7f0000000800)="327460c746e9a64a219c39b9af2ae28a5abbfa0910f72bb0e9607224f22a1d47e6585a505379ab831cbf5ffcca19a9b12e966d2ae777430a2f76587b166cf27760b825788244ded401b4ee4c22b9a6259c30c2a0679241c70072162a5393126aa5c46815b24b5316d23ce345fd1e8d58a7442823b17afa657af158", 0x7b}, {&(0x7f0000001bc0)="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", 0x1000}], 0x8) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xffffffff054) r7 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r8, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r8, 0x100000000}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000480)={0x0, 'erspan0\x00', {}, 0x400}) 00:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) [ 3428.128990][T28004] random: crng reseeded on system resumption [ 3428.276117][T24141] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3428.400267][ T28] audit: type=1800 audit(1362011210.739:649): pid=28023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1953 res=0 errno=0 [ 3428.569217][ T28] audit: type=1804 audit(1362011210.739:650): pid=28023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir225809807/syzkaller.Hy9gHa/6065/file0" dev="sda1" ino=1953 res=1 errno=0 [ 3429.057380][ T28] audit: type=1804 audit(1362011210.739:651): pid=28023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir225809807/syzkaller.Hy9gHa/6065/file0" dev="sda1" ino=1953 res=1 errno=0 [ 3429.175980][T24141] usb 1-1: Using ep0 maxpacket: 8 [ 3429.316210][T24141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.326204][T24141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3429.336548][T24141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3429.346403][T24141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3429.356334][T24141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3429.556231][T24141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3429.565371][T24141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.573497][T24141] usb 1-1: Product: syz [ 3429.582153][T24141] usb 1-1: Manufacturer: syz [ 3429.586834][T24141] usb 1-1: SerialNumber: syz [ 3429.876400][T24141] cdc_ncm 1-1:1.0: bind() failure [ 3429.884311][T24141] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3429.891588][T24141] cdc_ncm 1-1:1.1: bind() failure [ 3429.905504][T24141] usb 1-1: USB disconnect, device number 96 00:26:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:52 executing program 5: r0 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x70c2, &(0x7f0000000140), &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x70c2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) syz_io_uring_setup(0x6af3, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) r2 = syz_io_uring_setup(0x678f, &(0x7f0000000700)={0x0, 0x7cfb, 0x4, 0x1, 0x26a, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000780)) r3 = io_uring_setup(0x1c78, &(0x7f0000001e00)={0x0, 0x364e, 0x1000, 0x1, 0x285}) syz_io_uring_setup(0x3264, &(0x7f0000001e80)={0x0, 0x97e9, 0x20, 0x3, 0x201, 0x0, r3}, &(0x7f0000001f00), &(0x7f0000001f40)) io_uring_setup(0x35e8, &(0x7f00000007c0)={0x0, 0x13bc, 0x0, 0x1, 0x95, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002600)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000fddfe5bbeab4862fc299337f6c222cff5ecb43e9c90275db51974c143b1b377affdfefea887e4b40ae5fca03553d9818529aa0cf1cfbf778e5d473ed784edcea897497ba1fa7ebb1f02beee91a1a84082b60ce53a2ad5f8b0b462f2370da8423851494d5ea9bb1ab5d92823b1665a1e5f592195df66e549c30d1f1d7ff25ccb73ee66debf656f51e3487636760cd471bf1a80c4f983b08035c7dc38343440ed15fd9", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/46, 0x2e}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001980)=""/217, 0xd9}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/198, 0xc6}, {&(0x7f0000001c40)=""/100, 0x64}], 0x7, &(0x7f0000001d40)=""/82, 0x52}, 0x20002000) syz_genetlink_get_family_id$devlink(&(0x7f0000001940), 0xffffffffffffffff) 00:26:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250d000000040003"], 0x3c}}, 0x0) 00:26:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:26:52 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3ea}, 0x10}}, 0x0) 00:26:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f00000000c0)) 00:26:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000540)=[@increfs_done={0x40046304}], 0x0, 0x0, 0x0}) 00:26:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x0, 0x0, 0xed05}, 0x48) 00:26:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc}}}]}]}, 0x48}}, 0x0) [ 3430.437433][T28032] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 00:26:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:26:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x2}, 0x48) 00:26:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @remote}, 0x8) 00:26:52 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x92000, 0x0) [ 3430.533660][T28040] binder: 28039:28040 unknown command 0 [ 3430.547071][T28037] random: crng reseeded on system resumption [ 3430.553332][T28040] binder: 28039:28040 ioctl c0306201 20000680 returned -22 00:26:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 00:26:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup(r0) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000003340)={0x2, 0x0, @loopback}, 0x10) 00:26:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 00:26:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, {0x7, 0xf6, 0x9, 0x1b, 0xfe, 0x81, 0x7, 0x7a0, 0x7fff, 0x6, 0x2e03, 0x1ee, 0x3, 0x5, "602da68da96e71f05cbb4c62bc1edabfc3951f2e2c7ba6dd1fb15be909cb72d1"}}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x400100) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xe0e0e0e0}) syz_open_dev$loop(&(0x7f0000000680), 0x1, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) syz_open_dev$dri(&(0x7f00000006c0), 0x40, 0x810800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x143040, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e80), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 00:26:53 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) 00:26:53 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/196) 00:26:53 executing program 4: r0 = semget(0x2, 0x0, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/196) 00:26:53 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/96) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x4040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300, 0x0) 00:26:53 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000200)=""/241) 00:26:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockname$inet(r0, 0x0, 0x0) 00:26:53 executing program 2: io_setup(0x0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) 00:26:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 00:26:53 executing program 5: symlinkat(&(0x7f0000000000)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/177, 0xb1) 00:26:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) [ 3431.003740][ T28] audit: type=1800 audit(1362011213.349:652): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1967 res=0 errno=0 00:26:53 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x800c0, 0x0) 00:26:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000480)=""/90, &(0x7f0000000500)=0x5a) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 4: prlimit64(0x0, 0x5, &(0x7f0000000240), 0x0) 00:26:53 executing program 2: prlimit64(0x0, 0x5, &(0x7f0000000240), &(0x7f0000000280)) 00:26:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x40) 00:26:53 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, &(0x7f0000000140)='FREEZING\x00', 0x0) 00:26:53 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000200)) 00:26:53 executing program 3: execveat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 00:26:53 executing program 5: r0 = semget(0x0, 0x0, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/41) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:53 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x800c0, 0x128) 00:26:53 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x440, 0x176) 00:26:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) 00:26:53 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x301000, 0x0) 00:26:53 executing program 5: timer_create(0x7, &(0x7f0000000140)={0x0, 0x2, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}]}}}}}}}}, 0x0) 00:26:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r1, r0) 00:26:53 executing program 0: msgget(0x0, 0x38c) 00:26:53 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x410901, 0x0) 00:26:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @private}, 0x8) 00:26:53 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 00:26:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}]}}}}}}}}, 0x0) 00:26:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:26:54 executing program 4: utimensat(0xffffffffffffff9c, &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 00:26:54 executing program 2: semget$private(0x0, 0x4, 0x58c) 00:26:54 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 00:26:54 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x40342, 0xe) 00:26:54 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2841, 0x167) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}]}}}}}}}}, 0x0) 00:26:54 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) dup2(r2, r1) 00:26:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x4d) 00:26:54 executing program 3: timerfd_create(0x9, 0x80000) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x102) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000480)=0x1e) readlinkat(r0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)=""/224, 0xe0) pipe(&(0x7f0000000240)) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r2, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)=""/213, 0xd5) inotify_add_watch(r2, &(0x7f0000000200)='./file0/file0\x00', 0x404) mq_open(&(0x7f0000000000)='-#\'+\'+-]@^-.f-()--\x00', 0x40, 0x1, &(0x7f0000000040)={0x14fc, 0x3ff, 0x1, 0x1c}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000280)={0x8, @remote, 0x4e23, 0x3, 'lc\x00', 0x20, 0x0, 0x79}, 0x2c) 00:26:54 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2941, 0xed) 00:26:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000014c0)=0x1e) 00:26:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1b, &(0x7f0000000000)="12", 0x1) 00:26:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_mreq(r1, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) mq_open(&(0x7f0000000380)='(-\x00', 0x40, 0x6, &(0x7f00000003c0)={0x81, 0xb0c1, 0x8, 0x4}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x24000, 0x10d) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) dup(r2) socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r3) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0) r7 = dup(r6) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000300)) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e22, @multicast2}, 0x144, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='batadv_slave_0\x00', 0x20, 0xeba6, 0x2}) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x2}, 0x2f) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xdc, [0x1f, 0xd5d, 0xb04, 0x9, 0x5, 0xffffffffffff0000], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/220}, &(0x7f0000000200)=0x78) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 3431.933226][T28172] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 00:26:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) 00:26:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = dup(r1) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) 00:26:54 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x4040, 0x88) 00:26:54 executing program 2: timer_create(0x7, 0x0, &(0x7f0000000180)) 00:26:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) write$cgroup_freezer_state(r2, 0x0, 0x0) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:54 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x3) 00:26:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 00:26:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = inotify_init() dup2(r0, r1) 00:26:54 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x0, &(0x7f0000000300), 0x1) [ 3432.150944][ T28] audit: type=1800 audit(1362011214.489:653): pid=28192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1979 res=0 errno=0 00:26:54 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000000)=""/73) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:54 executing program 2: r0 = inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) 00:26:54 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x4040, 0x152) 00:26:54 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x9c302, 0x0) 00:26:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 00:26:54 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:54 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x35e4, 0x0) 00:26:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x0) 00:26:54 executing program 5: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 00:26:54 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x161941, 0x3) [ 3432.411650][ T28] audit: type=1800 audit(1362011214.759:654): pid=28214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1963 res=0 errno=0 00:26:54 executing program 2: pipe(&(0x7f0000000600)) 00:26:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0/file0\x00', 0x44c800, 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)='./file0/file1\x00', 0xe, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0/file1\x00', 0x93010, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}], [{@dont_hash}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '@]%.#'}}, {@euid_eq}]}}, 0x1, 0x0, &(0x7f00000003c0)="984feea045b46d1ccaeb4a40600fac79212a5137ecf2939a7670d55b86823362a6e7bed398db3ced024024ce0ad8e42fbf32bd080da1") mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@uid={'uid', 0x3d, 0xee01}}, {}, {@huge_always}, {@huge_always}]}) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000640), 0x0, 0x800, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}], [{@flag='mand'}]}}, 0x0, 0x0, &(0x7f00000007c0)="e05b8d14d554e2ef30169403736e32ae42859f9eec5cfc74a662952287eba23b1443acceaf87aa86324531848aa4f8d82e5201c772646782773e8c1406c325b6339da08edcc420371b3c01e3abcae7875ff0315bd3c557efdd7dda2cf3497fa6025b69a89ed2d95ea3f24a785debde2d864ee31127cdadeeb18ff7c9c43832e8bb282be6cbdf9808064140ca01134f4e3eccb5f8f03d906fd7fee2527065e41e667894d999b6f5085e04b9326f3b84dc648e55") r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xb058a78c452e4fa0) statx(r1, &(0x7f0000000f00)='./file0/file1/file0\x00', 0x6000, 0x20, &(0x7f0000000f40)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x0, 0x1) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001100)='./file0/file1\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, 0x0) sendmsg$unix(r0, &(0x7f0000003380)={&(0x7f0000002140)=@file={0x0, './file0/file1\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f00000021c0)="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", 0xf80}], 0x1, 0x0, 0x0, 0x40881}, 0x810) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000033c0)={0x0, 0x0, "38b49e4bbd46e96734b35de2803e6008130886f0972839d45730442cd459e859cfbe6528384a00a6c5195b713e0dcf71041064de2bc6f3c200f0e3da9e8ec6d9e2dca0ca0502f4590c33b20feadea987b3ad2fe757296d720bd57af15071215434676a925f53faec979911131a59d0d3dd27d9a317bb84365803e6c64d88f2b9c0b8875d34b25ae7b651aa8fcf82302d2cc741321cd83e9690e26bde0aa184a7c8a41c384a21f0538cf3d58cf915a7c4adbb6baeecbeb3d93b302df4581deea75f01884069bf7e767b5b11fffbce7b41fc362f01a60b6af54133a0791e0b170639fa543828787f8586b9e726395655e7f89979d0c82b9f58210aa4cd64ec1c02", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000043c0)) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000045c0)={0x0, 0x9}) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000004600)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000004640)) umount2(&(0x7f0000004840)='./file0\x00', 0x8) open(&(0x7f0000004880)='./file0/file1\x00', 0x84040, 0x0) 00:26:54 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x83, 0x0) 00:26:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:54 executing program 2: semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f00000000c0)=""/80) 00:26:54 executing program 5: r0 = semget(0x2, 0x0, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xfff}], 0x1, 0x0) 00:26:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) write$cgroup_pid(r1, 0x0, 0xffffffffffffff71) 00:26:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private, @empty}}}], 0x20}, 0x20000810) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x5, 'Y6l'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) 00:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x0) 00:26:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r2, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 00:26:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) 00:26:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@jmp], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x5, 'Y6l'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000180)) 00:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private, @empty}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 00:26:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 00:26:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x16, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x22, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x10, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x5, 'Y6l'}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$MRT(r0, 0x0, 0xce, 0x0, 0x0) 00:26:55 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:26:55 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000), 0x4) 00:26:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x6, "59366cea"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:26:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x8, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}) 00:26:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r2, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x6, "59366cea"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100), &(0x7f0000000200)=0x8) 00:26:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0xa, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) 00:26:55 executing program 5: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x6, "59366cea"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89ff, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 5: socketpair(0xf, 0x3, 0x0, &(0x7f0000000300)) 00:26:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:26:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 00:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}) 00:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:26:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x3, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x24, 0x0, &(0x7f00000012c0)) 00:26:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 00:26:55 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:26:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 00:26:56 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 00:26:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stat\x00') write$cgroup_devices(r0, 0x0, 0x0) 00:26:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffe5a) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 00:26:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 00:26:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00') write$tun(r0, 0x0, 0x0) 00:26:56 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:26:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003e00)=[{{&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0}}], 0x1, 0x80) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:26:56 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:26:56 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 00:26:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) write$cgroup_int(r0, 0x0, 0x0) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, 0x0) 00:26:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 00:26:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x7}, 0x9c) 00:26:56 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x20040005, &(0x7f0000005840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="f83bfdfcfe8d"}, 0x14) 00:26:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xffffffffffffffcb) 00:26:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5450, 0x0) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x44, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$cgroup_devices(r0, 0x0, 0x3) 00:26:56 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20802, 0x0) write$cgroup_int(r0, 0x0, 0x0) 00:26:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 00:26:56 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) 00:26:56 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r1) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x44, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 00:26:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000021c0)) 00:26:56 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 00:26:56 executing program 5: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/141, 0x8d) 00:26:56 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) 00:26:56 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x44, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), 0x4) 00:26:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}, 0x0) 00:26:56 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x311200, 0x0) 00:26:56 executing program 0: syz_clone(0x4246e7015eb2651b, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0xf, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xc, 0x5, 0x40}, {0xb, 0x2, 0x2}, {0xa, 0x0, 0x3}, {0x5, 0x0, 0xffff8000}, {0x10, 0x3, 0x4}]}, @union={0xf, 0x4, 0x0, 0x5, 0x0, 0x4, [{0xb, 0x4, 0x8}, {0x2, 0x1, 0x10001}, {0x7, 0x3}, {0x3, 0x2, 0x4}]}, @typedef={0x2}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000100)=""/4096, 0xe0, 0x1000, 0x0, 0x5}, 0x20) 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 00:26:56 executing program 4: syz_clone(0x83800000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{0xfffffffffffffffc}], 0x25}, 0x0) 00:26:56 executing program 5: syz_clone(0x52847180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, &(0x7f0000001800)) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="7c810f0c80f816b1b3ce8af35ecbb21e34171e9f8b73fd28311edb2f704742b3d672faca8b4950ff00ac07d1c6429d2e65893fa2a961fc81b8edc90ebc08b7968b634c2a07ce2a60d1f1ef5cc120646e4d404a3f5a41074a1898d79718300f6d7220c3f05a40") 00:26:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:56 executing program 3: shmget(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) 00:26:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000c40)={'veth0_macvtap\x00'}) 00:26:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(r0, 0x8907, 0x0) 00:26:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:57 executing program 3: syz_clone(0x4246e7015eb2651b, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb0100180006a30000000000000000ac00000004000000100000000000000b04000000040000000000000bffeec22e010800000000000e03000000010000000f00000004000085090000000c00000005000000400000000b00000002000000150000000a0000000000000003000000100000"], 0x0, 0xc8, 0x0, 0x0, 0x5}, 0x20) 00:26:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000e40)={&(0x7f00000005c0)=@id, 0x10, 0x0}, 0x0) 00:26:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) 00:26:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(r0, 0x80108906, 0x0) 00:26:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:57 executing program 5: socketpair(0x9, 0x0, 0x0, &(0x7f0000000940)) 00:26:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x4f, &(0x7f0000000340)=""/79, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:26:57 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 00:26:57 executing program 5: syz_clone(0x4246e7015eb2651b, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) 00:26:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:57 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) 00:26:57 executing program 0: socketpair(0x2, 0x2, 0x106, &(0x7f0000000940)) 00:26:57 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0\x00'}, 0x18) 00:26:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x2}, 0x2100) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f705", 0x2}], 0x1}, 0x480c5) 00:26:57 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000a40)="ce", 0x1}], 0x1}, 0x4001) 00:26:57 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/107, 0x6b}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f705", 0x2}], 0x1}, 0x480c5) 00:26:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 00:26:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x2}, 0x2100) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f705", 0x2}], 0x1}, 0x480c5) 00:26:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000004180)={&(0x7f0000003ac0)={0x2, 0x0, @multicast2}, 0xfcd2, &(0x7f0000003d00)=[{&(0x7f0000003b00)="6288fd55330084372f87254b2624a43d8337e4efe5fd149841552c09cd200cb51cd37131a599aa513ca52bb3b9d1c768cbc93ccb096e61d2c2347552da7bd76d3e8ba13e8965a99d1611b2075935e5865c25b940f7c9674237a8737ff84fd5eea571171b13219ba511b863ae0575fa5fee4bafa02b457be440c8c5eeb94b2234aad04465da8389c474fd5721bbc2c4944181ec37229fe42629b19f41964941a36f89380a2b4262a6b23cc0b4f9c58d7ea8ec88f4285e6beb3d0afa64e108e096a2920b16df5bf87445ffd95b542beb331eb8ca3c87d0882dd6ccfd01d2cd349c5f07f20ab30447c4d975", 0xea}, {&(0x7f0000003c00)="08c0a70810a3fba2286720b181bfddb1a1808fb1f0755b8a7270f68d1093a4f3d90c291d", 0x24}, {&(0x7f0000003c40)="bfac760e6b2294ab1daedcba5a0ba8c22622fbb691d86d4a2034d355f982dd8879cca798a867a5755c3a0bab6f7ecd7bddf64ef038ea18f08e7562d0a1db6cf32ecc25a66947b8c284f26411280a0bb2e60f57ce21d038c05182a2a0d792396e143766c6fa34072c6f5e6ba8c76f1bce87302c5293e97b99ec72213620a1e90f5f8e09d30d996e2068df9ab7aa6c5948a9c1c158f9032cfa2e1dfdbeede6b832fcf20d3977fd0ed9f300c939133b7d107c9d48c2a07fdc", 0xb7}], 0x3, &(0x7f0000003900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @empty}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @end, @noop, @end]}}}, @ip_ttl={{0x14}}], 0xb0}, 0x0) 00:26:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f7", 0x1}], 0x1}, 0x480c5) 00:26:58 executing program 3: bpf$BPF_PROG_DETACH(0x3, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x2}, 0x2100) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f705", 0x2}], 0x1}, 0x480c5) 00:26:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xa, [0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:58 executing program 5: bpf$BPF_PROG_DETACH(0x10, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:58 executing program 3: bpf$BPF_PROG_DETACH(0x3, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x2}, 0x2100) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f705", 0x2}], 0x1}, 0x480c5) 00:26:58 executing program 3: bpf$BPF_PROG_DETACH(0x3, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0) close(r0) 00:26:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) 00:26:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:58 executing program 3: bpf$BPF_PROG_DETACH(0x3, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:58 executing program 4: bpf$BPF_PROG_DETACH(0x2, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) 00:26:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x0, 0x0, 0xe182}, 0x48) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x6, "241ea72e"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003b00)="6288fd55330084372f87254b2624a43d8337e4efe5fd149841552c09cd200cb51cd37131a599aa513ca52bb3b9d1c768cbc93ccb096e61d2c234", 0x3a}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000072c0)=[{0x0}, {&(0x7f00000039c0)=""/57, 0x39}], 0x2}, 0x0) 00:26:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 0: syz_clone(0x28088000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:59 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x19, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz1\x00', 0x200002, 0x0) 00:26:59 executing program 5: socketpair(0x3, 0x0, 0xe0000000, &(0x7f0000001680)) 00:26:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x0, 0x0, 0x0, 0xce}, 0x48) 00:26:59 executing program 3: bpf$OBJ_GET_MAP(0x12, &(0x7f0000000580)=@o_path={0x0}, 0x18) 00:26:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 00:26:59 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000004180)={&(0x7f0000003ac0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003b00)="6288fd55330084372f87254b2624a43d8337e4efe5fd149841552c09cd200cb51cd37131a599aa513ca52bb3b9d1c768cbc93ccb096e61d2c2347552da7bd76d3e8ba13e8965a99d1611b2075935e5865c25b940f7c9674237a8737ff84fd5eea571171b13219ba511b863ae0575fa5fee4bafa02b457be440c8c5eeb94b2234aad04465da8389c474fd5721bbc2c4944181ec37229fe42629b19f41964941a36f89380a2b4262a6b23cc0b4f9c58d7ea8ec88f4285e6beb3d0afa64e108e096a2920b16df5bf87445ffd95b542beb331eb8ca3c87d0882dd6ccfd01d2cd349c5f07f20ab30447c4d975", 0xea}, {&(0x7f0000003c00)="08c0a70810a3fba2286720b181bfddb1a1808fb1f0755b8a7270f68d1093a4f3d90c291d", 0x24}, {&(0x7f0000003c40)="bfac760e6b2294ab1daedcba5a0ba8c22622fbb691d86d4a2034d355f982dd8879cca798a867a5755c3a0bab6f7ecd7bddf64ef038ea18f08e7562d0a1db6cf32ecc25a66947b8c284f26411280a0bb2e60f57ce21d038c05182a2a0d792396e143766c6fa34072c6f5e6ba8c76f1bce87302c5293e97b99ec72213620a1e90f5f8e09d30d996e2068df9ab7aa6c5948a9c1c158f9032cfa2e1dfdbeede6b832fcf20d3977fd0ed9f300c939133b7d107c9d48c2a07fdc", 0xb7}], 0x3, &(0x7f0000003900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @empty}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast]}, @end, @noop, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@empty}, {}, {}]}]}}}, @ip_ttl={{0x14}}], 0xe0}, 0x0) 00:26:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x12, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380), 0x8e) 00:26:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000040)=@name, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1}, 0x0) 00:26:59 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0b02, 0x0) close(r0) 00:26:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:26:59 executing program 0: semget$private(0x0, 0x7, 0x100) 00:26:59 executing program 2: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000004180)={&(0x7f0000003ac0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003b00)="6288fd55330084372f87254b2624a43d8337e4efe5fd149841552c09cd200cb51cd37131a599aa513ca52bb3b9d1c768cbc93ccb096e61d2c2347552da7bd76d3e8ba13e8965a99d1611b2075935e5865c25b940f7c9674237a8737ff84fd5eea571171b13219ba511b863ae0575fa5fee4bafa02b457be440c8c5eeb94b2234aad04465da8389c474fd5721bbc2c4944181ec37229fe42629b19f41964941a36f89380a2b4262a6b23cc0b4f9c58d7ea8ec88f4285e6beb3d0afa64e108e096a2920b16df5bf87445ffd95b542beb331eb8ca3c87d0882dd6ccfd01d2cd349c5f07f20ab30447c4d975", 0xea}, {&(0x7f0000003c00)="08c0a70810a3fba2286720b181bfddb1a1808fb1f0755b8a7270f68d1093a4f3d90c291d", 0x24}, {&(0x7f0000003c40)="bfac760e6b2294ab1daedcba5a0ba8c22622fbb691d86d4a2034d355f982dd8879cca798a867a5755c3a0bab6f7ecd7bddf64ef038ea18f08e7562d0a1db6cf32ecc25a66947b8c284f26411280a0bb2e60f57ce21d038c05182a2a0d792396e143766c6fa34072c6f5e6ba8c76f1bce87302c5293e97b99ec72213620a1e90f5f8e09d30d996e2068df9ab7aa6c5948a9c1c158f9032cfa2e1dfdbeede6b832fcf20d3977fd0ed9f300c939133b7d107c9d48c2a07fdc", 0xb7}], 0x3, &(0x7f0000004080)=[@ip_pktinfo={{0x7f, 0x0, 0x8, {0x0, @rand_addr, @empty}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x0, [@multicast2, @dev, @local]}, @end, @noop, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private}, {@private}, {@broadcast}, {@multicast1}, {}, {}]}]}}}, @ip_ttl={{0x14}}], 0xe0}, 0x0) 00:26:59 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x10640, 0x0) 00:26:59 executing program 2: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 00:26:59 executing program 4: r0 = eventfd(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 3: r0 = semget(0x1, 0x0, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f00000000c0)=""/13) 00:26:59 executing program 2: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:26:59 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) 00:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x4, "241e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:26:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) fcntl$getown(r1, 0x9) 00:26:59 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000280)=[{0x3}], 0x1) 00:27:00 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20202, 0x0) 00:27:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000020c0)=""/168) 00:27:00 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x4, "241e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup2(r0, r0) write$P9_RLERRORu(r1, 0x0, 0x0) 00:27:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) 00:27:00 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r1) write$FUSE_IOCTL(r2, 0x0, 0x0) 00:27:00 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x0) 00:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x4, "241e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 00:27:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 00:27:00 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000280)=""/19) 00:27:00 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000001080), 0x107081, 0x0) 00:27:00 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000280)=[{}], 0x1) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x5, "241ea7"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r0, 0x9) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x5, "241ea7"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/18) 00:27:00 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) 00:27:00 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:27:00 executing program 0: r0 = open(&(0x7f0000000280)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000440)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1}, 0x0) rt_sigreturn() openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000001080)='./bus\x00', &(0x7f0000000000), 0x0, 0x0, 0x3) close(r2) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x13, 0x5, "241ea7"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) 00:27:00 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:27:00 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/45) 00:27:00 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) [ 3438.361870][ T28] audit: type=1800 audit(1362011220.709:655): pid=28677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 4: semget$private(0x0, 0x4, 0x85) 00:27:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 5: semget$private(0x0, 0x2, 0x6da) 00:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = dup2(r2, r2) write$FUSE_STATFS(r3, 0x0, 0x0) 00:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x61) dup2(r1, r0) 00:27:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) readv(r0, 0x0, 0x3c) 00:27:00 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 00:27:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:00 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x8080, 0x0) 00:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x12, 0x0, 0x0, 0x0, {[@fastopen={0x13, 0x6, "241ea72e"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @fastopen={0x22, 0x7, "59366cea6a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:27:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'osx.', '/dev/full\x00'}, 0x0, 0x0) 00:27:01 executing program 5: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00') 00:27:01 executing program 3: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40000042) 00:27:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x4) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:01 executing program 0: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 00:27:01 executing program 4: memfd_create(&(0x7f0000000f00)='\x00', 0x1) 00:27:01 executing program 5: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 00:27:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x111) 00:27:01 executing program 1: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x140) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xc0) 00:27:01 executing program 5: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:27:01 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x680c0, 0xbe) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 00:27:01 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 00:27:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x8) 00:27:01 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8) 00:27:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 00:27:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220041, 0x0) 00:27:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2b2d40, 0x94) 00:27:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x2) 00:27:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) 00:27:01 executing program 0: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) 00:27:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x11) 00:27:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsync(r0) 00:27:01 executing program 1: msgget$private(0x0, 0x7) 00:27:01 executing program 5: setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffe04, 0x0) 00:27:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) 00:27:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4010, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) 00:27:02 executing program 5: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/17, 0x11) 00:27:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) 00:27:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:27:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) 00:27:02 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchown(r0, 0xee00, 0x0) 00:27:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xee00, 0x0, 0x0) 00:27:02 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002280)='/sys/devices/system', 0x0, 0x0) symlinkat(&(0x7f0000002240)='./file0\x00', r0, &(0x7f00000022c0)='./file0\x00') 00:27:02 executing program 3: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:27:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x94) 00:27:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x1) 00:27:02 executing program 4: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 00:27:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xee00, 0x0) 00:27:02 executing program 2: r0 = socket(0x1, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x44) 00:27:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200400, 0x4) 00:27:03 executing program 4: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4) 00:27:03 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 00:27:03 executing program 0: arch_prctl$ARCH_MAP_VDSO_32(0x1003, 0x20000000) 00:27:03 executing program 5: r0 = open(&(0x7f0000000280)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000440)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffff46) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1}, 0x0) rt_sigreturn() openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000001080)='./bus\x00', &(0x7f0000000000), 0x0, 0x0, 0x3) close(r2) 00:27:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, 0x0, 0x0) [ 3440.805307][ T28] audit: type=1800 audit(1362011223.149:656): pid=28819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1958 res=0 errno=0 00:27:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 00:27:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:27:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x41) 00:27:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000280)="03", 0x1, 0x800b5f6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x123001, 0x0) sendfile(r2, r1, 0x0, 0xe0000000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) close_range(r3, r4, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2122) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) close_range(r5, r7, 0x0) ppoll(&(0x7f0000000000)=[{r2}, {r3}], 0x2, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:27:03 executing program 0: syz_clone(0x80c88200, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="a32706c4430fc66b461c9c585f2731c56fcfe7877e0900286b9e88414042e32af2f75531d4266d1770b4f08f7e5995397d6fabcaa19afde16ca98b4df2c2a6eae47d4e0ab63df0007029ca6cacc02b24a5854ade01d90c65cfa8ac4ce2a91cb46f72c39a1aeb7e600931a1a49f26bf3a13a4ecca15efccca4ef45286ccd477b542311c74cf7ac55f77f6fc28322fc28e57d2fc0e8ffb9d83a80f") 00:27:03 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:27:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x0, 0x288}, 0x48) 00:27:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0\x00'}) 00:27:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0xb}, {0xe}, {0x8, 0x2}]}]}}, &(0x7f0000001500)=""/4096, 0x46, 0x1000, 0x1}, 0x20) 00:27:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 00:27:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000001500)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 00:27:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001500)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 00:27:04 executing program 1: socketpair(0x25, 0x5, 0xff, &(0x7f0000000040)) 00:27:04 executing program 5: syz_clone(0x14320080, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x4c}]}}, &(0x7f0000001500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:27:04 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000047c0)="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", 0xec2}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000002280)=""/139, 0x8b}], 0x2}, 0x0) 00:27:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f0000001500)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 00:27:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 00:27:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x9000000}]}}, &(0x7f0000001500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:27:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 00:27:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) 00:27:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:27:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000001500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:27:04 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}, 0x40) 00:27:04 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 00:27:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)='\b', 0x1}, 0x0) 00:27:04 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x18}, 0x18) 00:27:04 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001240)='*', 0x1}], 0x1}, 0x40448c1) 00:27:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x0}]}}, &(0x7f0000001500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:27:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='r', 0x1}], 0x1}, 0x20004852) 00:27:04 executing program 3: syz_clone(0x14320080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 00:27:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000001500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:27:04 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x7, 0x0, 0x0, @prog_id}, 0x20) 00:27:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x6800, 0x0, 0x0, 0x2}}, &(0x7f0000001500)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 00:27:04 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000021) 00:27:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x0, 0x4}, 0x48) 00:27:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe}, {}, {0x2}, {}, {}]}]}}, &(0x7f0000001500)=""/4096, 0x72, 0x1000, 0x1}, 0x20) 00:27:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)='Y', 0x1}], 0x1}, 0x20480c0) 00:27:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)='*', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002340)=""/55, 0x37}], 0x1}, 0x0) 00:27:05 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0xd, &(0x7f0000001400)=@raw=[@map_val, @initr0, @btf_id, @initr0, @exit, @kfunc, @map_idx, @btf_id], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8, 0x10, &(0x7f0000001140), 0x10, 0x0, 0x0, 0x4, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240)=[{}, {}, {}, {}]}, 0x73) 00:27:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000001500)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 00:27:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)="2ae4360a511fd997a93884da31202029d0c6a4eacbdac1922d6df00963d69167ada988f770e45948d5410ee3268fdfcd198a7fe91e1f50e90ebd3f5fbb1dc1473ada2b16e610257d953bf7de55d353bd76c0653fa9abd59d401b6005bfd1785c147fb82d9a3380d2e6503f70b8fa8c4f2523b76a69f563ef4b", 0x79}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002340)=""/55, 0x37}, {&(0x7f0000002380)=""/65, 0x41}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3, &(0x7f00000036c0)=""/13, 0xd}, 0x0) 00:27:05 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x81, 0x0) 00:27:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000047c0)="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", 0xec2}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 00:27:05 executing program 5: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)) 00:27:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)) 00:27:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 00:27:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 00:27:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 00:27:05 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 00:27:05 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:27:05 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffffffff}, 0x8) 00:27:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000580)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:27:05 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000001240), 0xc) 00:27:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x8}, 0x48) 00:27:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe}, {0x7, 0x2}]}, @typedef={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000580)=""/129, 0x48, 0x81, 0x1}, 0x20) 00:27:05 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 00:27:05 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) 00:27:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2d) 00:27:05 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000a40)='syz1\x00', 0x1ff) 00:27:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000580)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:27:05 executing program 2: unlink(&(0x7f0000000600)='./file0\x00') 00:27:05 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 00:27:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) 00:27:05 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 00:27:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x7, 0x2}]}]}}, &(0x7f0000000580)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:27:05 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x2402c0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 00:27:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$proc_mixer(r0, &(0x7f0000001280)=""/137, 0x89) 00:27:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '\a~7', "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"}}, 0x110) 00:27:05 executing program 5: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x58c70, &(0x7f0000000100)={[{@stats}]}) 00:27:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) 00:27:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:05 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stat\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 00:27:05 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) [ 3443.511652][T28982] binder: Binderfs stats mode cannot be changed during a remount 00:27:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:27:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @typedef]}}, &(0x7f0000000580)=""/129, 0x32, 0x81, 0x1}, 0x20) 00:27:05 executing program 5: r0 = syz_io_uring_setup(0x20d8, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000280)) syz_io_uring_setup(0x857, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000140)) 00:27:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002540)='statm\x00') read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 00:27:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 2: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smack_current(r0, &(0x7f0000000040)={',/-\''}, 0x5) 00:27:06 executing program 5: mount$binderfs(0x0, &(0x7f0000002500)='./binderfs\x00', &(0x7f0000002540), 0x0, &(0x7f0000002580)={[{@max={'max', 0x3d, 0x80000000}}]}) 00:27:06 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x3432, 0x0) 00:27:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 3: r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) read$smackfs_access(r0, 0x0, 0x0) 00:27:06 executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:27:06 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/snmp\x00') pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100), 0x0) [ 3443.843278][T29014] binder: Bad value for 'max' 00:27:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 00:27:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='wchan\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 00:27:06 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:27:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:06 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, 0x0, 0x0) 00:27:06 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 2: r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000002700), 0x2, 0x0) write$smackfs_ptrace(r0, 0x0, 0x0) 00:27:06 executing program 5: r0 = fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0) fsmount(r0, 0x0, 0x0) 00:27:06 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000a80), 0x48) 00:27:06 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 2: r0 = syz_clone(0x24000200, &(0x7f0000000080)="988efdaa8e8ec47bcc4e4190b45fbfd8014144297e10f0c2c9560b805474fd32da1fa5e98270f45fca176fbae1578a53bd0df9d4e99371a460e18dfc028b9ac36b07715b2f53b17382dedce9b7d41a102db8a300ec098113d5dcdcc8de1c9da0f5aca03569bdfcc6f4da7e976735203e13bd88c0d358e4806b7ee4e98b8e53893f0b58b2f2828ff92e1c9ed4db33cff5a419f421536ad16ac896a8b9e0ff4b304ac9d9bb2593b511e0fc40ab36185b6b346ece78f293c6287f68b86cb47dd2ec817b55f9d33484d7e8b09f83d3874aafe4b70bf3907c43177b6b05de45a01b122c5a729c2ff421e10c", 0xe9, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="bbdea3c1ec837c25dc94523ef5df88d35812eac8c077dff6a7a7236eefbbcd881d1b17302fcf13cf03ecada9d4922eb2ba1706ee817f40eb9abb3d90ab69a745c200816ed5aae36e5ef2ca7fe6864a7d72105a26b88d2424beb5cc9efcc43d81c73f0570bfa5f94331a3e52de32ed1a2604882da85e44c29629c5a46c648626c5ff23e52a0344c") syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/time_for_children\x00') r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x4}, 0xc) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x40, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x401, 0x5, 0x7, 0x1, 0xffffffffffffffff, 0x9c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0xd, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0xa, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @generic={0x7f, 0xe, 0x5, 0x3f, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x3f, 0x3, 0x8, 0x1, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='GPL\x00', 0x40, 0x4e, &(0x7f00000003c0)=""/78, 0x41000, 0x2a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0xdd6, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000740)=[{0x5, 0x2, 0x0, 0x5}], 0x10, 0x7}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x18}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x430800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x5, 0x4, 0x1000, 0x4, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 00:27:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a2"}]}}, 0x0, 0x2a}, 0x20) 00:27:06 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x19, 0x1, &(0x7f0000000300)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:27:06 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 00:27:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x0, 0x0, 0x0, 0x21d0}, 0x48) 00:27:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) 00:27:06 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:06 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:06 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:07 executing program 3: syz_clone(0x4922000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) 00:27:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x2, 0x8, 0x1000}, 0x48) 00:27:07 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:07 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) 00:27:07 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:07 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 00:27:07 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 00:27:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:07 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)={0x0, 0x8aa6, 0x2, [0x9, 0x0]}, 0xc) 00:27:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:27:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:07 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) connect$inet6(r2, &(0x7f0000000280)={0x1c, 0x1c, 0x3}, 0x1c) 00:27:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) 00:27:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)=0x8) 00:27:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x90) 00:27:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)={0x0, 0x0, 0x81c3}, 0x8) 00:27:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) 00:27:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x10) 00:27:07 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x41, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 00:27:07 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendto(r0, &(0x7f0000000240)="90", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)={0x0, 0x8aa6}, 0x8) 00:27:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x14) 00:27:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'bond0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x5) 00:27:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 00:27:07 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000140), &(0x7f0000000080)=0xb0) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:27:08 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f00000001c0), 0x1) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendto(r0, &(0x7f0000000240)="90e19c44750a4213e14151d8f5a5900b8499382dda61dfd31deb99dddd7aab1371b40de4bbb857ecca095a51df88c7f93a6d94f853307273b7741f2ef033d9decdfadd6c25c3e8b80f23fc48ea000c27b669b137db2bd6ed95bbf103051e1eb8844a5ac07e22beaf20f62bd24248768e932f5cd2d2", 0xffc2, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)={0x0, 0x8aa6}, 0x8) 00:27:08 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 00:27:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000080)={0x0, 0x5}, 0x8) 00:27:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto(r0, &(0x7f0000000040)="c2", 0x1, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) 00:27:08 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x105, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000200), 0x10) 00:27:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendto(r0, &(0x7f0000000240)="90", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)={0x0, 0x3, 0x2, [0x0, 0x0]}, 0xc) 00:27:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 00:27:08 executing program 3: r0 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000380)=0x2, 0x4) 00:27:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 00:27:08 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:08 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @local, @val, {@ipv6}}, 0x0) 00:27:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="11f9428d97b3", @empty, @val, {@ipv4}}, 0x0) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001500)=@in6={0x1c, 0x1c}, 0x1c) 00:27:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000002400), &(0x7f0000002440)=0x4) 00:27:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 00:27:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000}, 0x14) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:27:08 executing program 3: readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0) 00:27:08 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/128) 00:27:08 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x8) 00:27:08 executing program 5: syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @local, @val, {@ipv6}}, 0x0) 00:27:08 executing program 0: open$dir(&(0x7f0000000900)='./file0\x00', 0x4bbc7deac08796d2, 0x0) 00:27:08 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @rand_addr, @remote, @local={0xac, 0x14, 0x0}}}}}, 0x0) 00:27:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002b80)={&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000002840)=[{&(0x7f00000013c0)="0b0210cc3fd3cd765e583ae963818704903525633f13a0c8b35cc0aff02fcf518da9883f68c83ae3f4c09d89ab63bc7f8455c645c732b0a6da2e609c319729a975e5e8eefaf376ed855b07fe7c03fd98554998c8424087a4a7ca9da9e6b20a075fce1fc653fb9870a85ac487216694fda1ea14167e0021c395d492bee78a02c4f12d995facfca9fe03a0865ac530c34127e210a9c2d8f8f35fb60d79f89219f70a325798e42cd13dd3c5bd1bceeb2622d304ba50262def421d29df9702d52f0022d541172787cb306f73274f6faa44f20f24103a6ad769d1b93daa9165e29baa0b0192f42de62a5ebf7d7d23619b9e", 0xef}, {&(0x7f00000014c0)="ee298a42e635dd8ea0c8a5528bb0f45d65a0bfebbe03fc2c5276d442892cc0226ea956ff19ca2bc55524215940e8e0", 0x2f}, {&(0x7f0000001500)="ded47e72dad26993efcef13ca032b6f50f222ea43f63471ca87cc14ed1deea133e628d4353d18340fc7ea2efa417949474372888e7b010a41e8a620ef42b24d5532416d4ec2354d336d02b84b6a06344729e36cfa4c3b62f7ad4865edfdf20f0d4cb5e6c1b7967a688e7a734116b8385dbe934369abf2eb08d7bd6133a0507a523bdac63d3ca4c858d960e76d22c43b96b5bb9756f6200adeb141cfb90bb947c7f8b3d0ecdeb", 0xa6}, {&(0x7f00000015c0)="c372bb18f05827dd2ecbc66488deee2bd793d363c199e6a8bd3b9e3222b551f91b446d1a85562941f3c9e4d258c32abfd16171b7a16436112e361bc3753dda3f9d4b89caf3b22677ad013dc0cfb3de61d37215fd56cfac49dab7d7e3dd36", 0x5e}, {&(0x7f0000001640)="6dfe628a8fd9fbddeb4ba4b1650292b006ef088e907d3549ce6406ffa29464f76ed595501b54210e7b49325fd4930d3b5170660370ce7ed8b9", 0x39}, {&(0x7f0000001680)="e635085e9d02d6a788e4844354e62679ccdd139f986668ab6101cd1e02f34e28197c7442063704ba0d818c06638716905e4f9583da1e2196c68a8458ec32cef008c678cfbb5eb7e2d0a44e0a70b76a32996b4ce191a7e77b8708408cc24e73104d14c469143ebf258f273a66163fd3be18bcd80bbf1cba1c", 0x78}, {&(0x7f0000001700)="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", 0x6be}], 0x7, &(0x7f0000002b00)=[@rights, @rights, @cred], 0x70}, 0x0) 00:27:08 executing program 3: ptrace(0x7, 0x0) 00:27:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) 00:27:08 executing program 0: socket(0x25, 0x0, 0x73) 00:27:08 executing program 4: symlinkat(&(0x7f0000000000)='\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 00:27:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @random="a13b87362427", @val, {@ipv4}}, 0x0) 00:27:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000080), &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x98) 00:27:08 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f00000013c0)={0x0, 0x1d}, 0x8) 00:27:08 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv6}}, 0x0) 00:27:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x10) 00:27:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3f, 0x7f, 0x20}, 0x10) 00:27:08 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@rights, @cred], 0x6c}, 0x0) 00:27:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2}, 0x10) 00:27:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7, &(0x7f0000000300), 0x84) 00:27:09 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000340), &(0x7f0000000140)=0x98) 00:27:09 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 00:27:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000001c0)=ANY=[@ANYBLOB='\v', @ANYRES32], &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 00:27:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='F', 0x1}], 0x1}, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x10) 00:27:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x10) 00:27:09 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x101, &(0x7f0000000340), &(0x7f0000000400)=0x98) 00:27:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x8c) 00:27:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x62, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:27:09 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="360532"], 0x8) 00:27:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x8) 00:27:09 executing program 1: syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) 00:27:09 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0xffffffffffffffc6, 0x0, &(0x7f0000000300)={0x1c, 0x1c}, 0x1c) 00:27:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, 0x0, 0x0) dup2(r0, r1) 00:27:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffc1}, 0x14) 00:27:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000500)=ANY=[@ANYBLOB='s'], &(0x7f00000002c0)=0x8) 00:27:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='F', 0x1}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r4}, 0x10) 00:27:09 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60c4ccd300182b00fe8000000000000000000000000000aa000042"], 0x0) 00:27:09 executing program 4: syz_emit_ethernet(0x2b, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 00:27:09 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6036ea0700383a00fe808e13d46ff3d4e1b972d5be81c000000000000000000000000000aa"], 0x0) 00:27:09 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000280)="f8e21c198c33612b03d0a144a33b07dd950014de125ac4b1ceb21e00f55c5146f72415fb2fa7e4798e51ed4453a1a27e3c31944c13c188e08ba2ffe998c6d40abe1b7b728fb3c9c166a849f62cdd716d7bf39dfa84ab291fffa6dfcbabdd51d2df6ce285df849db7da946b9a9d8d2500784358d7922b2aa4dc7e2322f8235669caed77c5798f57bf4e7ce5dbbbdfaee7f0b356f724ff9bee5bb76ebbd538d287276b9630e55370dda88dcc4dc6bb09edfae88442aa85bdc7c77e4ea23cbeb99d5a5a9f9d1628b734ea963efc7f7b98463cd2a5b59fd0f80c0f1b", 0xda}, {&(0x7f00000004c0)="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", 0x125}], 0x2) mmap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x1fe) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1) execve(0x0, 0x0, 0x0) 00:27:09 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000280)="f8e21c198c33612b03d0a144a33b07dd950014de125ac4b1ceb21e00f55c5146f72415fb2fa7e4798e51ed4453a1a27e3c31944c13c188e08ba2ffe998c6d40abe1b7b728fb3c9c166a849f62cdd716d7bf39dfa84ab291fffa6dfcbabdd51d2df6ce285df849db7da946b9a9d8d2500784358d7922b2aa4dc7e2322f8235669caed77c5798f57bf4e7ce5dbbbdfaee7f0b356f724ff9bee5bb76ebbd538d287276b9630e55370dda88dcc4dc6bb09edfae88442aa85bdc7c77e4ea23cbeb99d5a5a9f9d1628b734ea963efc7f7b98463cd2a5b59fd0f80c0f1b", 0xda}, {&(0x7f00000004c0)="f713c4d5f33865c032e189907f732703f921f230c367713c9621d826a435c8a5a6b73c5e38fa6dfa1881b4c54c0fc8171a857a0f4c94ecd5be8ae63e33ecaa5f5ca33d62261c71e4a1500d6e0997d735817ed2ce00fdae0760868412852794ff57ced4e699a3e4df1d9ab3e0b03845f549d6c287cb0b4fe826261feb0bf0bf0997d07c068f9fa807e88467f85a543c458ddc1d578603f40078f2702898ff2cc93c0346049fe10e7c8e06981c8dbd8f5375d71a32e76ee5f79144ac3995bfbf7df2dd74912b45de529f7c0c0a95a2b25dc0dcd02db702caf8eaf14efcd34109d7cdcd191eb7dd383e1e34ae4ad2099265a80e1ab16aaff43ed5bec42b949fe273312c7aaed09daaf9bc4806fce6ea07691d610959168394cd250787937be3b9d9eb4fe5ac4c", 0x125}], 0x2) mmap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x1fe) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1) execve(0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) dup2(r3, r0) 00:27:09 executing program 1: r0 = socket$inet(0x2, 0x4002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="8902000129ea94f77ea66ed006e3bc58e261c99a", 0x14) 00:27:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8910, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@rand_addr=' \x01\x00'}}) 00:27:10 executing program 3: io_setup(0xf9d, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x8, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={0x0, r1+60000000}, 0x0) io_destroy(r0) 00:27:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local}}}}) 00:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}}, 0x0) 00:27:10 executing program 4: io_setup(0x8b, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:27:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@rand_addr=' \x01\x00', @rand_addr=0x64010101, 0x13, 0xd}}) 00:27:10 executing program 2: pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$alg(r0, 0x0, 0x0) 00:27:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 00:27:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8935, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:27:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) 00:27:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8927, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:27:10 executing program 4: io_setup(0xbed, &(0x7f0000000040)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000680)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000300)}]) 00:27:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@rand_addr=' \x01\x00', @rand_addr, 0x13, 0xd}}) 00:27:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 00:27:10 executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90) 00:27:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x891c, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:27:10 executing program 4: io_setup(0xf98, &(0x7f0000000140)=0x0) io_destroy(r0) io_setup(0x5, &(0x7f0000000000)=0x0) io_destroy(r1) 00:27:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:27:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x181882, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:27:10 executing program 5: io_setup(0x8b, &(0x7f0000000040)=0x0) io_setup(0xe2a5, &(0x7f0000000000)) io_destroy(r0) 00:27:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{}, {0x0, 0x80}}) [ 3448.107345][T29380] nbd: must specify an index to disconnect 00:27:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x3}]}}}}}) 00:27:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8917, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:27:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x894c, 0x0) 00:27:10 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 00:27:10 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:27:10 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) close_range(r0, 0xffffffffffffffff, 0x0) 00:27:10 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x1) 00:27:10 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x0) 00:27:10 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 00:27:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"2dffc39b58da7ee5574b0ab382955314"}}}}, 0xa0) [ 3448.453495][T29403] binder: 29402:29403 ioctl c400941b 0 returned -22 00:27:10 executing program 4: pselect6(0x40, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 00:27:10 executing program 0: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000003c0), 0x103642, 0x0) write(r0, 0x0, 0x0) 00:27:10 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0xa4) 00:27:10 executing program 5: timer_create(0x0, 0x0, &(0x7f00000010c0)) timer_getoverrun(0x0) 00:27:10 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000500)={0x0, 0x0}) 00:27:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 00:27:11 executing program 1: prctl$PR_SET_MM_MAP(0x43, 0xe, 0x0, 0x0) 00:27:11 executing program 4: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='devpts\x00') 00:27:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000780), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/243) 00:27:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) 00:27:11 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x5, @thr={0x0, 0x0}}) 00:27:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 00:27:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x2) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:27:11 executing program 2: r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000340)=@ret_submit={{}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "", [{}]}, 0x40) 00:27:11 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xc, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) 00:27:11 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 00:27:11 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0xffffffffffffffff, 0x0) 00:27:11 executing program 4: open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 00:27:11 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000402505a8a4400001020301090224000101f6d0060904009d01070106db090501"], 0x0) 00:27:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x2) write$khugepaged_scan(r0, &(0x7f0000000300), 0x8) read$msr(r0, &(0x7f0000000080)=""/153, 0x99) 00:27:11 executing program 5: r0 = mq_open(&(0x7f0000000080)='.${MO', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:27:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 00:27:11 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) [ 3448.992148][T29445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 3448.998713][T29445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3449.016018][T29445] vhci_hcd vhci_hcd.0: Device attached 00:27:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 00:27:11 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) [ 3449.167213][T29446] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 3449.201961][T16761] vhci_hcd: stop threads [ 3449.216160][T16761] vhci_hcd: release socket [ 3449.221900][T16761] vhci_hcd: disconnect device [ 3449.236058][T29708] vhci_hcd: vhci_device speed not set 00:27:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x404c534a, &(0x7f0000000080)) 00:27:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x404c534a, &(0x7f0000000080)) 00:27:12 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0) 00:27:12 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000402505a8a4400001020301090224000101f6d0060904009d01070106db0905"], 0x0) 00:27:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000780), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000007c0)=""/4096) [ 3449.997265][ T27] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3450.406131][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3450.416565][ T27] usb 2-1: config 1 interface 0 altsetting 157 has an invalid endpoint with address 0x0, skipping [ 3450.428266][ T27] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3450.607319][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3450.616543][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3450.624571][ T27] usb 2-1: Product: syz [ 3450.628869][ T27] usb 2-1: Manufacturer: syz [ 3450.633460][ T27] usb 2-1: SerialNumber: syz [ 3450.820923][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.828638][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.972856][ T27] usb 2-1: USB disconnect, device number 58 00:27:14 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) 00:27:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x3e]}}, 0x0, 0x35}, 0x20) 00:27:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x404c534a, &(0x7f0000000080)) 00:27:14 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) 00:27:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:27:14 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 00:27:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x101041) write(r0, 0x0, 0x0) 00:27:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:27:14 executing program 5: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9bP\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)='}', 0x1}, {0x0}, {0x0}], 0x3}, 0x0) 00:27:15 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x10001, 0x0) 00:27:15 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:27:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280), 0x8) 00:27:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x0, 0x0, [0x0, 0x77a6, 0x401, 0x3ff], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xcd96, 0x0, 0x9, 0x0, 0x0, 0x4005]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000002080)={{}, {@val={r7}, @actul_num={@val=0x2b, 0x7f, 0x4b}}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000003080)={{r4}, 0x0, 0x4, @unused=[0x0, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffa], @devid=r7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000002c0)={r7, 0x7fffffff, 0x3}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000000)={r7, 0xffffffff, 0x60800000000}) 00:27:16 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x10001, 0x0) 00:27:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x27, 0x100}) 00:27:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:16 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x10001, 0x0) 00:27:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:27:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x27, 0x100}) [ 3454.410252][T29621] can0: slcan on ptm0. [ 3454.448053][T29621] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 00:27:16 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:27:16 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x10001, 0x0) 00:27:16 executing program 0: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x27, 0x100}) [ 3454.567074][T29618] can0 (unregistered): slcan off ptm0. 00:27:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:17 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x10001, 0x0) 00:27:17 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:27:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9bP\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:27:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x27, 0x100}) 00:27:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:27:17 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x10001, 0x0) 00:27:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x27, 0x100}) 00:27:17 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 00:27:18 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) 00:27:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 00:27:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) 00:27:18 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) 00:27:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) 00:27:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x100}) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x10001, 0x0) 00:27:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 00:27:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x10001, 0x0) 00:27:18 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x10001, 0x0) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 00:27:18 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x0, 0x0) 00:27:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 00:27:18 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) 00:27:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c02, 0xffffffffffffffff) 00:27:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:19 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x0, 0x0) 00:27:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:19 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x800) 00:27:19 executing program 4: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x200040, &(0x7f00000000c0)={[{@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@tz_utc}, {@nodots}, {@fat=@gid}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@usefree}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1a0, &(0x7f0000000780)="$eJzs3UGLEmEYB/BHM7VO3oLoMNClk1SfwAiDaCAoPNSpwLpoBHmZuuTH2A+4H2Dx5GVx2Z1dZxUXRFbHdX+/iw/+52We9/LOaZ759uzXoP979PP4yVE0m5WodqIT00q0ohpXxgEAHJLpbBYns1zZvQAAu7HG8/90xy0BAFv2+cvXD2/StPspSZoRk3HWy3r5b56/e592XyYXWsWqSZb1HszzV3meLOYP4/Fl/nplXo8Xz/P8PHv7MV3KG9Hf/vYBAAAAAAAAAAAAAAAAAAAAAKAU7WRu5XyfdvumPK+uzQdamt9Ti6e1nW0DAAAAAAAAAAAAAAAAAAAA7rTR33+D78Phjz9F0YiIxX8OuKjGXrShuNUi2Y82hrHZ8npElN58cUY0yjygAAAAAAAAAAAAAAAAAADgHile+i27EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoT/H9/w2K/xGxxsXzmz0qdasAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcsLMAAAD//xnsMng=") 00:27:19 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x0, 0x0) 00:27:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:19 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/154, 0x9a) 00:27:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000001440)=0x8aa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r1, &(0x7f0000000700)="97f9f3a786f9b3b6d993db2846a433c1bd41ffae4a81f9c51663b0f5652d8bb06bd22bdd0acef1db4ca4ca48678b9e37ce14aecbcdc1bc036f4bea9535b1b87d5634ffe2d21ae2cb3190e0c22bab6eb6024d95a0dca2823b120c9e5ce08b32105de0502f54a9681dd221e625c506d1cacfa864d98b95994debcf4e3eeec2d1a955bfc2b745070ad1e1178c9d97deb5b5819e3e5c075da1963407321fdb97add95bdfceab0a462ba3774a6d60e7a10b4d872ed26814e993e0c220a2f9d82be2252c876ca654", &(0x7f0000000800)=""/171}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x66e2e093, 0x0, r1}, 0x48) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_sqe_flags_required={0x3, 0x11}, @ioring_restriction_sqe_flags_required={0x3, 0xf}, @ioring_restriction_sqe_flags_allowed={0x2, 0x5}, @ioring_restriction_register_op={0x0, 0xc}], 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(r2, 0xa, 0x26) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x74, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x74}}, 0x2) 00:27:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9bP\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x30}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 00:27:20 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:27:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:20 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:20 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9bP\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:20 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x1a, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:27:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x127a, 0xffffffffffffffff) 00:27:20 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:21 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c000000130009"], 0x6c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe136c35f07b600d1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}) open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x4f, 0x0, 0x0, 0x0) 00:27:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:21 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x2, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='[', 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='[', 0x1, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, 0x0, 0x0) add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x1}, 0x0, 0x0, r1) r5 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='[', 0x1, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, r6, 0x0, 0x0) add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='[', 0x1, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff9, r7, 0x1) add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='[', 0x1, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 00:27:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:21 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}}, 0x0, @in6=@private0}}, 0xe8) 00:27:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) [ 3458.835931][ T28] audit: type=1326 audit(1362011241.179:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29899 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8640c7cae9 code=0x0 00:27:21 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/148) 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syncfs(r0) 00:27:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 4: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") syz_open_procfs$userns(0x0, &(0x7f0000000040)) poll(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) sendfile(r1, r0, 0x0, 0x100801700) open(0x0, 0x0, 0x0) 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000080)) 00:27:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}}], 0x1, 0x0) 00:27:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/148) ioctl$TIOCCONS(r0, 0x541d) 00:27:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 5: socketpair(0x2b, 0x1, 0xfffffffd, &(0x7f0000000000)) 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, 0x0, 0x0) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, 0x0, 0x0) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, 0x0, 0x0) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}], 0x1) 00:27:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}], 0x1) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}], 0x1) 00:27:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {0x0}], 0x2) 00:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 4: setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, 0x0, &(0x7f00000001c0)) 00:27:23 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {0x0}], 0x2) 00:27:23 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:23 executing program 4: setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {0x0}], 0x2) 00:27:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:23 executing program 4: setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:23 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)}], 0x2) 00:27:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, 0x0, &(0x7f00000001c0)) 00:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/38) 00:27:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:24 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c20") 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)}], 0x2) 00:27:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, 0x0, &(0x7f00000001c0)) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)}], 0x2) 00:27:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 00:27:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), 0x0) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e525", 0x4}], 0x2) 00:27:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)=""/38) 00:27:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e525", 0x4}], 0x2) 00:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 00:27:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), 0x0) 00:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, 0x0) 00:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e525", 0x4}], 0x2) 00:27:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xb, &(0x7f0000000140), 0x0) 00:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, 0x0) 00:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838", 0x6}], 0x2) 00:27:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)) 00:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b62, 0x0) 00:27:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@hoplimit={{0x14}}, @dstopts={{0x18}}, @dstopts_2292={{0x18}}], 0x48}, 0x24008000) 00:27:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838", 0x6}], 0x2) 00:27:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty}}) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)) 00:27:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700000303", 0x7}, {&(0x7f0000000140)="6565e5250838", 0x6}], 0x2) 00:27:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1") 00:27:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x1) 00:27:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a3, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:27:25 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1") 00:27:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:27:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0xa0) 00:27:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000000)=@generic={0xa, "da2555405c9820b29ea091520910c688caf45599bdcc371d2321f893016e69c8385c9958b23dbb88d1a41a1d75408eaa4c62b134b71c55521a7bc7e76ca3146b8d463a39cbcdf741f026bbe4919121a221adc7724e78f170ab207081ba5c3f7d124e5b57ad69bd749e29710894ea4cc271866e8bd610e56ad86592280c23"}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x200}, 0x0) 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x1) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1") 00:27:25 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) connect(r0, &(0x7f00000001c0)=@nfc, 0x80) 00:27:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000029c0)={'gre0\x00', 0x0}) 00:27:25 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x1) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e7") 00:27:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:27:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_L2SPEC_LEN={0x4}]}, 0x30}}, 0x0) 00:27:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, 0x0, &(0x7f00000001c0)) 00:27:25 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e7") 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}, 0x6}, 0x0) [ 3463.293658][T30221] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:25 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:25 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@hoplimit={{0x14}}], 0x18}, 0x0) 00:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e7") 00:27:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 00:27:25 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x22, 0x0, 0x0) 00:27:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, 0x0, &(0x7f00000001c0)) 00:27:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46") 00:27:26 executing program 3: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) 00:27:26 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000004380), &(0x7f00000043c0)='./file0\x00', 0x0, &(0x7f0000004400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) 00:27:26 executing program 3: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46") 00:27:26 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 00:27:26 executing program 3: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) bind(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) 00:27:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, 0x0, &(0x7f00000001c0)) 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46") 00:27:26 executing program 2: socket$inet6(0xa, 0x100801, 0x0) 00:27:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) read$eventfd(r0, &(0x7f0000000080), 0x8) 00:27:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x20000085) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf") 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700", 0x4}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"929efc26a46644363170f9973c6c7ad4"}}}}, 0xa0) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf") 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700", 0x4}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000280), 0x12) 00:27:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f000000b3c0)={&(0x7f0000009f40)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f000000b2c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf") 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="04000700", 0x4}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), 0x0) 00:27:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee6") 00:27:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="242600003000010028bd7000ffdbdf2500000000b41101"], 0x2624}}, 0x0) 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="040007000003", 0x6}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}, 0x0) 00:27:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee6") 00:27:26 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0x21, 0x0, 0x0) [ 3464.530981][T30321] netlink: 5212 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3464.560997][T30321] netlink: 4528 bytes leftover after parsing attributes in process `syz-executor.2'. 00:27:26 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="040007000003", 0x6}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) 00:27:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 00:27:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) 00:27:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee6") 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), 0x0) 00:27:27 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6a901, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="040007000003", 0x6}, {&(0x7f0000000140)="6565e5250838e0", 0x7}], 0x2) [ 3464.711864][T30335] binder: 30332:30335 ioctl c00c6211 0 returned -14 00:27:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', @ifru_addrs=@sco={0x1f, @fixed}}) 00:27:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c") 00:27:27 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000004380), &(0x7f00000043c0)='./file0\x00', 0x0, &(0x7f0000004400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fsmagic}]}}, 0x0, 0x0, 0x0) 00:27:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003340)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, &(0x7f0000003280)=[{&(0x7f0000002180)="b5c1be0f0c107e6c09d196b8178aa4f136b9f77b422fc5576caeaa5446f4f90791573910f293a02d3403b3304fa917490f9a39070d4dfcb2e57308fe70e48c89ac9a1b321aa97a75debc40ecbecb6956caeb15de2b4a9b98b2ddaab2a7faa1e9a7cbd48d4fecfe12d9ddad414b1cd3d0d12597a79fccc595fd8c11a13aed4161feddee19cb25b20dfa5023913aa0ae471fcab043e1b9722cbeeef802e46566b6e4576b920189c0c4b5b1", 0xaa}, {&(0x7f0000002240)="f7115e49d598", 0x6}], 0x2}, 0x400080c0) 00:27:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 00:27:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 3464.959798][T30355] fuse: Unknown parameter 'fsmagic' 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8970, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:27:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, &(0x7f0000000140), 0x0) 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c") 00:27:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003340)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, &(0x7f0000003280)=[{&(0x7f0000002180)="b5c1be0f0c107e6c09d196b8178aa4f136b9f77b422fc5576caeaa5446f4f90791573910f293a02d3403b3304fa917490f9a39070d4dfcb2e57308fe70e48c89ac9a1b321aa97a75debc40ecbecb6956caeb15de2b4a9b98b2ddaab2a7faa1e9a7cbd48d4fecfe12d9ddad414b1cd3d0d12597a79fccc595fd8c11a13aed4161feddee19cb25b20dfa5023913aa0ae471fcab043e1b9722cbeeef802e46566b6e4576b920189c0c4b5b1", 0xaa}, {&(0x7f0000002240)="f7115e49d598595681fe6b8b6afa1f", 0xf}, {&(0x7f0000002280)="0813eb", 0x3}], 0x3}, 0x400080c0) 00:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x0, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:27:27 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 00:27:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="df248bd8895df0bb523d756a1a5ed17f3d2adcfbf7f2848ac01186b9fe41a97be08f2b69747de8eea7d5280762a1e88b9430dd96bc38c8e207c6f57173800b96e98b1f36e77bee84d9354d2ad901221a46772d5f345faf8e4ee60c") 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x0, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) [ 3465.354530][T30384] ip6_vti0: mtu less than device minimum 00:27:27 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x11, 0x0, 0x0) 00:27:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x0, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:27 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$eventfd(r0, 0x0, 0x12) 00:27:27 executing program 2: syz_emit_ethernet(0x113, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60db050000002b00fe8000000000000000000000000000aafe"], 0x0) 00:27:27 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd601bcab000442f00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 00:27:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 00:27:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:28 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000080)=@id, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='Y', 0x1}], 0x1}, 0xffff1c990080ffff) 00:27:28 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db5e42", 0x8, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "300fe43d4e6861bc"}}}}}, 0x0) 00:27:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r1, 0x101, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 00:27:28 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0xffa, "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"}}, 0x1000) 00:27:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:27:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'rmd256\x00'}}, 0x0, 0x0) 00:27:28 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000900)={{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:27:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:29 executing program 1: syz_emit_ethernet(0x22c1, &(0x7f0000002340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60193907228b2f00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 00:27:29 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc) 00:27:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x10, {{0xa, 0x0, 0x0, @private1}}}, 0x88) 00:27:29 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/120, 0x78) 00:27:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x24, 0x0, 0x0) 00:27:29 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f00000000c0)) 00:27:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) 00:27:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) 00:27:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='maps\x00') read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) 00:27:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x1c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') write$cgroup_type(r0, 0x0, 0x0) 00:27:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:30 executing program 2: syz_io_uring_setup(0x4afe, &(0x7f00000004c0)={0x0, 0xa6e2, 0x8}, &(0x7f0000000540), &(0x7f0000000580)) 00:27:30 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x81, 0x0, 0xd}) 00:27:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4) 00:27:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:31 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x0, 0x2020, 0xffffffffffffffff, @prog_id}, 0x20) 00:27:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:27:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') 00:27:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 00:27:31 executing program 1: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)=""/252, 0xfc}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000840)=""/153, 0x99}, {&(0x7f0000000900)=""/178, 0xb2}], 0x4, 0x0) 00:27:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x39, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:31 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 00:27:31 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/vlan0\x00') 00:27:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0xb, &(0x7f0000000080), 0x4) 00:27:32 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0x6, &(0x7f0000000040)) 00:27:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000000040)={0x38}, 0x0) 00:27:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 00:27:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) 00:27:32 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x27, 0xf, 0x0) 00:27:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') read$FUSE(r0, 0x0, 0x0) 00:27:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 00:27:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 00:27:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:32 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0xf, 0xf, 0x0) 00:27:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x6, 0x0, 0x0) 00:27:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 00:27:32 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f000000a600), 0x0, 0x0) read$ptp(r0, &(0x7f000000a640)=""/208, 0xd0) 00:27:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x15, 0x0, 0x0) 00:27:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000080), 0x4) 00:27:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x15, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:32 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/.-(-\x00') 00:27:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000006b40)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006b00)={&(0x7f0000006a80)={0x14}, 0x14}}, 0x0) 00:27:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) 00:27:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x23, &(0x7f0000000080), 0x4) 00:27:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 00:27:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:33 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xd, &(0x7f0000000040)) 00:27:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 00:27:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) 00:27:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x3a, 0x44, 0x0, 0x0) 00:27:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) 00:27:33 executing program 1: syz_io_uring_setup(0x30f8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x287}, &(0x7f0000000100), &(0x7f0000000140)) 00:27:33 executing program 2: socket$inet6(0xa, 0x5, 0xfffffc00) 00:27:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) connect$netlink(r0, &(0x7f00000001c0), 0xc) 00:27:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000040)="389c4a3b0661aa3f0482467c8af1cc635c366d611a68c1101bd2c4739d5aee7f1c4f61911dcd1696627834c8ae5081664ce97562658f14087333ab646332887ed477c01236211a277a1b0c97572fda1b4a42fe46b38b53fdacd3eff7ef043933c91d7a6a0d648fafa10cee26b33a0e3ff8ba9035057c624483a3b9b60622331f651f6e610199745d1c7474ac6c44935f7a675cdcc1644a420e1f12f4fcc4da4979ee0061c790f0155b2f", 0xaa, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 00:27:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:33 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='statm\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 00:27:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$cgroup_type(r0, 0x0, 0x2) 00:27:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, &(0x7f0000000080), 0x4) 00:27:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x18, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') read$FUSE(r0, 0x0, 0x0) 00:27:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x21, 0x0, &(0x7f0000000040)) 00:27:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)='D', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x401}, 0x1c) 00:27:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x80, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 00:27:34 executing program 1: futex(&(0x7f0000000180), 0x0, 0x2, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 00:27:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x81000) 00:27:34 executing program 5: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000180)={0x1}, 0x0, 0x0, 0x0) 00:27:34 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x3a, 0x0, 0xffffffffffffffff, @prog_id}, 0x3d) 00:27:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 00:27:34 executing program 5: r0 = getpgid(0x0) capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)) 00:27:34 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 00:27:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:27:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) 00:27:34 executing program 5: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/199, 0xc7}], 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/101, 0x65}, {0x0}, {0x0}], 0x3, 0x0) 00:27:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0xfe6e) 00:27:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) 00:27:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:34 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x2c, 0xf, 0x0) 00:27:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x49, 0x0, &(0x7f0000000040)) 00:27:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) process_vm_writev(r1, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/248, 0xf8}], 0x1, &(0x7f00000054c0)=[{&(0x7f0000002f80)=""/156, 0x9c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 00:27:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}}, 0x0) 00:27:34 executing program 2: syz_io_uring_setup(0x8cf, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000000200)) 00:27:34 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendfile(r2, r3, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x38, 0x0, &(0x7f0000000040)) 00:27:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local}}) 00:27:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 00:27:35 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000003030101000000000000000007000004080003400000004308000340000000030c000200fffffffe000100000800034000000db00c000200fffffffb000000080c0002000000000000000100fbd254f68496867fac70b8e4290fee35fd2c771df75a22ed176e49a4456dd115508355a10957e7950d5d485c2116c42ddfd71a20f2c51bbc42342a8b788c69d1a888fef957c04ef57b42a080921e0557854b48b78fb89d51541fae00"/181], 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x4044814) 00:27:35 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendfile(r2, r3, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:35 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:27:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3473.654356][T30746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 00:27:36 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:36 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:36 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) [ 3473.969892][T29708] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 3474.316167][T29708] usb 2-1: Using ep0 maxpacket: 8 00:27:37 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:37 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) [ 3474.816415][T29708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3474.841392][T29708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:27:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:37 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendfile(r2, r3, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:37 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) [ 3474.858410][T29708] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3474.881361][T29708] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 00:27:37 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) [ 3474.910357][T29708] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3474.946857][T29708] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3475.256369][T29708] usb 2-1: string descriptor 0 read error: -22 [ 3475.270790][T29708] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3475.415654][T29708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3476.106884][T29708] cdc_ncm 2-1:1.0: bind() failure [ 3476.115331][T29708] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3476.123383][T29708] cdc_ncm 2-1:1.1: bind() failure [ 3476.133266][T29708] usb 2-1: USB disconnect, device number 59 00:27:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:27:38 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000000)) 00:27:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:38 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendfile(r2, r3, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:38 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000000)) 00:27:39 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000000)) 00:27:39 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:39 executing program 2: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:40 executing program 2: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) [ 3477.675449][T24141] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3477.915955][T24141] usb 2-1: Using ep0 maxpacket: 8 [ 3478.036101][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3478.047348][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3478.057710][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3478.067498][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3478.077393][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3478.087312][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3478.376168][T24141] usb 2-1: string descriptor 0 read error: -22 [ 3478.382468][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3478.391735][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3478.686236][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3478.693726][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3478.700810][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3478.709723][T24141] usb 2-1: USB disconnect, device number 60 00:27:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:41 executing program 2: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886", 0xa) 00:27:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'bond0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ipvlan0\x00', @link_local}) 00:27:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:41 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:41 executing program 1: getgroups(0x2, &(0x7f0000000200)=[0x0, 0x0]) setresgid(0x0, r0, 0x0) 00:27:41 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:41 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:27:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 2: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 2: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 2: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:42 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) 00:27:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:42 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) 00:27:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) 00:27:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x34, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 00:27:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) [ 3480.968613][T30947] tipc: Invalid UDP bearer configuration [ 3480.968662][T30947] tipc: Enabling of bearer rejected, failed to enable media 00:27:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 00:27:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 2: socket(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 00:27:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:43 executing program 2: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 00:27:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:43 executing program 2: futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 00:27:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:27:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:27:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:27:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:27:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003340)={&(0x7f0000000180)=@newtaction={0x1e84, 0x30, 0x0, 0x0, 0x0, {}, [{0x1d4, 0x1, [@m_skbedit={0x74, 0x0, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x5, 0x6, "db"}, {0xc}, {0xc}}}, @m_gact={0x15c, 0x0, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0x91, 0x6, "3a40d8f54b4702801ff4335fa3914308dc53f0fa50e7107ec16b522e90c79cb425d2b781a325bdb6391eb86cda08f41af0f42a0cf62d196f04cad7e0e36f89cb49dfb7fb972369d2a8b4cef04157304c3bda0d0f4b206babefb80d25be2b6ecf195b61456fffa8d2d5baafa3ffb2862c484e5aff6648c07be1237787e1a5180184041be3a8081f66b5d5677a3c"}, {0xc}, {0xc}}}]}, {0x114, 0x1, [@m_sample={0x110, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0xc1, 0x6, "1060cd45f5436832c1dc592b67e3a9a45b0c8107a95858f253cf1d77116358318582cf307c866eaca3d49159e88ddeb10e27bef08c66579c19c6ee1439bfa7fecc42e215bb6bd5ed6bead6d2e39767c4b8b7c31b0aafe5a52525eb70dfe098053d4f8001158b0149e907856520f7df363433dd1b3d79f7849ba9b859b61ce605e8d9fe1ee94b6a2f826703a6798d6429c73d1b393e45fad272c8d63aea4eb22f326c8a79aa151bfc27060151a82c48662635b363c0dacee0e0b1ad0274"}, {0xc}, {0xc}}}]}, {0x170c, 0x1, [@m_bpf={0x1068, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc}}}, @m_sample={0x144, 0x0, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0xbd, 0x6, "fb2badd2aa2499cc27ed8d0058f1897cac202c61c4c60a836423f77dfaf8d4e92d7b1e6b9082c4f3f55267a8839635b7611e56bf30d8b6c784d5e3ed4b8009d2315429ca89ab48efe697a7b4551ba91bd40a83a000229740a0da803843106bd11450e2fa2bef67f9dc87ec07d718c5a5f5996b5990660a4017f5886fe82a68ca7274e61d07c9acf8545efdc45882e023e3c872e618a7b0147b717f669137618a067a4f9980679477fd6c442ec58a6287e0a48bc7e559a115bb"}, {0xc}, {0xc}}}, @m_connmark={0x114, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x8d, 0x6, "79bb3370f9773ceba0767e4686c2639cc309e606cda9718c8e9cc6fba3f08ac5fa7c19f3c587cac3cca1539999efa79234c22f98cc3c9e361b87a557d7e1b5d6f6a73dfdcc74fec1cfd0dcde6fd7a07394b3568e72d4375cd67fc33440ac80b44c96410175df991c77e1c2fc958c7f1ab92f18aa42e76a55d932a64aae07d458cfb33907fb945480d3"}, {0xc}, {0xc}}}, @m_tunnel_key={0x68, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0x9, 0x6, "7cca488f2d"}, {0xc}, {0xc}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4d, 0x6, "5e8d7a6ccc1b34686da2b666e6cd7457a2092434c1a9cce7537f3a7eaa6ef4eaeb7ddf11b1f8ce25afdd3cf1da575e297954be60eb9b92010ea41a5424c8b44c85ea71539c2d923527"}, {0xc}, {0xc}}}, @m_nat={0x178, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @multicast1}}]}, {0xd5, 0x6, "6bdc9e0f76dea70235f143aab21f0bcc64563b4146063be8219761729ac5a6f5fb3e7d6189befe1c9c853d27863196ab1f208e17445d9c7c1f400ea97e356c5bcb64e149b13914006ffcfb5db70f90c3de74f63294a055bf199dc7e10e02c991fd5d3d8926e0734e6b855daa7d99ce81ef8485470d4f7d0fbf719994d5948defa1813568e71ea9b7f4a55319d29b9409189aa1aa3672478be825cccb302bb1851cb189edafb0a6f5e55ec98d1e2bb753657a6a9bf27ff647413a31140dbaf4a8c09bb4ea20c0e294a93a211246e4845bb3"}, {0xc}, {0xc}}}, @m_gact={0xb4, 0x0, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0x61, 0x6, "1f7b8e32e70e1ee129f54a10aab4a42d98d4707fd9343a0adffee23a856ae215766f6c4864430bfd7d827d73a046077665ed4dbb6d2ef43bf83afaeed1239263fb446a2b935b8dc71097fd765490eeacd4aa38236cbf6a5f82f731fc3c"}, {0xc}, {0xc}}}, @m_mpls={0x70, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_TTL={0x5}]}, {0x5, 0x6, 'U'}, {0xc}, {0xc}}}, @m_tunnel_key={0x9c, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x55, 0x6, "67c4386439c7ba1a7a4145c7207a9bf704a8bb6b6babc5c6cdcafc9a1f02b0c7cc380c100d6e49847352d8745a3afd7aa1c7d0560fcf0ddc0cc6db1107f972b248fd3c9788ad199e530ab44111cfc41ecf"}, {0xc}, {0xc}}}]}, {0x47c, 0x1, [@m_tunnel_key={0x80, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x31, 0x6, "68cf2748046b75b63fc393eaca01cb7adc78d6585b63ae8ea8547fa682616e613d888cd46bd80c581b5e02883e"}, {0xc}, {0xc}}}, @m_connmark={0x17c, 0x0, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xbd, 0x6, "6f1ffbaebad52920bdf684a68e098dcd22b64975033297899328fc57674f3e5f1b306f0b56db268fdab86ead304d98e40bcf0c4aadd7189b43d736fa16e3140c675a682e7193d8b5fc02020df8416eb739425c22235b509fdd22b058afce08e9bb864f94be3ce4dcf30f644bd183262b501a5bd050914ff3ab29defacda9a7132f3e40d9421e05fa3406d717d7f690d7e0aa4ce431135c1009fd3c316d55b505e23ea1f0b5a791f287b8ce2c1dbc98077324897aff379550a9"}, {0xc}, {0xc}}}, @m_mirred={0xf8, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x69, 0x6, "296bef527ce92e98bc0ae69fb33e488135fa9a5fbadfc7740fcc471848393d9547db0ddcbf75eebe1a511a52118546094c335a7a1a855985ba1b60760cd67a7daaff4df595f4a7ebe93898ace40d6893996a91ca7d98bb44146057b2b8cdd98d0a129af139"}, {0xc}, {0xc}}}, @m_skbmod={0xa8, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x1d, 0x6, "ca2e334d49b3b1046fecb30c86ff8bcc11ec620fb12140d94a"}, {0xc}, {0xc}}}, @m_mirred={0xdc, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xad, 0x6, "4fb4455759021c2c6d5f146661ea19dc1c9c6112fa61eb6a5b7d69be56e4281dd8ab432398c4647375422510d978cae139d60cffe43c1488f6f33e3fe8574b8a0ba2cde55dd23090e950d193faeb92fe2c349b8040bb20994bcba07d866a418f0b7bdf358814cc4a9e2dae130f040fe8f5a51e880193e4590bd1bd227ff3a6efd12472d45b0e834ef38fd53ae24f111ebd239731877b8d7ec19277e3a46e461786970a01c3d9507bea"}, {0xc}, {0xc}}}]}]}, 0x1e84}}, 0x0) 00:27:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x4, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 00:27:44 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:44 executing program 5: close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0) [ 3482.076975][T31021] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3482.132909][T31021] tipc: Invalid UDP bearer configuration [ 3482.132969][T31021] tipc: Enabling of bearer rejected, failed to enable media 00:27:44 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:44 executing program 5: close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:44 executing program 2: syz_usb_connect$cdc_ncm(0x3, 0xad, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x39}, [@mdlm_detail={0x16, 0x24, 0x13, 0x0, "572ef63cc6580f625cb0ea5965f0d284cd21"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6e}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x81, 0x4, 0x0, 0x82}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x75}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x20}, 0x0, 0x0, 0x0}) 00:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0) 00:27:44 executing program 5: close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0) 00:27:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:44 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:27:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:27:45 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3482.606419][T24141] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3482.865934][T24141] usb 3-1: Using ep0 maxpacket: 16 [ 3483.026166][T24141] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3483.109249][T24141] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3483.124079][T24141] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3483.138144][T24141] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3483.386192][T24141] usb 3-1: string descriptor 0 read error: -22 [ 3483.392461][T24141] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3483.405855][T24141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3483.699162][T24141] cdc_ncm 3-1:1.0: bind() failure [ 3483.707401][T24141] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 3483.714210][T24141] cdc_ncm 3-1:1.1: bind() failure [ 3483.723597][T24141] usb 3-1: USB disconnect, device number 101 00:27:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:46 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:27:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:46 executing program 2: syz_usb_connect$cdc_ncm(0x3, 0xad, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x39}, [@mdlm_detail={0x16, 0x24, 0x13, 0x0, "572ef63cc6580f625cb0ea5965f0d284cd21"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mbim_extended={0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6e}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x81, 0x4, 0x0, 0x82}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x75}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x20}, 0x0, 0x0, 0x0}) 00:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:27:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:46 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:27:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:27:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:46 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3484.575908][ T27] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3484.835862][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 3485.016081][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3485.106337][ T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3485.116497][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3485.126573][ T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3485.416074][ T27] usb 3-1: string descriptor 0 read error: -22 [ 3485.422471][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3485.431636][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.746124][ T27] cdc_ncm 3-1:1.0: bind() failure [ 3485.755171][ T27] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 3485.762558][ T27] cdc_ncm 3-1:1.1: bind() failure [ 3485.772872][ T27] usb 3-1: USB disconnect, device number 102 00:27:48 executing program 2: syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x400000) 00:27:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:48 executing program 2: readlink(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 00:27:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa36e}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 00:27:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) [ 3486.464320][T31130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3486.500543][T31130] tipc: Invalid UDP bearer configuration [ 3486.500599][T31130] tipc: Enabling of bearer rejected, failed to enable media 00:27:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 00:27:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0xc2d, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 00:27:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 00:27:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) [ 3486.946405][T31165] tipc: Enabling of bearer rejected, failed to enable media 00:27:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:49 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:27:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000300027070000000000000000000000004c000100480001000900010067616374000000001c000280180002000000000000000000000000020000000000000000040006000c0007000100000001"], 0x60}}, 0x0) 00:27:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3487.119364][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3487.151165][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:27:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x6c) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/228, 0xe4}}], 0x1, 0x2060, 0x0) 00:27:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x6c) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/228, 0xe4}}], 0x1, 0x2060, 0x0) 00:27:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20) 00:27:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x6c) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/228, 0xe4}}], 0x1, 0x2060, 0x0) 00:27:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x6c) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/228, 0xe4}}], 0x1, 0x2060, 0x0) [ 3487.415900][T24141] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 3487.656187][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3487.776450][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3487.946409][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3487.955482][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3487.964260][T24141] usb 2-1: Product: syz [ 3487.969085][T24141] usb 2-1: Manufacturer: syz [ 3487.973677][T24141] usb 2-1: SerialNumber: syz [ 3489.116308][T24141] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3489.122767][T24141] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3489.130383][T24141] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3489.346237][T24141] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3489.373820][T24141] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3489.396835][T24141] usb 2-1: USB disconnect, device number 61 [ 3489.403262][T24141] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) 00:27:52 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:27:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 00:27:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:52 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 00:27:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:52 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 00:27:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3490.205997][ T27] usb 2-1: new high-speed USB device number 62 using dummy_hcd 00:27:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet6_int(r11, 0x29, 0x13, 0x0, 0xfffffffffffffe21) 00:27:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3490.486043][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 3490.656191][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3490.866405][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3490.875492][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.887265][ T27] usb 2-1: Product: syz [ 3490.896688][ T27] usb 2-1: Manufacturer: syz [ 3490.902358][ T27] usb 2-1: SerialNumber: syz [ 3492.067956][ T27] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3492.074405][ T27] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3492.082475][ T27] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3492.288654][ T27] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3492.301030][ T27] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3492.316996][ T27] usb 2-1: USB disconnect, device number 62 [ 3492.323845][ T27] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) 00:27:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:55 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 00:27:55 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:27:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet6_int(r11, 0x29, 0x13, 0x0, 0xfffffffffffffe21) 00:27:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3493.127053][T20967] usb 2-1: new high-speed USB device number 63 using dummy_hcd 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3493.395937][T20967] usb 2-1: Using ep0 maxpacket: 16 [ 3493.526369][T20967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3493.716710][T20967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3493.742058][T20967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.758547][T20967] usb 2-1: Product: syz [ 3493.762804][T20967] usb 2-1: Manufacturer: syz [ 3493.774825][T20967] usb 2-1: SerialNumber: syz [ 3494.930879][T20967] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3494.937906][T20967] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3494.945301][T20967] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3495.146184][T20967] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3495.159595][T20967] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3495.177412][T20967] usb 2-1: USB disconnect, device number 63 [ 3495.183874][T20967] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) 00:27:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:27:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet6_int(r11, 0x29, 0x13, 0x0, 0xfffffffffffffe21) 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, 0x0, 0x0) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:27:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, 0x0, 0x0) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, 0x0, 0x0) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3495.975904][T24141] usb 2-1: new high-speed USB device number 64 using dummy_hcd 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:27:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3496.225976][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3496.356249][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3496.556555][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3496.585166][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.615106][T24141] usb 2-1: Product: syz [ 3496.627289][T24141] usb 2-1: Manufacturer: syz [ 3496.631954][T24141] usb 2-1: SerialNumber: syz [ 3497.776176][T24141] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3497.783318][T24141] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3497.791020][T24141] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3497.996661][T24141] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3498.010700][T24141] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3498.028190][T24141] usb 2-1: USB disconnect, device number 64 [ 3498.035008][T24141] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) 00:28:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 00:28:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:28:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:28:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet6_int(r11, 0x29, 0x13, 0x0, 0xfffffffffffffe21) 00:28:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) 00:28:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043a3", 0x28) [ 3498.836010][T24141] usb 2-1: new high-speed USB device number 65 using dummy_hcd 00:28:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, 0x0, 0x0) 00:28:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3499.096508][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3499.216746][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3499.396328][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3499.405376][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.413880][T24141] usb 2-1: Product: syz [ 3499.418443][T24141] usb 2-1: Manufacturer: syz [ 3499.423407][T24141] usb 2-1: SerialNumber: syz [ 3500.596132][T24141] cdc_ncm 2-1:1.0: failed to get mac address [ 3500.616105][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3500.635990][T24141] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3500.656462][T24141] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3500.676028][T24141] usbtest: probe of 2-1:1.1 failed with error -71 [ 3500.688706][T24141] usb 2-1: USB disconnect, device number 65 00:28:03 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 00:28:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, 0x0, 0x0) 00:28:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:28:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) 00:28:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, 0x0, 0x0) 00:28:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440), 0x0) 00:28:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440), 0x0) 00:28:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3501.416431][T24141] usb 2-1: new high-speed USB device number 66 using dummy_hcd 00:28:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440), 0x0) [ 3501.676253][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3501.796317][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3501.976177][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3501.994000][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.003504][T24141] usb 2-1: Product: syz [ 3502.008001][T24141] usb 2-1: Manufacturer: syz [ 3502.012602][T24141] usb 2-1: SerialNumber: syz [ 3503.176038][T24141] cdc_ncm 2-1:1.0: failed to get mac address [ 3503.196178][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3503.216045][T24141] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3503.236012][T24141] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3503.255991][T24141] usbtest: probe of 2-1:1.1 failed with error -71 [ 3503.266858][T24141] usb 2-1: USB disconnect, device number 66 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63", 0x14) 00:28:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:28:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:06 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 00:28:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r10 = dup2(r8, r8) recvmmsg(r10, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63", 0x14) 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63", 0x14) 00:28:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d2", 0x1e) 00:28:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3504.016034][ T5123] usb 2-1: new high-speed USB device number 67 using dummy_hcd 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d2", 0x1e) 00:28:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d2", 0x1e) 00:28:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) [ 3504.285851][ T5123] usb 2-1: Using ep0 maxpacket: 16 00:28:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3504.426750][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3504.616323][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3504.631443][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.642581][ T5123] usb 2-1: Product: syz [ 3504.647201][ T5123] usb 2-1: Manufacturer: syz [ 3504.651914][ T5123] usb 2-1: SerialNumber: syz [ 3505.816428][ T5123] cdc_ncm 2-1:1.0: failed to get mac address [ 3505.836152][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3505.856223][ T5123] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3505.875955][ T5123] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3505.896122][ T5123] usbtest: probe of 2-1:1.1 failed with error -71 [ 3505.905684][ T5123] usb 2-1: USB disconnect, device number 67 00:28:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38", 0x23) 00:28:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(r8, r8) 00:28:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38", 0x23) 00:28:08 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38", 0x23) 00:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e30", 0x26) [ 3506.636836][ T5123] usb 2-1: new high-speed USB device number 68 using dummy_hcd 00:28:09 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3506.886049][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3507.016544][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3507.186724][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3507.196499][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.204501][ T5123] usb 2-1: Product: syz [ 3507.208781][ T5123] usb 2-1: Manufacturer: syz [ 3507.213390][ T5123] usb 2-1: SerialNumber: syz [ 3508.346295][ T5123] cdc_ncm 2-1:1.0: failed to get mac address [ 3508.370095][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3508.395951][ T5123] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3508.418833][ T5123] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3508.456193][ T5123] usbtest: probe of 2-1:1.1 failed with error -71 [ 3508.465336][ T5123] usb 2-1: USB disconnect, device number 68 00:28:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e30", 0x26) 00:28:11 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) 00:28:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e30", 0x26) 00:28:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043", 0x27) 00:28:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3509.156432][ T5123] usb 2-1: new high-speed USB device number 69 using dummy_hcd 00:28:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043", 0x27) 00:28:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) write(r0, &(0x7f0000001440)="693ae8819510c9dd8886fa98d90e6a230e845b63aa45121d972dbad547d27cafe74a38a32e3043", 0x27) [ 3509.395875][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3509.516700][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3509.686169][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3509.695238][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3509.704019][ T5123] usb 2-1: Product: syz [ 3509.708572][ T5123] usb 2-1: Manufacturer: syz [ 3509.713177][ T5123] usb 2-1: SerialNumber: syz [ 3510.876163][ T5123] cdc_ncm 2-1:1.0: failed to get mac address [ 3510.898487][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3510.926370][ T5123] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3510.946030][ T5123] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3510.965926][ T5123] usbtest: probe of 2-1:1.1 failed with error -71 [ 3510.975023][ T5123] usb 2-1: USB disconnect, device number 69 00:28:13 executing program 5: bpf$MAP_CREATE(0x7, 0x0, 0x0) 00:28:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) socket$inet6(0xa, 0x3, 0xff) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) 00:28:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:28:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x84, 0x9, 0x0, &(0x7f00000005c0)=0x9b) 00:28:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed, 0x1}, 0xe) 00:28:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3511.716059][ T5123] usb 2-1: new high-speed USB device number 70 using dummy_hcd 00:28:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x2, &(0x7f0000000a80)=@raw=[@map_idx_val], &(0x7f00000011c0)='GPL\x00', 0x7, 0x3d, &(0x7f0000001200)=""/61, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 3512.006078][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3512.126271][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:28:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) socket$inet6(0xa, 0x3, 0xff) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) [ 3512.259066][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.265423][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.296164][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3512.310057][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.318802][ T5123] usb 2-1: Product: syz [ 3512.323118][ T5123] usb 2-1: Manufacturer: syz [ 3512.328257][ T5123] usb 2-1: SerialNumber: syz [ 3513.496664][ T5123] cdc_ncm 2-1:1.0: failed to get mac address [ 3513.516235][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3513.546216][ T5123] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 3513.569754][ T5123] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3513.595953][ T5123] usbtest: probe of 2-1:1.1 failed with error -71 [ 3513.606323][ T5123] usb 2-1: USB disconnect, device number 70 00:28:16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x181}, 0x14}}, 0x0) 00:28:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) socket$inet6(0xa, 0x3, 0xff) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) 00:28:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 00:28:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:16 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1180, 0x0) 00:28:16 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) 00:28:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3514.346886][T24141] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3514.606110][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3514.728990][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3514.896224][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3514.905547][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3514.917999][T24141] usb 2-1: Product: syz [ 3514.922179][T24141] usb 2-1: Manufacturer: syz [ 3514.928876][T24141] usb 2-1: SerialNumber: syz [ 3515.635999][T24141] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3515.642045][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3515.653144][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3515.660305][T24141] cdc_ncm 2-1:1.1: bind() failure 00:28:19 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:19 executing program 5: semget(0x0, 0x0, 0x302) 00:28:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x3, 0xff) 00:28:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3517.042671][ T27] usb 2-1: USB disconnect, device number 71 00:28:19 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 00:28:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:28:19 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:19 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:19 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) [ 3517.565934][ T27] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3517.826001][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 3517.966132][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3518.156155][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3518.165236][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.180330][ T27] usb 2-1: Product: syz [ 3518.184498][ T27] usb 2-1: Manufacturer: syz [ 3518.195079][ T27] usb 2-1: SerialNumber: syz [ 3518.896332][ T27] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3518.902495][ T27] cdc_ncm 2-1:1.0: bind() failure [ 3518.910293][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3518.917316][ T27] cdc_ncm 2-1:1.1: bind() failure 00:28:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:22 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 00:28:22 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) socket$inet6(0xa, 0x3, 0xff) [ 3520.116599][ T27] usb 2-1: USB disconnect, device number 72 00:28:22 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:28:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:22 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 00:28:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3520.586855][ T27] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3520.825928][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 3520.946206][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3521.116215][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3521.125276][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3521.139514][ T27] usb 2-1: Product: syz [ 3521.143677][ T27] usb 2-1: Manufacturer: syz [ 3521.150896][ T27] usb 2-1: SerialNumber: syz [ 3521.855962][ T27] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3521.862104][ T27] cdc_ncm 2-1:1.0: bind() failure [ 3521.871858][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3521.878773][ T27] cdc_ncm 2-1:1.1: bind() failure 00:28:25 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:25 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 00:28:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[], 0x6c) [ 3523.181644][T21076] usb 2-1: USB disconnect, device number 73 00:28:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 00:28:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x2, 0x8, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:28:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3523.626365][T21076] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 3523.876410][T21076] usb 2-1: Using ep0 maxpacket: 16 [ 3524.006146][T21076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3524.196046][T21076] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3524.205295][T21076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.213719][T21076] usb 2-1: Product: syz [ 3524.218086][T21076] usb 2-1: Manufacturer: syz [ 3524.222740][T21076] usb 2-1: SerialNumber: syz [ 3524.906353][T21076] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3524.912411][T21076] cdc_ncm 2-1:1.0: bind() failure [ 3524.922138][T21076] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3524.929071][T21076] cdc_ncm 2-1:1.1: bind() failure 00:28:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:28 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x600, 0x0) 00:28:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 3526.246008][ T5139] usb 2-1: USB disconnect, device number 74 00:28:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:28 executing program 5: socketpair(0x29, 0x5, 0xfffffffc, &(0x7f0000000380)) 00:28:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x408, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2085, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:28:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3526.746745][ T5139] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 3527.005929][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 3527.126961][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3527.320176][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3527.330312][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3527.338534][ T5139] usb 2-1: Product: syz [ 3527.342808][ T5139] usb 2-1: Manufacturer: syz [ 3527.347650][ T5139] usb 2-1: SerialNumber: syz [ 3528.036136][ T5139] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3528.042326][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 3528.050674][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3528.057849][ T5139] cdc_ncm 2-1:1.1: bind() failure 00:28:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) syz_clone(0x24000200, &(0x7f0000000080)="988efdaa8e8ec47bcc4e4190b45fbfd8014144297e10f0c2c9560b805474fd32da1fa5e98270f45fca176fbae1578a53bd0df9d4e99371a460e18dfc028b9ac36b07715b2f53b17382dedce9b7d41a102db8a300ec098113d5dcdcc8de1c9da0f5aca03569bdfcc6f4da7e976735203e13bd88c0d358e4806b7ee4e98b8e53893f0b58b2f2828ff92e1c9ed4db33cff5a419f421536ad16ac896a8b9e0ff4b304ac9d9bb2593b511e0fc40ab36185b6b346ece78f293c6287f68b86cb47dd2ec817b55f9d33484d7e8b09f83d3874aafe4b70bf3907c43177b6b05de45a01b122c5a729c2ff421e10c", 0xe9, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="bbdea3c1ec837c25dc94523ef5df88d35812eac8c077dff6a7a7236eefbbcd881d1b17302fcf13cf03ecada9d4922eb2ba1706ee817f40eb9abb3d90ab69a745c200816ed5aae36e5ef2ca7fe6864a7d72105a26b88d2424beb5cc9efcc43d81c73f0570bfa5f94331a3e52de32ed1a2604882da85e44c29629c5a46c648626c5ff23e52a0344c") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x5, 0x4, 0x1000, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x5, 0x3}, 0x48) 00:28:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(r6, r6) [ 3529.338726][ T5139] usb 2-1: USB disconnect, device number 75 00:28:31 executing program 5: syz_clone(0x1c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:32 executing program 5: syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c80000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000600)={'trans=tcp,', {}, 0x2c, {[{@msize}]}}) 00:28:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3529.844214][ T5139] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 3530.112522][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 3530.246344][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3530.426081][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3530.435266][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3530.445833][ T5139] usb 2-1: Product: syz [ 3530.450039][ T5139] usb 2-1: Manufacturer: syz [ 3530.455253][ T5139] usb 2-1: SerialNumber: syz [ 3531.216219][ T5139] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3531.222279][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 3531.231694][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3531.238716][ T5139] cdc_ncm 2-1:1.1: bind() failure 00:28:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:34 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 00:28:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) 00:28:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3532.398602][ T5139] usb 2-1: USB disconnect, device number 76 00:28:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='P', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x1a, &(0x7f0000000140), &(0x7f00000001c0)=0x10) 00:28:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 00:28:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 00:28:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) [ 3532.896018][ T5139] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 3533.166018][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 3533.286236][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3533.486566][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3533.495892][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3533.503957][ T5139] usb 2-1: Product: syz [ 3533.508734][ T5139] usb 2-1: Manufacturer: syz [ 3533.513409][ T5139] usb 2-1: SerialNumber: syz [ 3534.206161][ T5139] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3534.212225][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 3534.223867][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3534.230703][ T5139] cdc_ncm 2-1:1.1: bind() failure 00:28:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:28:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet(0x2, 0x5, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040), 0x8) 00:28:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:28:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3535.488344][T24141] usb 2-1: USB disconnect, device number 77 00:28:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:28:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:28:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsetxattr(r0, &(0x7f0000001080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 00:28:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}) [ 3535.995931][T24141] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3536.256087][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3536.376757][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3536.546122][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3536.555679][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3536.563953][T24141] usb 2-1: Product: syz [ 3536.568407][T24141] usb 2-1: Manufacturer: syz [ 3536.573016][T24141] usb 2-1: SerialNumber: syz [ 3537.276025][T24141] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3537.282195][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3537.290833][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3537.298278][T24141] cdc_ncm 2-1:1.1: bind() failure 00:28:40 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x541d, 0x0) 00:28:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 00:28:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) socket$inet6(0xa, 0x3, 0xff) 00:28:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3538.578936][T24141] usb 2-1: USB disconnect, device number 78 00:28:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001180)={0x0, 0x0}) 00:28:41 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001180)={0x0, 0x0}) [ 3538.814474][T31836] can0: slcan on ptm0. 00:28:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001180)={0x0, 0x0}) [ 3538.937586][T31836] can0 (unregistered): slcan off ptm0. 00:28:41 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3539.046047][T24141] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 3539.115974][T31844] can0: slcan on ptm0. [ 3539.216926][T31844] can0 (unregistered): slcan off ptm0. [ 3539.306434][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3539.426269][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3539.595991][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3539.605305][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3539.619515][T24141] usb 2-1: Product: syz [ 3539.627271][T24141] usb 2-1: Manufacturer: syz [ 3539.631999][T24141] usb 2-1: SerialNumber: syz [ 3540.346126][T24141] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3540.352171][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3540.363370][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3540.370312][T24141] cdc_ncm 2-1:1.1: bind() failure 00:28:44 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001180)={0x0, 0x0}) 00:28:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x9c0, 0x4) 00:28:44 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3541.644476][T24141] usb 2-1: USB disconnect, device number 79 00:28:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x12ced4973f70fae8}, 0xc) [ 3541.770208][T31883] can0: slcan on ptm0. 00:28:44 executing program 3: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r2, 0x7fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14113e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001040)="28b3a8ed322c5440eaae5f3c55e7726d0502f2fc265fa48565cb7c0bd89d5d42b33db9f5e0598d2ee678c9b7cd644a32f76e310a0aa258bf62821af09bdb9f9f56e5bf31b2c237ba6f909eec5290509b9ea00749e48cc000f4c1c57739d949e019e541cb03734d46cf4bce7be2c5342c54d9a0d95304df82de893305c346b53c98ad92fb180b277630b57d8d1b66674c3f834113443f135ecedd56157615ad7f59aa3eaff887eb036a424b86f8a29e1717b9c8e6d06d8d9a44fc439e602800cb74d820dd5ddb91ad4b1d5e17609bdb452211e6876715dc03d59cfa336eab4b4ef679246536413dcc61b4f88180c47cc45a7ff4adbd8b702a880f37e8bb41f8d37df5d315fd8e30f0e7d1d5fec565cc843937617c4a85d1995cd65783348e5ff7310759ab0990337f5068af1e7b7d664024f4174b587ea5ecd1b0c58a146da2b29e16be5f9ff6460884bda3f08c3c1825873c85dd82d72ffcf40f899247b78a3118ba8e35501f09585addf38c169964ceceecae29046de012f0dcef3caf2d007de314546572d1aada5b1111bb39b1d007ee256b6fd67b450377ea072db651b543ed90d4720aac6da26db692986f9ea9ef3d860878b673165c4c1d19727d714c6f9f37fe516e8e8713326b91a71b81f35f491bf703a195b1901b082b8de1c761745eeab9f066193e25526e5f5c5a96e583ebbe849b722a21f40922ae816b605caf58d0b1200751e84c5142ac6df989e65e4ba359f20e5d82c6727f3aed2234aabb8f7fff35caf943a36498d45c11ddd521c4bb21646326c122f77d084a632a561057c753ffe45e694fa2c27d9f0e14d4d56d3abd394a674452a983a8c71df3bf41d93029b709d7171aab544cdf7aba2590340ab6b595f4a46e23d6e8cb2974db170c87e28f83929bc78bba94bca0f960f7eb151e5e07cb910c5d7602ac97d85027edae571e320d35b49415d65abd06ed54e3f4d9b8ffcaad6163332dcc72b97ec3d57e520ceb04bae6a71b98fc37b29da149401052554d10669c657154edd0bd8b0ddc16100fc90ce246989546f34814a0f89ffdfe307a780c02a984d57207163f2d296d7d225e2d8c3655a9a6230977736821b6828e94ec2c4994e10d96f9545b376b80b7cd9f0acde3d0969b88fe7acccc7607674ba7fc193f5ecc42085d2bcb9be82057a5a0f223d7f0ff890fe0efb0904b74118b5489f15fd9ab39e007e852cb404fbac77a572c247e826d2de977f8793aad743ddb7074f002d7806dd9b156978db5c045c874f4d7d3f5634890b5000c23d33a0e287e6d785145a82943abfe0eaa74bd544ed315c900668fe9b0fed863738bd9f5620a2ac31ea81e114838050e722a2ad70822083e56bf4465d7884db084a85679cc16aac39658472a382f81b69da6832300276b78ad21aa06bed8acb0794bec8c54cd83cd4dc64b98a88c0131cd1208aa9d1ce5c29542f3741cf753c535a224f039ba7aaa50c82717707817aa6772241016a81f97db3bfd8f89599d762e6f224d7f3025d50f5d7863e973d8b786666e8089cc4f879fbb26d9ede0168920849382c795fc4585726ae96b8f4881426c7b6373a1da340b47a4c2c76633f524325e184a41c9ac5e6ba5a2d7a407787970776d807ed50cc45fe95d42fb7612b8f118e707ea6c72df1d598e9fa00cc76023b79977782130f6f053bdfe181938cbe3be2499a17c9972c88382a8f1d7098d2b95b00d7cb57e10fd22d836d86c10c428bf1f7c7645de2722e9b940ef94d492132be81594a1645753f9418a2f1b96d4fbad4eb40c84e27b5ab88357e5c65a07977dfac2096198a4a8845286fc70f60b8611d257ff7f18f061b4adf3e0cdd217428e28aa1f6196424d00d9b512c158bbbac872217d4484093029ce4d1466798d3f7fec596176be6b5650c1778a6b78b58497e8f995cef80b752e2eef2c0e40f79da7f1b053cb52ef2c967361def86937c5fa0f4fa0eb6e1519de9e16239d9f76dcfffe2217249a43faf4a31ca4717d80e0bc1e6a99be34d8076846890e975f331097b8d92ac25d71692d397e5030583b72ae0c2368d7fbdc2fd15ba651e35a8886ab397cc6c5fb1be0f56cf9a16b12b701687121816cb856906bfb8a8d70fac5856d8793704d18d48b6b796e41fbb7a7cd215467820df2aa007d3ced893ec50b9150fc22cad685480a436981304939e6e18ddf04eccd8040c3b9cd8a8c0ae320355e19f55f3ed6d835c78b354090517a6ebb5a3f55e2f8ef8a77390837c85ffe3edec89a8df5f2a6b437e8a6f9c5dfc57acbd4b9dc2fc484b7eef94e78bb398abd2f3404de58643bffe94a2643f243e21b8ee0ab2bfd1c1b164407ec79895fdc5cd610b76e37c7aa13a867f7b499cb0f99297e2e48ed33f8bb5dde16f45cf7e4ee6145eab9215eefffe155279f98b7e3c6925e4ed67047cfdb5398c9c6d173c4b6d521adfd9de24280f298c1d947088ce79ef57a45722466c082cd10001ae4832e6fe8f0f68e31183feeaef700a028ecdd6c757200e22d362e1a0a1a7b085cdb5e6798cd88b303e3fdbe7c5406c20aa9c9b6ea9e9f64494dcb8ceb5a5939d6647c919a5bba6bdd7e639cf0a6f79ccf0bdf54da903b3e65f9c2ee087bc9152364a556d0efe1ba3a4be8cb026824ce9c5aac8d92d51f6f714c5f378ece6c54cd7742748ddd1b75d36c090a75f6be6fc6bf9c90873484f749c5efaddd2af3150a86704439000cc2406a1beffa19aed1441aa5cff78efcf341f8d3e1f57c5e2e260a8e8583e0a5065989497dd568826d117c7bd65adbb9b22dd31e2dd18235df8f558ab843b11a286074664fb477c1300938bec625c1996cb2fb201f09bb5e79bde48ce5c10d9fe0b51f5b649e72827e9ac43f4dd982ae2a6639808677bc8e5fd3398396469f345d54976368985b4bd343ce896a8a01a4838f32b45964cd38604a90550332b1639a80294338868dc66cf0d7ccedb31cc873c26de95f277e16f162557967e84ade5313f1643c5c497781bcf086fabd53fcd4643ac824b98ba7ead92eaba8af5daba4b77b8fc8b8be17a53bae0422797aaa9bb69726d6940101a18ffc1db685e6725bd07e8c7be21dba458f7841cb838ee305b1cbe255f831e20dcf83f86d698484ee9af52fbc87ef423df3a1d6633e5f10698b117843cb4e24bbf8ceacb0db39331ded2dbd6853147579c2abe36a636eaf364476b86d3c2d00210d660ecf7e94f96017c5a48816bd552a89560e0b1309fbd2d8717d397b93ce79628826853892a40c1a661bd6ae175446439acbe2e41c107c2d30eafc315f2cbe97faa4ab18889e87c510254d1a3e1440ed312f4a7d7823880140ac114986a7aaef1f46b5ddaaaafa8c025c9856281e3fdd40c1eedae92d0b8a410b6e56d851d35c1b581ec74507ffb762f94578bf4db194a2e596464fc2f4f283077b2311f8ed0ab7409f7e34e588191933167c8c9ed1ad6f51f746c025d854926c95f6ac32deaa35cf12ba64481d509997e4bd1dff7f687b108b4388f3f53af92cbd8af4430fb5351664405ad4e4d5941bed398abdeb7b945e33e45f317ce3dcda9a93472a7fff32ef1d6b7030efa16066b286eaff453cb235055d7a873b58eaa6990574eb7c3518dc91ecb810555c22ee52a2fd00dff6dd5f8060f145d2e03894ec59e4f7e49bcd520f94ff4570f0937f9f73f39036f656c0c96db2f55183e62f2e0978b8d1257916f1581c58d9a75ca54b84cb05416f2f6c20378cd511340c88d355e488f27861d6088e0f4681a3eea9a4caa2ab95a2e686e3206cc996326bbb5d12b0209842e9a61747aae9421e36bb8e08e97de8c5d6a4f4bb46a8a8f603785b94937d002626d63a42241438c9b8cfc9de6d2eefcf30308c66b738ad5819bd50706507d8ad1424c0e9ee2daa70cac1e57ca19a7ebeba578fdeebf58a7bfb6bb0ef3a2b4ce7984ae31a56bb01fa7058bdb74e8cbaf741fd72ab4f75e2bb83b55fe468f8cec834209f89e169213088a72e8847b2df1d0b7b1af1fc229b66d565baa0c6b9f8aea28d3ab9930f32ff9da1e801ce5eb98f7f38b67d433589e7a900bccd73149d9c04253f5d67120c17276f46ec5ea3412833852afa54ef314b249620df524567ca95b4a4b3dc99ef774fe337eaa92bcb8c4443bb249e8b73b28deadb04f760429046919f6bbff38ea757b9d59b26f10dc9723423906b33ea83cb470414b0936d070c8b829e654134aa529bce83b3d25a40e814b12370309e7ad42725a130418b0a274ff8d26db7ef0f515e360fbd169b7b93aa6a0fabe3202e7845e5f7748fa436ff59d5c4c4740fa4af12e73c8e0cd9bb389091a43f2e0f9467054f6aea2c36efc753b8d7f46dc67b5267737ce4e7614ad9bf63287cd7a41b5d453123cc576814336fbc75c5e0f73081c39f445db1358d0dd67299ea10f20fda37342f2b4e5deb7e9ca426ae33d6e94e5c87a7ccb8504fd20983bae4a26bf7bec174bbd8dbd85904c571e30aa94c543a77381ee0323b4529161496f8ae79280b3c3c1be18ec698df53d7ba6a0f7c07322c5dce942d5799500ffe5161107675d786c24e53f81687e0638c40e945da472816ccd01af2039c742cc30e737776413325f0b30ba54abc17f0a2c069f1d38d2479f1c74cc5e371910a6f649c04ea5bcaaf71e73056598421abf115f9ed0256e9064ece755c547adaf3151c6c6c6a131c0aa77ab98f32ff9272d2b6b878f7c86330e3bd98d9fb672053b9700fa2c5e039a2d7d884bc95756e99a8515627476edc42c2d3bd4b16226cc34ea76b505bf39b32b3da70aa99cdd8f1f0c854ec0b626898ef82bce6469fe9f148f39c90ee5a9ead40f09f9a81856f7293652306d3f39eed4abc6eb7f9e3d41fb66d05a60f21b9f417ffd8d8e1ded363cfa8a52aad16c9f33d0a7a9a1d45d196d11af0f4f72607eef9d1e331ca5bbf906c66646d289de41e7221f295214a0d0b5ee1301a90ffdd48f61e1581bd985019df9fa762eec5246a109aded6328effd315414cdda46178ff7de8288f55290330762f572aab4114a04a97d83d20cbb9453b5d48e470cd9eee1bff62e26461065d917b5ea116bdafeb8d5a4d14cf1a14449642e657f3ccef89d113fe23e422b618262627ffb1173f6fb295ef1f382820d8a954357655c0b4c13a37626181157b4288121b7af40a05836e41e64966d15d699530f664817268b702d9aff3d60df2a2c93d60630c40c1112a24d800e45a45d29a103cc8213039cf101614d6cb2c5390947c4efdd691e4583875b00d66eeb445fdbab9983a884efd236959d7869ce275bc7f4ec7dd45828f95c58a34819d65434a5108d064e65e59d94afccaee250f7eef688a7c6fca761666d65151c6e6ae65afd84d218afa016186f229a56f11e2d68e7f51c9e4d68ed6cd11167f28a6390282d73fcda083c8d7ef9e90efc5012e468624a2232b98e46abe35f2657fd88dc96b04f2d4e249e3a09f98ff97d1e70bb704ff34bae41745e1511ed9e295752d267cc22b115b7cc6b057e2eb48a45ad412eea24138cd3fc60390af93b7dc5b08915ef57f868e1115acfd28d01848f84430204da9ee2ce4a34b749bb2aa5af661ac12d9df254345e399eaaee16e7652f4ed24f0388437fe73fca2cd612bf838f0a13800cda9f171c39833a81f49da3edfa50d52a7c4fba2203d80df4f9f77708e2b6859103c217cf3c27f35600cb9f0", 0xfc1}]) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 3541.937012][T31883] can0 (unregistered): slcan off ptm0. 00:28:44 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3542.211065][T31899] can0: slcan on ptm0. 00:28:44 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv4_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) 00:28:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) accept4$alg(r3, 0x0, 0x0, 0x80000) 00:28:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000003200)=ANY=[@ANYRES32=r2, @ANYBLOB="09e800b81dfc6fb0fefbf790c45429946409a9245ef7a63095c8d4408887d9cde3dbf8ec4bffb818fbbc5ead98aeff6a5549e74cef0600f179b113017f4006000000000000002dd2018591d6f091e439593ef58c161bc6e943e951000000e65db442922a2a83db734a8e35ba4b3ba5108ae12dbf4301bbd66aecf8032970de343ffcdbf45b4dcac1bc18cd408ffd2d1eb55b9d0123c7e63c5f529576e988583758e7920510fdf829b61fd2b6cc853219391a373d22b20d48ce332303723c7d3bc2c44a9fb519abb40a5150e41254fa0035a246c254e90e27b1809d43", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") creat(&(0x7f0000000300)='./file0\x00', 0x0) [ 3542.388565][T31899] can0 (unregistered): slcan off ptm0. 00:28:44 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:44 executing program 3: socketpair(0x23, 0x0, 0xfffffffa, &(0x7f0000000040)) 00:28:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:45 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/144, 0x0, 0x90, 0x1}, 0x20) 00:28:45 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:45 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:45 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x14, &(0x7f00000002c0)={0x0}}, 0x4004041) 00:28:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:28:45 executing program 3: r0 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) 00:28:45 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:28:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x14, 0x0, 0x604}, 0x14}}, 0x0) 00:28:45 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:28:45 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) 00:28:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000c00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 00:28:45 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:28:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) [ 3543.828257][T31985] can0: slcan on ptm0. 00:28:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) socket$inet6(0xa, 0x3, 0xff) 00:28:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:28:46 executing program 3: io_setup(0x8b, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3543.936537][T31988] can0 (unregistered): slcan off ptm0. 00:28:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1277, 0x0) 00:28:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c55000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 00:28:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:28:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x18020) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x114000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:28:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c55000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 3: io_setup(0x8b, &(0x7f0000000040)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 00:28:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000001100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 00:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x92d00852273bbe47}, 0xc) 00:28:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000840)={{0x0, 0x7b}}) 00:28:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c55000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:48 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0xa40) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 00:28:48 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4}}]}}]}}, 0x0) 00:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) [ 3545.900897][T24141] usb 2-1: new high-speed USB device number 80 using dummy_hcd 00:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) [ 3546.016397][T20967] usb 4-1: new high-speed USB device number 67 using dummy_hcd 00:28:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3546.126193][T24141] usb 2-1: device descriptor read/64, error -71 [ 3546.139817][T32091] can0: slcan on ptm0. 00:28:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) [ 3546.247271][T32089] can0 (unregistered): slcan off ptm0. 00:28:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3546.381823][T32105] can0: slcan on ptm0. [ 3546.425943][T24141] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 3546.457512][T32103] can0 (unregistered): slcan off ptm0. [ 3546.586549][T20967] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3546.595674][T20967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3546.612597][T20967] usb 4-1: Product: syz [ 3546.617219][T20967] usb 4-1: Manufacturer: syz [ 3546.621976][T20967] usb 4-1: SerialNumber: syz [ 3546.636031][T24141] usb 2-1: device descriptor read/64, error -71 [ 3546.677590][T20967] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3546.756568][T24141] usb usb2-port1: attempt power cycle [ 3547.176396][T24141] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 3547.287268][T24141] usb 2-1: device descriptor read/8, error -71 [ 3547.306120][T21076] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3547.515010][T32080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3547.524843][T32080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3547.534564][ T5139] usb 4-1: USB disconnect, device number 67 [ 3547.558748][T24141] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 3547.656335][T24141] usb 2-1: device descriptor read/8, error -71 [ 3547.777867][T24141] usb usb2-port1: unable to enumerate USB device [ 3548.341732][T21076] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3548.348818][T21076] ath9k_htc: Failed to initialize the device [ 3548.355355][ T5139] usb 4-1: ath9k_htc: USB layer deinitialized 00:28:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x14) [ 3548.649013][T32126] can0: slcan on ptm0. [ 3548.696398][T32123] can0 (unregistered): slcan off ptm0. 00:28:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80086601, 0x0) 00:28:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/188) 00:28:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:28:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/154) 00:28:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:51 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) [ 3548.843229][T32137] can0: slcan on ptm0. 00:28:51 executing program 4: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x38000814}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x44, 0x12, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000c, 0x48018}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'nicvf0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8001, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6cc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe83}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2c801503}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x408d4}, 0x1000) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000440)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x358, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x287d04df}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe1, 0x3, "de584098aefa97f5428d746069b8d88ccbd277aef61df2723b7837d2b10ae61d36bf6a93ba3ebe636a6de41567845cb93e5d72c0c91aad8f8203950cd76c8489f016f0aca2acc1a498dee595da4bd2105c0727d3ffad544590c8f858de97d4eadcc80eb4b9127b5f2197f86448c6db3f6a5bf8a403a776f085cb5ee4ef8a22f910ba2093c6167ef4507293d7a788f731caa2f85fcc801e2957e415de503316246a18059e7313af5841507456baaa0e452aefa1c480ccd5feeefd60f9c3007d2021777547c7f0908b1c357c77debd0064f8a49cea0343ab793034a1cf32"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e423529ed797c9eae4e72a346a4f687952e4796c64ced1a74c048a7aaae078fe3a03"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "caaff14563d81ea62d1e25433837004c280431281da87f9209"}}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x22, 0x3, "61f526c75c174844cccae283ecd295a34198847df468c6dad123b9e8fbe4"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "7b07f9e6cc7b76301aefb706e491634097a09f03a1117ab873b643042eb40e2165982c0728d5e5259a91f21c82326c991a97c92b0149ff28812c37f284396906b547b1936750d7b2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "4ae1c0b4bd12fbf38dfb34f068d5e546c9dfdc9e04da"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7c11f1ded24dd1aca06233159e0682bff410a4fbd2be635964f89e27b55018"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x10}, 0x804) connect$ax25(0xffffffffffffffff, &(0x7f0000000940)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$ax25(0xffffffffffffffff, &(0x7f00000009c0)={{}, [@default, @bcast, @bcast, @null, @bcast, @null, @bcast, @null]}, &(0x7f0000000a40)=0x48) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000a80)=0x8000000000000000, 0x8) pipe2$watch_queue(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getchain={0x34, 0x66, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x2, 0xa}, {0x0, 0xc}}, [{0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c804}, 0x4004840) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000c40)) write$6lowpan_control(r2, &(0x7f0000000c80)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x11c, 0x0, 0x108, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5220}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea78}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x406bf9a3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8b}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000011c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x1d8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4557}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x22008401) socket$can_raw(0x1d, 0x3, 0x1) getsockname$ax25(r2, &(0x7f0000001200)={{0x3, @default}, [@default, @default, @default, @netrom, @netrom, @bcast, @null, @netrom]}, &(0x7f0000001280)=0x48) pipe2$watch_queue(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000015c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0xa2288aa3b09c0dc) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001600), 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r4) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000001cc0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f00000016c0)={0x588, r6, 0x1e3d1da80ae6f6f7, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c00e0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x25e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffce35}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbc41}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "22fcbe55bf7fdeaaeebe79738cbf7d4ca21f9804bc344b8e961636985ae5f22c65c980f9ce6724f8a4b460a691d249bba615c0a5c7ee334d2d720b8cd184df2c9145c1b1ed01bd"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "10a515868708d4d936e481103279e1d854a4e9a6f72ddf1c5131b0fe74107d9bbaf3d2"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "52fb61b748f824572a7b20908b9cbbf703b1aa631b8cf49e08"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63f1d9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "3de03b5b2db176c3ec173814461fb3ac674a51e4a2669be5e4037d6e93684c0a7f5e781a688fab989ebcd7d7df5f5114e30dc97b9e50d9026e8aaafee42a1329c501100c0e291bc02ec0d68923cb98d15990cce83b7052b014cfc95ffcf7d19d3c2b25b641753c9f45c3e824f7cf1ba3e3a241276ef81359236d20030b74e323435ee9cc47764c7e1ea70efd7f194469d695cedddc6f4b02"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2bc4dbcc6906c7cbd6db8244910f0f124500556c0b23268dd45f6cb9b37ab1"}}]}, @TIPC_NLA_NODE={0x21c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fc4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "3c414095acb2a719198792f5b7f762995ddee8b208806ed600b319874ef322d368c0f6317091543b31b8fb7f5a3d39940c8bb82741add237ca9b0573d9db033ea5acae505d85a079ba5fbb2e498a62b7d921b4d6610a4363e1e3663a45a3a7d965b0f7cf13ed0edc28bad4c90ce1d72b87dc0ef578c63b59d1d5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "0c844e746444b681ed14981d12e9796531a932"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "89fed4fc9c69dbc0f113806c472c215ca1e3f4ab75ee46ffccff1003"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "c9b16778240830c427d50fea76ae2624f658b5782053578ff61cdebebb847cc720ddfd096a210355563f9f3d90615a93cce89c6f722fe4aa843c22d813f909a9db635e55a444c091227fc061d1627e9174cf23827c03a07898f4394d36a225d1649b9f80f3257810ec7c60663198fe7726df02071627bbbc2a262223476e80315733bbceee78f3d97b43a9ed3a226f539c12ba5b74b69e09f4ee6408587f2e0524ce16898a25c8911a25b1dde7d22c3d96deb3879fdca6adcbc195b5959a998917fafb48f5a02478137fe1ea0b6aba4e159e1b721f6f1d527db6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "31fe6c5e375df71fd807114dfe034ffd4db4be78a07b"}}]}]}, 0x588}, 0x1, 0x0, 0x0, 0x44000}, 0x10) pipe2$watch_queue(&(0x7f0000001e00), 0x80) [ 3548.946440][T32135] can0 (unregistered): slcan off ptm0. [ 3549.106095][ T5139] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 3549.216484][T29708] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3549.320563][ T5139] usb 2-1: device descriptor read/64, error -71 [ 3549.606019][ T5139] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 3549.827132][ T5139] usb 2-1: device descriptor read/64, error -71 [ 3549.833756][T29708] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3549.843348][T29708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3549.851662][T29708] usb 4-1: Product: syz [ 3549.857822][T29708] usb 4-1: Manufacturer: syz [ 3549.862532][T29708] usb 4-1: SerialNumber: syz [ 3549.906894][T29708] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3549.945995][ T5139] usb usb2-port1: attempt power cycle [ 3550.375915][ T5139] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 3550.469848][ T5139] usb 2-1: device descriptor read/8, error -71 [ 3550.566092][T19536] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3550.756152][ T5139] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 3550.770661][T24141] usb 4-1: USB disconnect, device number 68 [ 3550.876231][ T5139] usb 2-1: device descriptor read/8, error -71 [ 3551.010976][ T5139] usb usb2-port1: unable to enumerate USB device 00:28:54 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:28:54 executing program 4: syz_clone3(&(0x7f0000000280)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:28:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:54 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) [ 3551.627100][T19536] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3551.652571][T19536] ath9k_htc: Failed to initialize the device 00:28:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3551.676448][T24141] usb 4-1: ath9k_htc: USB layer deinitialized [ 3551.739449][T32157] can0: slcan on ptm0. 00:28:54 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) 00:28:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 3551.820054][T32152] can0 (unregistered): slcan off ptm0. 00:28:54 executing program 4: pipe2$watch_queue(&(0x7f0000000ac0), 0x80) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/211) 00:28:54 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3551.960851][T32174] can0: slcan on ptm0. [ 3552.056497][T32172] can0 (unregistered): slcan off ptm0. [ 3552.086002][T24141] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3552.096048][T21076] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 3552.313635][T21076] usb 2-1: device descriptor read/64, error -71 [ 3552.586971][T21076] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 3552.646448][T24141] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3552.655540][T24141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3552.666822][T24141] usb 4-1: Product: syz [ 3552.671025][T24141] usb 4-1: Manufacturer: syz [ 3552.675976][T24141] usb 4-1: SerialNumber: syz [ 3552.717335][T24141] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3552.776238][T21076] usb 2-1: device descriptor read/64, error -71 [ 3552.899234][T21076] usb usb2-port1: attempt power cycle [ 3553.286035][ T5123] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3553.305901][T21076] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 3553.396106][T21076] usb 2-1: device descriptor read/8, error -71 [ 3553.511348][T19536] usb 4-1: USB disconnect, device number 69 [ 3553.665885][T21076] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 3553.756026][T21076] usb 2-1: device descriptor read/8, error -71 [ 3553.877176][T21076] usb usb2-port1: unable to enumerate USB device [ 3554.336441][ T5123] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3554.343562][ T5123] ath9k_htc: Failed to initialize the device [ 3554.352481][T19536] usb 4-1: ath9k_htc: USB layer deinitialized 00:28:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:57 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000005c0), 0x4) 00:28:57 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1a"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) 00:28:57 executing program 3: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) pipe2$watch_queue(&(0x7f0000001000), 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000017c0)='ns/uts\x00') syz_clone3(&(0x7f0000001a40)={0x200500, &(0x7f0000001800), 0x0, &(0x7f0000001880), {0x2a}, &(0x7f00000018c0)=""/90, 0x5a, &(0x7f0000001940)=""/192, &(0x7f0000001a00)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 00:28:57 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:57 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x300000, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) [ 3554.820551][T32206] can0: slcan on ptm0. 00:28:57 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000003c0)={'xfrm0\x00'}) 00:28:57 executing program 4: socketpair(0x1d, 0x0, 0x5589, &(0x7f0000000140)) 00:28:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3554.937569][T32220] can0 (unregistered): slcan off ptm0. 00:28:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80) [ 3555.166184][ T5123] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 3555.413648][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3555.536414][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3555.548725][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3555.716575][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3555.726222][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3555.734233][ T5123] usb 2-1: Product: syz [ 3555.738635][ T5123] usb 2-1: Manufacturer: syz [ 3555.743248][ T5123] usb 2-1: SerialNumber: syz [ 3556.896172][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3556.905166][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3556.912383][ T5123] cdc_ncm 2-1:1.1: bind() failure [ 3557.117253][ T5139] usb 2-1: USB disconnect, device number 92 00:28:59 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:28:59 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$l2tp(r0, 0x0, 0x0) 00:28:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@hci, 0x80) 00:28:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000b40), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 00:28:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:28:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1a"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0045878, 0x0) 00:29:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000780), 0x0, 0x200000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 00:29:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000b40), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 00:29:00 executing program 5: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) 00:29:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) sendmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) [ 3557.986301][ T5123] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 3558.225893][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3558.346224][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3558.358914][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3558.526052][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3558.535179][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3558.544152][ T5123] usb 2-1: Product: syz [ 3558.548578][ T5123] usb 2-1: Manufacturer: syz [ 3558.553191][ T5123] usb 2-1: SerialNumber: syz [ 3559.696252][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3559.704580][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3559.712890][ T5123] cdc_ncm 2-1:1.1: bind() failure [ 3559.907958][ T5123] usb 2-1: USB disconnect, device number 93 00:29:02 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:02 executing program 3: syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x4, 0x11ea, &(0x7f0000002480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 00:29:02 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x100c4, &(0x7f0000000380)={[{@uid_forget}, {}, {@gid}, {@mode={'mode', 0x3d, 0x3f}}, {@fileset={'fileset', 0x3d, 0x2}}]}, 0x1, 0xbf2, &(0x7f0000001840)="$eJzs3U9sHNd9B/DfG5IiZbcVEzuK3cbFpi1SmbFc/YupWIW7qmm2AWSZCMXcAnBFrtSFqSVBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokW1dILn4UOTUE9HCRlD0wBYBcgoYzOxbcilRlmyKEml/Pjb13Z19b+a9N+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSoWwEAPEyXJ7966oz7PwB8olzx//8AAAAAAAAAAAAAAHDQpSjiiUixcHkjTVfvO4Yutdo3b02Nje9e7WiqavZV5cufodNnzp770guj57v5wfUftKfjtckrF2svz99YWGwuLTVna1Pt1sz8bPO+97DX+rcbqQagduP1m7PXri3Vzjx/dsfHt4bfH3z8+PCF0WdPPtMtOzU2Pj7ZU6Z/4CMf/Q53m+FxJIo4GSme+95PUiMiitj7WNzju7PfjladGKk6MTU2XnVkrtVoL5cfTnQHooio9VSqd8foIZyLPalHrJTNLxs8UnZvcqGx2Lg616xNNBaXW8ut+fZE6rS27E8tijifIlYjYn3wzt0NRBH9keI7xzbS1Yjo647DF6uJwXdvR7GPfbwPZTtrAxGrxSE4ZwfYYBTxaqT46TtFzJRjln/iCxGvlvmDiLfKfCkilV+McxHv7fI94nDqjyL+ojz/FzbSbHU96F5XLn2t9pX2tfmest3ryqG/PzxMB/zaNBRFNKor/kb66L/ZAQAAAAAAAAAAAAAAAOBBOxpFPB0pXvmPP67mFUc1L/3YhdE/GP7l3jnjT91jP2XZ5yNipbi/OblH8hTiiTSR0iOeS/xJNhRF/Eme//etR90YAAAAAAAAAAAAAAAAAACAT7QifhwpXnz3RFqN3jXFW+3rtSuNq3OdVWG7a/9210zf3NzcrKVO1nNO51zJuZpzLed6zihy/Zz1nNM5V3Ku5lzLuZ4z+nL9nPWc0zlXcq7mXMu5njP6c/2c9ZzTOVdyruZcy7meMw7I2r0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8nRRTx80jx7W9spEgRUY+Yjk6uDT7q1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxPcjRe0P61vb+iMiVf92nCh/ORf1I2V+OuqjZb4U9Ys5G1X217/1CNrP3gykIn4UKQaH3t464fn8D3TebX0N4q1vbr/71f5O9nU/HH5/8PHjxy6Mjv/6U3d7nXZrwMilVvvmrdrU2Pj4ZM/m/nz0T/dsG87HLR5M14mIpTfefL0xN9dc9MILL7zYevGor0w8DOX9/71I8Tvv/mf3ht+9//9S593WHT5+9qfb9/8Xb9/RPt3/n+jZ9mL+3chAf8TQ8o2FgeMRQ0tvvHmydaNxvXm92T536tSXR0e/fPbUwJGIoWutuWbPqz0PFQAAAAAAAAAAAAAAAMDDlYr4vUjR+NFGqkXErWq+1vCF0WdPPtMXfdV8qx3ztl6bvHKx9vL8jYXF5tJSc7Y21W7NzM827/dwQ9V0r6mx8X3pzD0d3ef2Hx16eX7hjcXW9T9a3vXzx4YuXl1aXmzM7P5xHI0iot67ZaRq8NTYeNXouVajXVWd2HUy3Yc3kIr4r0gxc66WPp+35fl/t8/w3zH/f+X2He3T/L9P9Wwrj5lSET+LFL/9l0/F56t2PhZ3jFku97eRYuT853K5OFKW67ah81yBzszAsuz/RYp//PnOst35kE9slz193wN7SJTn/1ik+P6ffzd+I2/b+fyH3c//Y7fvaJ/O/5M92x7b8byCPXedfP5PRoqXnng7fjNv+6Dnf3SfvXEiF956Psc+nf/P9Gwbzsf9rQfTdQAAAAAAAAAAgENtIBXxd5HimfH+9ELedj9//2/29h3t09//+mzPttmHtF7RngcVAAAAAA6IgVTEjyPF9eW3t+ZQ75z/3TP/83e353+Opds+rf6c71eq5wY8yD//6zWcjzu9924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dSn77Ge+lqkeOV/nsvl0vGyXHcd+OHq16HL8+2TF+fm5mcay42rc83a5EJjplnWfTJSbPzN53LdolpfvbvefGeN9+212Bcjxfjfd8t21mLvrk3+5HbZ02XZT0WK//6HnWW761h/ZrvsmbLsX0eKr//z7mWPb5c9W5b9bqT44ddr3bKPlWW7z0f97HbZ52fm5+54FCoAAAAAAAAAAAAAAAAAAAB8WAOpiD+LFP97Y3VrLn9e/3+g523lrW/2rPd/m1vVOv/D1fr/d3v9Udb/H34w3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEMlRRFvRoqFyxtpbbB83zF0qdW+eWtqbHz3akdTVbOvKl/+DJ0+c/bcl14YPd/ND67/oD0dr01euVh7ef7GwmJzaak5W5tqt2bmZ5v3vYe91t8euo6RagBqN16/OXvt2lLtzPNnd3x8a/j9wcePD18YffbkM92yU2Pj45M9ZfoHPsTRP1Tjth2JIv4qUjz3vZ+kfxmMKGLvY3GP785+O1p1YqTqxNTYeNWRuVajvVx+ONEdiCKi1lOp3h2jh3Au9qQesVI2v2zwSNm9yYXGYuPqXLM20Vhcbi235tsTqdPasj+1KOJ8iliNiPXBO3c3EEW8Him+c2wj/etgRF93HL54efKrp87cvR3FPvbxPpTtrA1ErBaH4JwdYINRxD9Fip++cyL+bTCiPzo/8YWIV8v8QcRbZb4UkcovxrmI93b5HnE49UcR/1+e/wsb6Z3B8nrQva5c+lrtK+1r8z1lu9eVQ39/eJgO+LVpKIr4YXXF30j/7r9rAAAAAAAAAAAAAAAAgAOkiF+LFC++eyJV84O35hS32tdrVxpX5zrT+rpz/7pzpjc3NzdrqZP1nNM5V3Ku5lzLuZ4zilw/Zz3ndM6VnKs513Ku54y+XD9nPed0zpWcqznXcq7njP5cP2c953TOlZyrOddyrueMAzJ3DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfPsbG2lzsLO+9HR0cs16oB97vwgAAP//1k7+eg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 00:29:02 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005f083020001bb001c31f01020301090231eb000000000009"], 0x0) 00:29:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1a"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:03 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:29:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bbe6ffffffffffff3d955141e9fc24"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_macvtap\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00e4fe0001000000000000"]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:29:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 3560.796042][ T5139] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 3561.096126][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 3561.236892][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3561.250503][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3561.446232][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3561.459286][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3561.468013][ T5139] usb 2-1: Product: syz [ 3561.472192][ T5139] usb 2-1: Manufacturer: syz [ 3561.479885][ T5139] usb 2-1: SerialNumber: syz [ 3562.616456][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 3562.627370][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3562.634311][ T5139] cdc_ncm 2-1:1.1: bind() failure [ 3562.820270][ T5123] usb 2-1: USB disconnect, device number 94 00:29:05 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 00:29:05 executing program 4: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8) r0 = socket$inet6(0xa, 0x3, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r2}) 00:29:05 executing program 3: syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000200)='./file0\x00', 0x100c4, &(0x7f0000000380)={[{@gid_forget}, {}, {@gid}, {@mode={'mode', 0x3d, 0x3f}}, {@fileset={'fileset', 0x3d, 0x2}}]}, 0x1, 0xbfd, &(0x7f0000000c40)="$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") 00:29:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:05 executing program 5: mlock(&(0x7f00005a4000/0x1000)=nil, 0x1000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 00:29:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:05 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xff, 0x3}}, @l2cap_move_chan_req={{0xe, 0x6e, 0x3}, {0x1, 0x41}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x13, 0x8001, 0x8}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x80b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x9, 0x1, 0x8, 0xff01}}}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x97}, "992ec6a7483507f504d0db717318260b63c03d093a1aa83f32d02faa7367ce1c7e004652cc24aa0b16a6a2395cad2ccf37514dd3e42e5ca74006116caaaff7ac382e31df60af4fc72f973444263d34999bbe20ee81cdd3211cf301a537aab2c27ee349cb49af1377a557173e2af11ecae970d9d5ad00d610569b7d9bd382e476e79e6c5b5861b097f9f6156c68616512867289358c6066"}}, 0x9a) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x17}, "042bbb32af71fc4c6a160a5543b0ea37d64089f22dfee3"}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x3e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0xff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}}}, 0xb) 00:29:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) [ 3563.685996][T24141] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3563.966026][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3564.086356][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3564.098894][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3564.115871][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3564.286069][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3564.295158][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3564.303353][T24141] usb 2-1: Product: syz [ 3564.307766][T24141] usb 2-1: Manufacturer: syz [ 3564.312361][T24141] usb 2-1: SerialNumber: syz [ 3565.456305][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3565.464072][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3565.471353][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3565.661224][T24141] usb 2-1: USB disconnect, device number 95 00:29:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="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", 0x5c1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 00:29:08 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random="15a1cd8425bd", @val, {@ipv6}}, 0x0) 00:29:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:08 executing program 5: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x1fffff, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/174) 00:29:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:08 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}, 0x0) 00:29:08 executing program 3: prctl$PR_SET_VMA(0x16, 0x0, &(0x7f0000d47000/0x1000)=nil, 0x1000, 0x0) 00:29:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:08 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 00:29:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 00:29:08 executing program 5: prctl$PR_SET_VMA(0xf, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:29:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 00:29:08 executing program 4: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000100)='-!!^.\x00') mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 00:29:08 executing program 5: add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) [ 3566.545994][ T5139] usb 2-1: new high-speed USB device number 96 using dummy_hcd 00:29:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 00:29:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000001600)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}) [ 3566.637073][T32379] binder: 32378:32379 ioctl c018620c 20001600 returned -22 [ 3566.796144][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 3566.926269][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3566.940362][ T5139] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3566.950388][ T5139] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3567.126319][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3567.135389][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3567.153118][ T5139] usb 2-1: Product: syz [ 3567.158368][ T5139] usb 2-1: Manufacturer: syz [ 3567.162974][ T5139] usb 2-1: SerialNumber: syz [ 3568.306300][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 3568.314867][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3568.321761][ T5139] cdc_ncm 2-1:1.1: bind() failure [ 3568.511411][T24141] usb 2-1: USB disconnect, device number 96 00:29:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x4, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 00:29:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r0, 0x0) 00:29:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 00:29:11 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000100)=""/148, 0xc2) 00:29:11 executing program 4: mremap(&(0x7f00008db000/0x2000)=nil, 0x326000, 0x4000, 0x3, &(0x7f0000c01000/0x4000)=nil) 00:29:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f00000b000000004004"], 0x20}}, 0x0) 00:29:11 executing program 3: unshare(0x40000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0}) 00:29:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 00:29:11 executing program 4: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000fee000/0x3000)=nil) 00:29:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:29:11 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']:}^,-{\'{[\xc0\x00') mremap(&(0x7f0000c03000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00008db000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000c01000/0x4000)=nil) [ 3569.366159][T24141] usb 2-1: new high-speed USB device number 97 using dummy_hcd 00:29:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:29:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) 00:29:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f00000b00000000400b"], 0x20}}, 0x0) 00:29:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3569.651488][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3569.776640][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3569.791421][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3569.801635][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3569.966054][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3569.975173][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3569.983477][T24141] usb 2-1: Product: syz [ 3569.990033][T24141] usb 2-1: Manufacturer: syz [ 3569.994768][T24141] usb 2-1: SerialNumber: syz [ 3571.136249][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3571.144235][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3571.153426][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3571.342159][T19536] usb 2-1: USB disconnect, device number 97 00:29:14 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:14 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2002) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 00:29:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0), 0x0, 0x0, 0x0) 00:29:14 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x8201) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$khugepaged_scan(r0, &(0x7f0000000140), 0x20000148) 00:29:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 00:29:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:14 executing program 3: request_key(&(0x7f0000000bc0)='asymmetric\x00', 0x0, 0x0, 0x0) 00:29:14 executing program 2: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 00:29:14 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4b49, 0x0) 00:29:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f00000000c0)) 00:29:14 executing program 5: io_setup(0xfff, &(0x7f0000000000)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x3}]) 00:29:14 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2002) [ 3572.176448][T24141] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3572.436055][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3572.556303][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3572.567771][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3572.580609][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3572.746803][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3572.759469][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3572.768008][T24141] usb 2-1: Product: syz [ 3572.772200][T24141] usb 2-1: Manufacturer: syz [ 3572.780684][T24141] usb 2-1: SerialNumber: syz [ 3573.697794][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.704136][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.926244][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3573.938951][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3573.949703][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3574.131046][T19536] usb 2-1: USB disconnect, device number 98 00:29:17 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c80)={'wg2\x00'}) 00:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x30}}, 0x0) 00:29:17 executing program 5: io_setup(0xfff, &(0x7f0000000000)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x3}]) 00:29:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001600)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="bf"], 0x0, 0x0, 0x0}) 00:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 00:29:17 executing program 5: io_setup(0xfff, &(0x7f0000000000)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x3}]) 00:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 3574.775652][T32466] binder: 32465:32466 unknown command 191 [ 3574.803025][T32466] binder: 32465:32466 ioctl c0306201 20001600 returned -22 00:29:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8902, 0x0) [ 3575.005969][T24141] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3575.245945][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3575.366120][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3575.381030][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3575.390812][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3575.566012][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3575.575255][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3575.583788][T24141] usb 2-1: Product: syz [ 3575.588492][T24141] usb 2-1: Manufacturer: syz [ 3575.593273][T24141] usb 2-1: SerialNumber: syz [ 3576.736501][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3576.751413][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3576.759686][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3576.944825][T24141] usb 2-1: USB disconnect, device number 99 00:29:19 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/78) 00:29:19 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:19 executing program 5: io_setup(0xfff, &(0x7f0000000000)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x3}]) 00:29:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000000)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 00:29:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:19 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/78) 00:29:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x19006, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 00:29:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x2, &(0x7f0000000080)) 00:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/78) 00:29:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/78) 00:29:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)) [ 3577.826389][T24141] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3578.085973][T24141] usb 2-1: Using ep0 maxpacket: 16 [ 3578.216211][T24141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3578.236453][T24141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3578.256260][T24141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3578.426779][T24141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3578.436021][T24141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3578.444007][T24141] usb 2-1: Product: syz [ 3578.448970][T24141] usb 2-1: Manufacturer: syz [ 3578.453594][T24141] usb 2-1: SerialNumber: syz [ 3579.596259][T24141] cdc_ncm 2-1:1.0: bind() failure [ 3579.607817][T24141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3579.614731][T24141] cdc_ncm 2-1:1.1: bind() failure [ 3579.799693][T24141] usb 2-1: USB disconnect, device number 100 00:29:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xb) 00:29:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x40086602, &(0x7f0000000080)) 00:29:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)) 00:29:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)) 00:29:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 00:29:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) [ 3580.674130][T21076] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3580.936085][T21076] usb 2-1: Using ep0 maxpacket: 16 [ 3581.066191][T21076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3581.256391][T21076] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3581.265490][T21076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3581.280048][T21076] usb 2-1: Product: syz [ 3581.284236][T21076] usb 2-1: Manufacturer: syz [ 3581.290342][T21076] usb 2-1: SerialNumber: syz [ 3582.006101][T21076] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3582.015685][T21076] cdc_ncm 2-1:1.0: bind() failure [ 3582.028936][T21076] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3582.036108][T21076] cdc_ncm 2-1:1.1: bind() failure 00:29:25 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)) 00:29:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2ccd2099954f9774263b370bc6cc7283a4fa7a"}) 00:29:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3583.378578][T19536] usb 2-1: USB disconnect, device number 101 00:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:25 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {}], 0x2) 00:29:25 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r0) 00:29:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) [ 3583.875895][T19536] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3584.118602][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3584.256368][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3584.448961][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3584.458246][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3584.466798][T19536] usb 2-1: Product: syz [ 3584.470987][T19536] usb 2-1: Manufacturer: syz [ 3584.475647][T19536] usb 2-1: SerialNumber: syz [ 3585.165980][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3585.172133][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3585.182350][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3585.189670][T19536] cdc_ncm 2-1:1.1: bind() failure 00:29:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:28 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:28 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:28 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x40, &(0x7f0000000640)) 00:29:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3586.471777][T19536] usb 2-1: USB disconnect, device number 102 00:29:28 executing program 4: mount$fuse(0x0, 0x0, 0x0, 0x2254000, 0x0) 00:29:28 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:28 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:29 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:29 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x100) [ 3586.955806][T19536] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3587.197757][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3587.326150][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3587.496189][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3587.505274][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3587.513589][T19536] usb 2-1: Product: syz [ 3587.518019][T19536] usb 2-1: Manufacturer: syz [ 3587.522678][T19536] usb 2-1: SerialNumber: syz [ 3588.225947][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3588.232010][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3588.242420][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3588.249454][T19536] cdc_ncm 2-1:1.1: bind() failure 00:29:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 00:29:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3589.562412][ T5123] usb 2-1: USB disconnect, device number 103 00:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:32 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:32 executing program 2: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:32 executing program 2: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:32 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) [ 3590.016068][ T5123] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3590.266197][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3590.386253][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3590.565931][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3590.575010][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3590.585774][ T5123] usb 2-1: Product: syz [ 3590.589991][ T5123] usb 2-1: Manufacturer: syz [ 3590.594578][ T5123] usb 2-1: SerialNumber: syz [ 3591.312388][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3591.318793][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3591.328280][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3591.335087][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:35 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:35 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x2, 0x6}) 00:29:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:35 executing program 2: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:35 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) [ 3592.642162][ T5123] usb 2-1: USB disconnect, device number 104 00:29:35 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0, &(0x7f0000000040)) 00:29:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:29:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 00:29:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 3593.125909][ T5123] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3593.365896][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3593.486290][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3593.666197][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3593.675305][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3593.685521][ T5123] usb 2-1: Product: syz [ 3593.689846][ T5123] usb 2-1: Manufacturer: syz [ 3593.694625][ T5123] usb 2-1: SerialNumber: syz [ 3594.395998][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3594.402076][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3594.413795][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3594.421220][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:38 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:29:38 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[], 0xfffffdaa) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 00:29:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3595.724307][ T5123] usb 2-1: USB disconnect, device number 105 00:29:38 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6}) 00:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:38 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6}) [ 3596.195904][ T5123] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3596.441289][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3596.566193][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3596.736331][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3596.745582][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3596.754679][ T5123] usb 2-1: Product: syz [ 3596.762300][ T5123] usb 2-1: Manufacturer: syz [ 3596.768056][ T5123] usb 2-1: SerialNumber: syz [ 3597.466017][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3597.472097][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3597.480223][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3597.488119][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:29:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6}) 00:29:41 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[], 0xfffffdaa) write$FUSE_ATTR(r0, 0x0, 0x0) [ 3598.805256][ T5123] usb 2-1: USB disconnect, device number 106 00:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6}) 00:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x874b}) 00:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 3599.276159][ T5123] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3599.517575][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3599.636134][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3599.806085][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3599.815159][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3599.823620][ T5123] usb 2-1: Product: syz [ 3599.827887][ T5123] usb 2-1: Manufacturer: syz [ 3599.832509][ T5123] usb 2-1: SerialNumber: syz [ 3600.526229][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3600.532286][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3600.546549][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3600.553419][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) 00:29:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x874b}) 00:29:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) [ 3601.885382][ T5123] usb 2-1: USB disconnect, device number 107 00:29:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[], 0xfffffdaa) write$cgroup_subtree(r0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 00:29:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) 00:29:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)) 00:29:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) [ 3602.346521][ T5123] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3602.586064][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3602.706176][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3602.886121][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3602.895295][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3602.903572][ T5123] usb 2-1: Product: syz [ 3602.908202][ T5123] usb 2-1: Manufacturer: syz [ 3602.912806][ T5123] usb 2-1: SerialNumber: syz [ 3603.616089][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3603.622185][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3603.632338][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3603.639297][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[], 0xfffffdaa) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) geteuid() 00:29:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:29:47 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) write(r0, &(0x7f0000000180)="648c6f4fedd983b4fed003dfd0994cc8d6d9f7e7a3eb0bb5b91f0278ca9ee70c59b2ae3761714536dc978205e8edf5c36413289e98aac1b21e03919b9403be188add5af48d575a84a62629f6a592e4f7e3ced7ad1fb69ebbc67c", 0x5a) rmdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 00:29:47 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) accept$unix(r0, 0x0, 0x0) [ 3604.932419][T19536] usb 2-1: USB disconnect, device number 108 00:29:47 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 00:29:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000080), 0xb) 00:29:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:47 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 00:29:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) [ 3605.435831][T19536] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3605.675794][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3605.816110][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3605.996203][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3606.005431][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3606.014847][T19536] usb 2-1: Product: syz [ 3606.019807][T19536] usb 2-1: Manufacturer: syz [ 3606.024479][T19536] usb 2-1: SerialNumber: syz [ 3606.726625][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3606.732730][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3606.746882][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3606.753726][T19536] cdc_ncm 2-1:1.1: bind() failure 00:29:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:50 executing program 5: r0 = fsopen(&(0x7f0000000840)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 00:29:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:29:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000001740)={'gre0\x00', &(0x7f00000016c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) 00:29:50 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3f, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) [ 3608.003525][ T5123] usb 2-1: USB disconnect, device number 109 00:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:50 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:29:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, r1, r1, 0x1000, 0x0, 0x1000}) 00:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, r1, r1, 0x1000, 0x0, 0x1000}) 00:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 3608.335935][T24141] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3608.466044][ T5123] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3608.586012][T24141] usb 3-1: Using ep0 maxpacket: 32 [ 3608.706015][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3608.746152][T24141] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3608.826115][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3608.837352][T24141] usb 3-1: too many endpoints for config 1 interface 0 altsetting 2: 63, using maximum allowed: 30 [ 3608.848464][T24141] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3608.858448][T24141] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 0 [ 3608.869024][T24141] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3608.882347][T24141] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 3608.894807][T24141] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 63 [ 3608.910919][T24141] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3609.006128][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3609.015298][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3609.027771][ T5123] usb 2-1: Product: syz [ 3609.031967][ T5123] usb 2-1: Manufacturer: syz [ 3609.039170][ T5123] usb 2-1: SerialNumber: syz [ 3609.076108][T24141] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3609.085353][T24141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3609.095058][T24141] usb 3-1: Product: syz [ 3609.101217][T24141] usb 3-1: Manufacturer: syz [ 3609.106002][T24141] usb 3-1: SerialNumber: syz [ 3609.377491][T24141] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 2 proto 2 vid 0x0525 pid 0xA4A8 [ 3609.397266][T24141] usb 3-1: USB disconnect, device number 103 [ 3609.412282][T24141] usblp0: removed [ 3609.746143][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3609.752214][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3609.766548][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3609.773545][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 00:29:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001cc0)='ns/mnt\x00') 00:29:53 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) 00:29:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:29:53 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3f, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 00:29:53 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3611.085868][ T5123] usb 2-1: USB disconnect, device number 110 00:29:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000b40), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 00:29:53 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='T', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) 00:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 00:29:53 executing program 4: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x160001000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x30, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 00:29:53 executing program 5: r0 = syz_io_uring_setup(0xf55, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 00:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 00:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) 00:29:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) 00:29:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3611.436351][T19536] usb 3-1: new high-speed USB device number 104 using dummy_hcd 00:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) [ 3611.565919][ T5123] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3611.716005][T19536] usb 3-1: Using ep0 maxpacket: 32 [ 3611.826434][ T5123] usb 2-1: Using ep0 maxpacket: 16 [ 3611.906055][T19536] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3611.949657][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3612.006242][T19536] usb 3-1: too many endpoints for config 1 interface 0 altsetting 2: 63, using maximum allowed: 30 [ 3612.017837][T19536] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3612.028100][T19536] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 0 [ 3612.037883][T19536] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3612.050633][T19536] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 3612.060493][T19536] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 63 [ 3612.073726][T19536] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3612.116140][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3612.125512][ T5123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3612.133695][ T5123] usb 2-1: Product: syz [ 3612.138182][ T5123] usb 2-1: Manufacturer: syz [ 3612.142887][ T5123] usb 2-1: SerialNumber: syz [ 3612.236040][T19536] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3612.245210][T19536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3612.253349][T19536] usb 3-1: Product: syz [ 3612.257851][T19536] usb 3-1: Manufacturer: syz [ 3612.262489][T19536] usb 3-1: SerialNumber: syz [ 3612.540855][T19536] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 2 proto 2 vid 0x0525 pid 0xA4A8 [ 3612.569738][T19536] usb 3-1: USB disconnect, device number 104 [ 3612.595011][T19536] usblp0: removed [ 3612.836026][ T5123] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3612.842120][ T5123] cdc_ncm 2-1:1.0: bind() failure [ 3612.859869][ T5123] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3612.885858][ T5123] cdc_ncm 2-1:1.1: bind() failure 00:29:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x8, &(0x7f0000000000), 0x10) 00:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) 00:29:56 executing program 5: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/249, 0xf9}], 0x2, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/95, 0x5f}, {0x0}, {0x0}], 0x3, 0x0) 00:29:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18}}, 0x0) 00:29:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f00fe09b55d0000002b00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 00:29:56 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3614.156418][T19536] usb 2-1: USB disconnect, device number 111 00:29:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}}, 0x0) 00:29:56 executing program 4: r0 = eventfd(0x18) read(r0, &(0x7f0000000240)=""/238, 0xee) 00:29:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}}, 0x0) 00:29:56 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) 00:29:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bdd7a07b18459b4f005901430f8f8a0900000000000000ef912e0c340d3a2b796eb03729d8c820bcf4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}}, 0x0) 00:29:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:29:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3614.666016][T19536] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3614.936146][T19536] usb 2-1: Using ep0 maxpacket: 16 00:29:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) [ 3615.076309][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3615.256133][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3615.265214][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3615.273268][T19536] usb 2-1: Product: syz [ 3615.277737][T19536] usb 2-1: Manufacturer: syz [ 3615.282358][T19536] usb 2-1: SerialNumber: syz [ 3615.976206][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3615.982374][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3615.992146][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3616.001057][T19536] cdc_ncm 2-1:1.1: bind() failure 00:29:59 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:29:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:59 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCADDRT(r0, 0x401c5820, 0x0) 00:29:59 executing program 2: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) 00:29:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:59 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) [ 3617.241047][T19536] usb 2-1: USB disconnect, device number 112 00:29:59 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCADDRT(r0, 0x89a1, &(0x7f0000003c00)={0x0, @qipcrtr, @hci, @generic={0x0, "2b6a5c37acb1869e1f1ef0adec94"}}) 00:29:59 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:29:59 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:29:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:29:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 00:29:59 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x8, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x80}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x820}}]}) [ 3617.716020][T19536] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3617.975911][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3618.126139][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3618.306268][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3618.315436][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3618.323738][T19536] usb 2-1: Product: syz [ 3618.328231][T19536] usb 2-1: Manufacturer: syz [ 3618.332894][T19536] usb 2-1: SerialNumber: syz [ 3619.036149][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3619.042352][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3619.053084][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3619.060187][T19536] cdc_ncm 2-1:1.1: bind() failure 00:30:02 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:30:02 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "c13ed40b753b5b24dfe37e83154d5c49d9008c8b04e99fb079dc5b7fd2af35e156e80283f7a8d47253b1cec2432a16d69100316fd842565a8d4b2d06b32f250c70bf4f7aca7783a71662bc1dba27e888b10e10610044b0529691aefeeb4f261618ed7f7ca07ed6baa25fefb6dfcf77d1d788de9b7342b550882f62487427e80ef11f04de012c74b112e58ab407a776cf84e526056d44127c9ead047f04e5449848b57d25fbcf5e7764a86c888afee51d668afdb9e758c89b99e412e10ea2776ac2ab5ef6cc6a488e48dec1498cb7fbe9abb7be276590c8fb068ca38abf8b2096f2b742c3932819f6ba866ba1247bf070bd85338d98987be3ea24f5b3d509feb22ed9e91cffdea9cac8c679afc8be68fa9721e121d1294d14d12c8dc08375ebc1c4ac36e36e2d8f9ab2297199ebb248ac4de159014faaf70fe7e848bd8fcfe366751e63fb76d5e6b8faee3e7fdc25994b61af7710837142d82d088c37f104b827af01567915d0d9efe5800823b9c0f566c3db11f24ad4554c8ecdff7a21bb007bdced85cd24f65a0c7869affe05c197a85551c7485752a8cbb1cbeb7b66936b9cbfecf5f8d4bb9b4d39daf46efb64ce79806e80b275a28c141a1d720b25e7829a3bfa20b57c29f4d271498350a6a732f17b0095810cf8964e84ab1aa1203df67428d0b567b4dcf7315b7063941e0d4ad9813a451ab405e3023339e27cba9c0e50b9befa29a2fd31f5eef80b474d3a0ba042267f35825e8718cf9af120a7d17ff9a73f04f9df7844823de7a867425f18ddabc9316e55692497c071b61552d65dcb889a5375bd9b2912ae6a4e61240028acdca68a5b513c8977ab39ffedb8d0fd5a8a36baec4cdf9521bbac8ca2854e4e92283c8c5a62b58052cb4000dad2eea14b4ec65e099b1e46a8fe5c9043a43891927b0e5c5d0f7a50e857a56f632e2bcd0768a4cc92bfdbfabf2e6de8a5a24f1b1caad04df63c850e32dfe8d9e0bd217be66600ea21314b5c2f7409d452db9db859231a9594f7317a7d01d491f7788fb624117fdf97ad81a9a8330f5f2248970d7b594ed623acc75995df5fef677962a5928eff5f41ea127c48ab9fc16d7aa0b974dbb777e2816a98cad901da19e9c5a5cd4ca01d4b9fcbedcff690e47ed7a3ba2bb166676a8aa7734b0fe07267f262f60a94ed8dc5966e60df1e2c13da9142471a51bb28ec0d387e1437a41d246a22b35785c5c28a3afa07523d25e9c8ac21ca947c6b578c1699f3674e496c1017700f133e5f1ffb88f24f337b3dd9eb8d1a9aee2ca8c7adb3922e2e91461a2012879e06b1de09d332f6324bd796254c89c7762fb7dfb54f0401b328c7baa5daaa5a76cb1e014a63c61574f3b2e70b92a1b2873fc178f234f58698ebfd7483f50ddb189447a8e8b98a513ef2e6b1d297b90f380b76d8c737ea554c5b741f8ac6b6b333cd674e46abdf47149270d4ceeacc47db26000fb1d5e3762797651dabe754fc3bf46efc6cf40b763c0a145c5181c11cb720cee2222a44361a727a113104bcce17e3fc66cd1b4681d8cebb727490753d3b7745da0842ca7971931801a8ce77a09300d84ce4cae93f2e6d0c43eb6b5f75c3f67d04fa45e8c113d6ed2e4591992b1b71d4806537045b1c304ef6b1ae6f304dbadd70cd7565ac8a10a532522cc2eae62289801d8549dda5dd98e0a83e213b347bad3b3a5b10bb6dde85d684dd1c8622006571cc022e9a236fd4545d2a28f9ed9f07aa5bad1847684034b2c1de8143fed6051f818e533c2f96478db7282e9f6e94a2a305f734db3a9698551401c28617a1b0426b8712e5157ac85cc52c15d1d0de9db5458330ed7af37a49b48c0c472e4226eb30e22040a59ca0396f86850d565e0f0490632586f33edea654c9107741c8a0ae79cfabeedf4d81da347a9bc9497131d28a79e39f17b82eaadaeef31bd0ca76a41bf25547c21c33da6e236e30146eb8502e66358209076ee75cd530054310979a509a10d6910a66d1ad1d345456ccd83cebefde78a62c11c05ea310653be2a86a3563e3c58ba83cb80de46e090537deb26c2bbec7f1dc81b6041261d592b94070c67455170eab036e9f30fee71b9e6cbcfee29c220171b94064749b380d2bfe26a6e39f687ae47d0e9e4ef91c322a7fcdcd3520826ac0dd62adcaafcda61f72ac7738ee6626112cbda19ec839b5ce8066916f88c60ddd356e3670878c9deedfe7190b99a5e12cdb86dc563e9487efba19202569b92ba210242f7d629ea29d07f7be1ab56378d9efb13d0ed94983b8a168e56425f849536d0ba1ea2ecf97b0bf787d69c1f732878cfc95a636ce41d1d92879ff697cde273adec1c320aa25836a25443adc728d1e64bf681ef2e82612f2b9c494d12a480b1b98d569eb4c375333a5583170b747619e8551d4e14cdc80bdb1ac00dd5558a3a9e5878484020ade83c37d556aec34fe1f6c21638825cc10be3bb5af3668edfbda49ff385b1a58f01fd1f3033db9524f686aefd3a5e8f3ea9bcb9c0b902a782017d03a6139df3fbcaa9d521612c65f03a085a1cf05e348535bac0787f45c44abe8b09abe24eb391b404d68c009ab35e23192995f69742ba4993b94315301e516de9d645e993d6b8d0f3ca77362984f7330c84c5d1cd03244410deff2f6f0fa102f04b2ff95f0ea33fa0ceff7493b7312af3337b6bcfeae346605fbad573cebacd04188a2ee641068bc0a0a9a3f0f197f61aa6547d077083488fb896ac0d0b06bc4b889789634b0c6c06c897082b078c9e65012713234bd6925bd1f3bd1886f750c787444efb1175325d9a402489f718b7d1809f6b59970c32eb12ab2d874f3a2e57c425269cc3563aa0ed6c685c77354cc8766348db2e6302c0ac1d27be3e56410c60eff38e0cb9c54d12f7fd01bd3b4d824b5a96b3e171e6e17c810de04a2e0baa59802a4989d89c321215c9f0207481a87e199a5408aa6d73e2f04e20b1cef2395073498769f2acb401f349acee663247dec5e7acb68ea5adc72c8f6cd592dd5de92fc2bc2f0a5f0b846dd591c0127cdd1a37b394abf6a998c7c77bd5618a880e6a3be4359ed8e1c7f1094533968c632ad97c7367553cb81dc3073536bb22aa49127c7e67214102c46153ece38aaa01d01c663c119ec522ea5d0af68cb03e6d5873b4041c9e57de2a227e133030ffb72a11faa133183f07b9fd80e7e27c7ab6a3fdb2aa0db1ddbe873ec0625659257624d9b343b8fde281d6fa3a7f1ced38feca2f05180c40619d6843c3289c24483ea629aef4c1560884d01d10dd429bf7c9a60a939ab751c9be1ec6d33fc1302c24ddc09212870a95cc479d057c58cfee19119c03db3fd30a977cb416dbd355b84591269ac1c8b613bf5674baf5e12eefd345ede253dba871387adf3848e55d0f9b376ad98e073164b52f8403a399ec8ead8688fc7677266ffb7024d8623f339493b19460d336ffe87c9b1b16496384f4764970b3105a20263072950920ca3dee2f2f0ef449818b7551d1b390c2fc849d9a5d0015b54ab4de75e1e9c19eadcddb3190c3ef73feffe4b82dd507e1d1eb0e03dfb440e0e23993ffb8639181d98a62955cf87aba1a810a5d671deacd7d5d15710ecc53168eb569e94a7df25576a98b9dfff1423863e2e2bd7f6c00ebaf93851fc5ea68aa163698561f10319ac46b53d94a3565fd31b394b4d0b9f45a8f0b6e73f8f2e72ee5dd4546b9b40"}, 0xa9b) 00:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:30:02 executing program 2: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:30:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 3620.301183][T19536] usb 2-1: USB disconnect, device number 113 00:30:02 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:30:02 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0xa9b) 00:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 00:30:02 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="48f0ba905798cebbf7ec80f11b5b3614") sched_rr_get_interval(r0, &(0x7f00000001c0)) 00:30:02 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) [ 3620.636096][T21076] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3620.736709][T19536] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3620.896286][T21076] usb 3-1: Using ep0 maxpacket: 16 [ 3620.985948][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3621.016710][T21076] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3621.025420][T21076] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3621.041113][T21076] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3621.126111][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3621.206795][T21076] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3621.221154][T21076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3621.229693][T21076] usb 3-1: Product: syz [ 3621.233948][T21076] usb 3-1: Manufacturer: syz [ 3621.240487][T21076] usb 3-1: SerialNumber: syz [ 3621.316065][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3621.325244][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3621.333701][T19536] usb 2-1: Product: syz [ 3621.338502][T19536] usb 2-1: Manufacturer: syz [ 3621.343192][T19536] usb 2-1: SerialNumber: syz [ 3621.566138][T21076] usb 3-1: 0:2 : does not exist [ 3621.580159][T21076] usb 3-1: USB disconnect, device number 105 [ 3621.608766][T30380] udevd[30380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3622.066214][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3622.072360][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3622.082160][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3622.089146][T19536] cdc_ncm 2-1:1.1: bind() failure 00:30:05 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:30:05 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "c13ed40b753b5b24dfe37e83154d5c49d9008c8b04e99fb079dc5b7fd2af35e156e80283f7a8d47253b1cec2432a16d69100316fd842565a8d4b2d06b32f250c70bf4f7aca7783a71662bc1dba27e888b10e10610044b0529691aefeeb4f261618ed7f7ca07ed6baa25fefb6dfcf77d1d788de9b7342b550882f62487427e80ef11f04de012c74b112e58ab407a776cf84e526056d44127c9ead047f04e5449848b57d25fbcf5e7764a86c888afee51d668afdb9e758c89b99e412e10ea2776ac2ab5ef6cc6a488e48dec1498cb7fbe9abb7be276590c8fb068ca38abf8b2096f2b742c3932819f6ba866ba1247bf070bd85338d98987be3ea24f5b3d509feb22ed9e91cffdea9cac8c679afc8be68fa9721e121d1294d14d12c8dc08375ebc1c4ac36e36e2d8f9ab2297199ebb248ac4de159014faaf70fe7e848bd8fcfe366751e63fb76d5e6b8faee3e7fdc25994b61af7710837142d82d088c37f104b827af01567915d0d9efe5800823b9c0f566c3db11f24ad4554c8ecdff7a21bb007bdced85cd24f65a0c7869affe05c197a85551c7485752a8cbb1cbeb7b66936b9cbfecf5f8d4bb9b4d39daf46efb64ce79806e80b275a28c141a1d720b25e7829a3bfa20b57c29f4d271498350a6a732f17b0095810cf8964e84ab1aa1203df67428d0b567b4dcf7315b7063941e0d4ad9813a451ab405e3023339e27cba9c0e50b9befa29a2fd31f5eef80b474d3a0ba042267f35825e8718cf9af120a7d17ff9a73f04f9df7844823de7a867425f18ddabc9316e55692497c071b61552d65dcb889a5375bd9b2912ae6a4e61240028acdca68a5b513c8977ab39ffedb8d0fd5a8a36baec4cdf9521bbac8ca2854e4e92283c8c5a62b58052cb4000dad2eea14b4ec65e099b1e46a8fe5c9043a43891927b0e5c5d0f7a50e857a56f632e2bcd0768a4cc92bfdbfabf2e6de8a5a24f1b1caad04df63c850e32dfe8d9e0bd217be66600ea21314b5c2f7409d452db9db859231a9594f7317a7d01d491f7788fb624117fdf97ad81a9a8330f5f2248970d7b594ed623acc75995df5fef677962a5928eff5f41ea127c48ab9fc16d7aa0b974dbb777e2816a98cad901da19e9c5a5cd4ca01d4b9fcbedcff690e47ed7a3ba2bb166676a8aa7734b0fe07267f262f60a94ed8dc5966e60df1e2c13da9142471a51bb28ec0d387e1437a41d246a22b35785c5c28a3afa07523d25e9c8ac21ca947c6b578c1699f3674e496c1017700f133e5f1ffb88f24f337b3dd9eb8d1a9aee2ca8c7adb3922e2e91461a2012879e06b1de09d332f6324bd796254c89c7762fb7dfb54f0401b328c7baa5daaa5a76cb1e014a63c61574f3b2e70b92a1b2873fc178f234f58698ebfd7483f50ddb189447a8e8b98a513ef2e6b1d297b90f380b76d8c737ea554c5b741f8ac6b6b333cd674e46abdf47149270d4ceeacc47db26000fb1d5e3762797651dabe754fc3bf46efc6cf40b763c0a145c5181c11cb720cee2222a44361a727a113104bcce17e3fc66cd1b4681d8cebb727490753d3b7745da0842ca7971931801a8ce77a09300d84ce4cae93f2e6d0c43eb6b5f75c3f67d04fa45e8c113d6ed2e4591992b1b71d4806537045b1c304ef6b1ae6f304dbadd70cd7565ac8a10a532522cc2eae62289801d8549dda5dd98e0a83e213b347bad3b3a5b10bb6dde85d684dd1c8622006571cc022e9a236fd4545d2a28f9ed9f07aa5bad1847684034b2c1de8143fed6051f818e533c2f96478db7282e9f6e94a2a305f734db3a9698551401c28617a1b0426b8712e5157ac85cc52c15d1d0de9db5458330ed7af37a49b48c0c472e4226eb30e22040a59ca0396f86850d565e0f0490632586f33edea654c9107741c8a0ae79cfabeedf4d81da347a9bc9497131d28a79e39f17b82eaadaeef31bd0ca76a41bf25547c21c33da6e236e30146eb8502e66358209076ee75cd530054310979a509a10d6910a66d1ad1d345456ccd83cebefde78a62c11c05ea310653be2a86a3563e3c58ba83cb80de46e090537deb26c2bbec7f1dc81b6041261d592b94070c67455170eab036e9f30fee71b9e6cbcfee29c220171b94064749b380d2bfe26a6e39f687ae47d0e9e4ef91c322a7fcdcd3520826ac0dd62adcaafcda61f72ac7738ee6626112cbda19ec839b5ce8066916f88c60ddd356e3670878c9deedfe7190b99a5e12cdb86dc563e9487efba19202569b92ba210242f7d629ea29d07f7be1ab56378d9efb13d0ed94983b8a168e56425f849536d0ba1ea2ecf97b0bf787d69c1f732878cfc95a636ce41d1d92879ff697cde273adec1c320aa25836a25443adc728d1e64bf681ef2e82612f2b9c494d12a480b1b98d569eb4c375333a5583170b747619e8551d4e14cdc80bdb1ac00dd5558a3a9e5878484020ade83c37d556aec34fe1f6c21638825cc10be3bb5af3668edfbda49ff385b1a58f01fd1f3033db9524f686aefd3a5e8f3ea9bcb9c0b902a782017d03a6139df3fbcaa9d521612c65f03a085a1cf05e348535bac0787f45c44abe8b09abe24eb391b404d68c009ab35e23192995f69742ba4993b94315301e516de9d645e993d6b8d0f3ca77362984f7330c84c5d1cd03244410deff2f6f0fa102f04b2ff95f0ea33fa0ceff7493b7312af3337b6bcfeae346605fbad573cebacd04188a2ee641068bc0a0a9a3f0f197f61aa6547d077083488fb896ac0d0b06bc4b889789634b0c6c06c897082b078c9e65012713234bd6925bd1f3bd1886f750c787444efb1175325d9a402489f718b7d1809f6b59970c32eb12ab2d874f3a2e57c425269cc3563aa0ed6c685c77354cc8766348db2e6302c0ac1d27be3e56410c60eff38e0cb9c54d12f7fd01bd3b4d824b5a96b3e171e6e17c810de04a2e0baa59802a4989d89c321215c9f0207481a87e199a5408aa6d73e2f04e20b1cef2395073498769f2acb401f349acee663247dec5e7acb68ea5adc72c8f6cd592dd5de92fc2bc2f0a5f0b846dd591c0127cdd1a37b394abf6a998c7c77bd5618a880e6a3be4359ed8e1c7f1094533968c632ad97c7367553cb81dc3073536bb22aa49127c7e67214102c46153ece38aaa01d01c663c119ec522ea5d0af68cb03e6d5873b4041c9e57de2a227e133030ffb72a11faa133183f07b9fd80e7e27c7ab6a3fdb2aa0db1ddbe873ec0625659257624d9b343b8fde281d6fa3a7f1ced38feca2f05180c40619d6843c3289c24483ea629aef4c1560884d01d10dd429bf7c9a60a939ab751c9be1ec6d33fc1302c24ddc09212870a95cc479d057c58cfee19119c03db3fd30a977cb416dbd355b84591269ac1c8b613bf5674baf5e12eefd345ede253dba871387adf3848e55d0f9b376ad98e073164b52f8403a399ec8ead8688fc7677266ffb7024d8623f339493b19460d336ffe87c9b1b16496384f4764970b3105a20263072950920ca3dee2f2f0ef449818b7551d1b390c2fc849d9a5d0015b54ab4de75e1e9c19eadcddb3190c3ef73feffe4b82dd507e1d1eb0e03dfb440e0e23993ffb8639181d98a62955cf87aba1a810a5d671deacd7d5d15710ecc53168eb569e94a7df25576a98b9dfff1423863e2e2bd7f6c00ebaf93851fc5ea68aa163698561f10319ac46b53d94a3565fd31b394b4d0b9f45a8f0b6e73f8f2e72ee5dd4546b9b40"}, 0xa9b) 00:30:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndmidi(&(0x7f0000004440), 0x0, 0x20000) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x3, 0x7) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 00:30:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:30:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000100)={'veth0_to_bond\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) 00:30:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000002540)=[{{&(0x7f0000000100)=@in={0xa, 0x4e21, @empty}, 0x80, 0x0}}], 0x1, 0xb80b) [ 3623.385634][T19536] usb 2-1: USB disconnect, device number 114 00:30:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000100)={'veth0_to_bond\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) 00:30:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 00:30:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000100)={'\x00', @ifru_data=0x0}) 00:30:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 00:30:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) [ 3623.736869][ T483] [ 3623.739239][ T483] ====================================================== [ 3623.746287][ T483] WARNING: possible circular locking dependency detected [ 3623.753384][ T483] 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 Not tainted [ 3623.760395][ T483] ------------------------------------------------------ [ 3623.767414][ T483] syz-executor.4/483 is trying to acquire lock: [ 3623.773642][ T483] ffffffff8d0648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1b0/0x4c0 [ 3623.782854][ T483] [ 3623.782854][ T483] but task is already holding lock: [ 3623.790209][ T483] ffff8881489f2040 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x1711/0x2860 [ 3623.800917][ T483] [ 3623.800917][ T483] which lock already depends on the new lock. [ 3623.800917][ T483] [ 3623.811319][ T483] [ 3623.811319][ T483] the existing dependency chain (in reverse order) is: [ 3623.820350][ T483] [ 3623.820350][ T483] -> #4 (mapping.invalidate_lock#2){++++}-{3:3}: [ 3623.828872][ T483] down_read+0xb1/0xa40 [ 3623.833561][ T483] filemap_fault+0x658/0x1710 [ 3623.838814][ T483] __do_fault+0x133/0x4e0 [ 3623.843691][ T483] handle_mm_fault+0x21d9/0x62b0 [ 3623.849149][ T483] exc_page_fault+0x2ac/0x860 [ 3623.854348][ T483] asm_exc_page_fault+0x26/0x30 [ 3623.859718][ T483] [ 3623.859718][ T483] -> #3 (&mm->mmap_lock){++++}-{3:3}: [ 3623.867276][ T483] __might_fault+0xc1/0x120 [ 3623.872317][ T483] _copy_from_user+0x2a/0xe0 [ 3623.877502][ T483] quota_setinfo+0xb2/0x4f0 [ 3623.882570][ T483] __se_sys_quotactl_fd+0x29d/0x440 [ 3623.888294][ T483] do_syscall_64+0x41/0xc0 [ 3623.893235][ T483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3623.899647][ T483] [ 3623.899647][ T483] -> #2 (&type->s_umount_key#30){++++}-{3:3}: [ 3623.907907][ T483] down_read+0xb1/0xa40 [ 3623.912590][ T483] super_lock+0x176/0x390 [ 3623.917496][ T483] fs_bdev_sync+0xa5/0x170 [ 3623.922461][ T483] blkdev_common_ioctl+0x889/0x2860 [ 3623.928179][ T483] blkdev_ioctl+0x520/0x730 [ 3623.933213][ T483] __se_sys_ioctl+0xf8/0x170 [ 3623.938322][ T483] do_syscall_64+0x41/0xc0 [ 3623.943255][ T483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3623.949664][ T483] [ 3623.949664][ T483] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 3623.957826][ T483] __mutex_lock+0x136/0xd60 [ 3623.962852][ T483] bd_finish_claiming+0x231/0x3f0 [ 3623.968396][ T483] blkdev_get_by_dev+0x481/0x620 [ 3623.973850][ T483] setup_bdev_super+0x5d/0x600 [ 3623.979135][ T483] mount_bdev+0x1e0/0x300 [ 3623.983982][ T483] legacy_get_tree+0xef/0x190 [ 3623.989234][ T483] vfs_get_tree+0x8c/0x280 [ 3623.994171][ T483] do_new_mount+0x28f/0xae0 [ 3623.999234][ T483] init_mount+0xd4/0x130 [ 3624.004042][ T483] do_mount_root+0x98/0x230 [ 3624.009074][ T483] mount_root_generic+0x193/0x3b0 [ 3624.014709][ T483] prepare_namespace+0xc2/0x100 [ 3624.020252][ T483] kernel_init_freeable+0x46a/0x5c0 [ 3624.025970][ T483] kernel_init+0x1d/0x2a0 [ 3624.030823][ T483] ret_from_fork+0x48/0x80 [ 3624.035776][ T483] ret_from_fork_asm+0x11/0x20 [ 3624.041156][ T483] [ 3624.041156][ T483] -> #0 (bdev_lock){+.+.}-{3:3}: [ 3624.048441][ T483] __lock_acquire+0x39ff/0x7f70 [ 3624.053910][ T483] lock_acquire+0x1e3/0x520 [ 3624.059277][ T483] __mutex_lock+0x136/0xd60 [ 3624.064296][ T483] bd_prepare_to_claim+0x1b0/0x4c0 [ 3624.069948][ T483] truncate_bdev_range+0x4e/0x260 [ 3624.075489][ T483] blkdev_common_ioctl+0x1723/0x2860 [ 3624.081295][ T483] blkdev_ioctl+0x520/0x730 [ 3624.086318][ T483] __se_sys_ioctl+0xf8/0x170 [ 3624.091432][ T483] do_syscall_64+0x41/0xc0 [ 3624.096364][ T483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3624.102776][ T483] [ 3624.102776][ T483] other info that might help us debug this: [ 3624.102776][ T483] [ 3624.113016][ T483] Chain exists of: [ 3624.113016][ T483] bdev_lock --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 3624.113016][ T483] [ 3624.126332][ T483] Possible unsafe locking scenario: [ 3624.126332][ T483] [ 3624.133774][ T483] CPU0 CPU1 [ 3624.139145][ T483] ---- ---- [ 3624.144522][ T483] lock(mapping.invalidate_lock#2); [ 3624.149822][ T483] lock(&mm->mmap_lock); [ 3624.156670][ T483] lock(mapping.invalidate_lock#2); [ 3624.164474][ T483] lock(bdev_lock); [ 3624.168374][ T483] [ 3624.168374][ T483] *** DEADLOCK *** [ 3624.168374][ T483] [ 3624.176508][ T483] 1 lock held by syz-executor.4/483: [ 3624.181807][ T483] #0: ffff8881489f2040 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x1711/0x2860 [ 3624.192899][ T483] [ 3624.192899][ T483] stack backtrace: [ 3624.198776][ T483] CPU: 0 PID: 483 Comm: syz-executor.4 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 3624.209008][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 3624.219071][ T483] Call Trace: [ 3624.222605][ T483] [ 3624.225528][ T483] dump_stack_lvl+0x1e7/0x2d0 [ 3624.230207][ T483] ? nf_tcp_handle_invalid+0x650/0x650 [ 3624.235664][ T483] ? print_circular_bug+0x12b/0x1a0 [ 3624.240885][ T483] check_noncircular+0x375/0x4a0 [ 3624.245842][ T483] ? read_lock_is_recursive+0x20/0x20 [ 3624.251246][ T483] ? print_deadlock_bug+0x600/0x600 [ 3624.256557][ T483] ? lockdep_lock+0x123/0x2b0 [ 3624.261240][ T483] ? mark_lock+0x9a/0x340 [ 3624.265589][ T483] ? _find_first_zero_bit+0xd4/0x100 [ 3624.270917][ T483] __lock_acquire+0x39ff/0x7f70 [ 3624.275782][ T483] ? stack_trace_save+0x117/0x1c0 [ 3624.280806][ T483] ? verify_lock_unused+0x140/0x140 [ 3624.286006][ T483] ? stack_trace_snprint+0xf0/0xf0 [ 3624.291120][ T483] ? lockdep_lock+0x123/0x2b0 [ 3624.295800][ T483] ? lockdep_unlock+0x169/0x300 [ 3624.300657][ T483] ? lockdep_lock+0x2b0/0x2b0 [ 3624.305338][ T483] ? mark_lock+0x29c/0x340 [ 3624.309936][ T483] ? _find_first_zero_bit+0xd4/0x100 [ 3624.315231][ T483] lock_acquire+0x1e3/0x520 [ 3624.319757][ T483] ? bd_prepare_to_claim+0x1b0/0x4c0 [ 3624.325136][ T483] ? read_lock_is_recursive+0x20/0x20 [ 3624.330507][ T483] ? __might_sleep+0xc0/0xc0 [ 3624.335123][ T483] ? stack_trace_save+0x117/0x1c0 [ 3624.340151][ T483] __mutex_lock+0x136/0xd60 [ 3624.344661][ T483] ? bd_prepare_to_claim+0x1b0/0x4c0 [ 3624.349949][ T483] ? print_irqtrace_events+0x220/0x220 [ 3624.355408][ T483] ? __kmem_cache_free+0x25f/0x3b0 [ 3624.360575][ T483] ? bd_prepare_to_claim+0x1b0/0x4c0 [ 3624.365860][ T483] ? mutex_lock_nested+0x20/0x20 [ 3624.370817][ T483] ? asm_sysvec_call_function_single+0x1a/0x20 [ 3624.377051][ T483] ? asm_sysvec_call_function_single+0x1a/0x20 [ 3624.383213][ T483] bd_prepare_to_claim+0x1b0/0x4c0 [ 3624.388329][ T483] ? invalidate_bdev+0xc0/0xc0 [ 3624.393118][ T483] ? truncate_bdev_range+0x260/0x260 [ 3624.398405][ T483] ? __down_write_common+0x161/0x200 [ 3624.403700][ T483] ? clear_nonspinnable+0x60/0x60 [ 3624.408725][ T483] truncate_bdev_range+0x4e/0x260 [ 3624.413752][ T483] blkdev_common_ioctl+0x1723/0x2860 [ 3624.419040][ T483] ? blkdev_bszset+0x250/0x250 [ 3624.423801][ T483] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3624.429350][ T483] ? read_lock_is_recursive+0x20/0x20 [ 3624.434726][ T483] ? __asan_memset+0x23/0x40 [ 3624.439361][ T483] ? smack_file_ioctl+0x2a1/0x3a0 [ 3624.444419][ T483] ? smack_file_alloc_security+0xe0/0xe0 [ 3624.450052][ T483] blkdev_ioctl+0x520/0x730 [ 3624.454559][ T483] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 3624.460047][ T483] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3624.465104][ T483] ? security_file_ioctl+0x81/0xa0 [ 3624.470336][ T483] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 3624.475810][ T483] __se_sys_ioctl+0xf8/0x170 [ 3624.480406][ T483] do_syscall_64+0x41/0xc0 [ 3624.484821][ T483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3624.490714][ T483] RIP: 0033:0x7faae827cae9 [ 3624.495282][ T483] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3624.514909][ T483] RSP: 002b:00007faae8f980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3624.523849][ T483] RAX: ffffffffffffffda RBX: 00007faae839c050 RCX: 00007faae827cae9 [ 3624.531907][ T483] RDX: 0000000020000080 RSI: 000000000000127f RDI: 0000000000000005 00:30:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4c1cf46f91aceea1}]}]}, 0x20}}, 0x0) [ 3624.539873][ T483] RBP: 00007faae82c847a R08: 0000000000000000 R09: 0000000000000000 [ 3624.547840][ T483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3624.555804][ T483] R13: 000000000000006e R14: 00007faae839c050 R15: 00007ffef2852be8 [ 3624.563780][ T483] [ 3624.725870][T19536] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3624.975882][T19536] usb 2-1: Using ep0 maxpacket: 16 [ 3625.105992][T19536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3625.276439][T19536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3625.285605][T19536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3625.293884][T19536] usb 2-1: Product: syz [ 3625.298088][T19536] usb 2-1: Manufacturer: syz [ 3625.302690][T19536] usb 2-1: SerialNumber: syz [ 3626.006009][T19536] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3626.012062][T19536] cdc_ncm 2-1:1.0: bind() failure [ 3626.020421][T19536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3626.028613][T19536] cdc_ncm 2-1:1.1: bind() failure 00:30:09 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:30:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 00:30:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 00:30:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@cipso={0x86, 0x6}]}}}}}) 00:30:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:30:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndmidi(&(0x7f0000004440), 0x0, 0x20000) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x3, 0x7) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 00:30:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 00:30:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) [ 3626.991203][T21076] usb 2-1: USB disconnect, device number 115 00:30:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 00:30:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 00:30:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 00:30:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 3627.446014][T21076] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3627.685807][T21076] usb 2-1: Using ep0 maxpacket: 16 [ 3627.828370][T21076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3628.006026][T21076] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3628.016285][T21076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3628.024461][T21076] usb 2-1: Product: syz [ 3628.028895][T21076] usb 2-1: Manufacturer: syz [ 3628.033517][T21076] usb 2-1: SerialNumber: syz [ 3629.177191][T21076] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3629.183661][T21076] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3629.191456][T21076] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3629.397024][T21076] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3629.402797][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3629.415306][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3629.426202][T21076] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3629.441688][T21076] usb 2-1: USB disconnect, device number 116 [ 3629.448766][T21076] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 3629.462515][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3629.472324][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 00:30:12 executing program 3: socketpair(0x25, 0x5, 0x3ff, &(0x7f0000000180)) 00:30:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:30:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x57a) 00:30:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:30:12 executing program 4: io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(0x0) io_destroy(r0) 00:30:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:12 executing program 3: socketpair(0x25, 0x5, 0x3ff, &(0x7f0000000180)) 00:30:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x57a) 00:30:12 executing program 3: socketpair(0x25, 0x5, 0x3ff, &(0x7f0000000180)) 00:30:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "c13ed40b753b5b24dfe37e83154d5c49d9008c8b04e99fb079dc5b7fd2af35e156e80283f7a8d47253b1cec2432a16d69100316fd842565a8d4b2d06b32f250c70bf4f7aca7783a71662bc1dba27e888b10e10610044b0529691aefeeb4f261618ed7f7ca07ed6baa25fefb6dfcf77d1d788de9b7342b550882f62487427e80ef11f04de012c74b112e58ab407a776cf84e526056d44127c9ead047f04e5449848b57d25fbcf5e7764a86c888afee51d668afdb9e758c89b99e412e10ea2776ac2ab5ef6cc6a488e48dec1498cb7fbe9abb7be276590c8fb068ca38abf8b2096f2b742c3932819f6ba866ba1247bf070bd85338d98987be3ea24f5b3d509feb22ed9e91cffdea9cac8c679afc8be68fa9721e121d1294d14d12c8dc08375ebc1c4ac36e36e2d8f9ab2297199ebb248ac4de159014faaf70fe7e848bd8fcfe366751e63fb76d5e6b8faee3e7fdc25994b61af7710837142d82d088c37f104b827af01567915d0d9efe5800823b9c0f566c3db11f24ad4554c8ecdff7a21bb007bdced85cd24f65a0c7869affe05c197a85551c7485752a8cbb1cbeb7b66936b9cbfecf5f8d4bb9b4d39daf46efb64ce79806e80b275a28c141a1d720b25e7829a3bfa20b57c29f4d271498350a6a732f17b0095810cf8964e84ab1aa1203df67428d0b567b4dcf7315b7063941e0d4ad9813a451ab405e3023339e27cba9c0e50b9befa29a2fd31f5eef80b474d3a0ba042267f35825e8718cf9af120a7d17ff9a73f04f9df7844823de7a867425f18ddabc9316e55692497c071b61552d65dcb889a5375bd9b2912ae6a4e61240028acdca68a5b513c8977ab39ffedb8d0fd5a8a36baec4cdf9521bbac8ca2854e4e92283c8c5a62b58052cb4000dad2eea14b4ec65e099b1e46a8fe5c9043a43891927b0e5c5d0f7a50e857a56f632e2bcd0768a4cc92bfdbfabf2e6de8a5a24f1b1caad04df63c850e32dfe8d9e0bd217be66600ea21314b5c2f7409d452db9db859231a9594f7317a7d01d491f7788fb624117fdf97ad81a9a8330f5f2248970d7b594ed623acc75995df5fef677962a5928eff5f41ea127c48ab9fc16d7aa0b974dbb777e2816a98cad901da19e9c5a5cd4ca01d4b9fcbedcff690e47ed7a3ba2bb166676a8aa7734b0fe07267f262f60a94ed8dc5966e60df1e2c13da9142471a51bb28ec0d387e1437a41d246a22b35785c5c28a3afa07523d25e9c8ac21ca947c6b578c1699f3674e496c1017700f133e5f1ffb88f24f337b3dd9eb8d1a9aee2ca8c7adb3922e2e91461a2012879e06b1de09d332f6324bd796254c89c7762fb7dfb54f0401b328c7baa5daaa5a76cb1e014a63c61574f3b2e70b92a1b2873fc178f234f58698ebfd7483f50ddb189447a8e8b98a513ef2e6b1d297b90f380b76d8c737ea554c5b741f8ac6b6b333cd674e46abdf47149270d4ceeacc47db26000fb1d5e3762797651dabe754fc3bf46efc6cf40b763c0a145c5181c11cb720cee2222a44361a727a113104bcce17e3fc66cd1b4681d8cebb727490753d3b7745da0842ca7971931801a8ce77a09300d84ce4cae93f2e6d0c43eb6b5f75c3f67d04fa45e8c113d6ed2e4591992b1b71d4806537045b1c304ef6b1ae6f304dbadd70cd7565ac8a10a532522cc2eae62289801d8549dda5dd98e0a83e213b347bad3b3a5b10bb6dde85d684dd1c8622006571cc022e9a236fd4545d2a28f9ed9f07aa5bad1847684034b2c1de8143fed6051f818e533c2f96478db7282e9f6e94a2a305f734db3a9698551401c28617a1b0426b8712e5157ac85cc52c15d1d0de9db5458330ed7af37a49b48c0c472e4226eb"}, 0x57a) 00:30:12 executing program 4: io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(0x0) io_destroy(r0) [ 3630.195966][T21076] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3630.438038][T21076] usb 2-1: Using ep0 maxpacket: 16 [ 3630.556122][T21076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3630.725959][T21076] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3630.735016][T21076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3630.745015][T21076] usb 2-1: Product: syz [ 3630.749442][T21076] usb 2-1: Manufacturer: syz [ 3630.754054][T21076] usb 2-1: SerialNumber: syz [ 3631.907351][T21076] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3631.913823][T21076] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3631.923504][T21076] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3632.126301][T21076] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 3632.132082][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3632.147439][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3632.159264][T21076] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3632.174031][T21076] usb 2-1: USB disconnect, device number 117 [ 3632.189565][T21076] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 3632.202972][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 3632.212692][T21076] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 00:30:15 executing program 3: socketpair(0x25, 0x5, 0x3ff, &(0x7f0000000180)) 00:30:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x80b) 00:30:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:30:15 executing program 4: io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(0x0) io_destroy(r0) 00:30:15 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 00:30:15 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x80b) 00:30:15 executing program 4: io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(0x0) io_destroy(r0) 00:30:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x80b) 00:30:15 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) 00:30:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="4e30a2d64fc80f0b932e9b0c5500000000bddd39577c2947d8620c1ae3f2cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:30:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2}) [ 3632.945821][T21076] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3633.186139][T21076] usb 2-1: Using ep0 maxpacket: 16 [ 3633.306006][T21076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3633.476496][T21076] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3633.485563][T21076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3633.493873][T21076] usb 2-1: Product: syz [ 3633.498091][T21076] usb 2-1: Manufacturer: syz [ 3633.502785][T21076] usb 2-1: SerialNumber: syz