last executing test programs: 2.607035074s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x40, 0xa, 0xfffffffffffffd5a, "023b48312025c84b028dcb170b47cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xd}}}}, 0x11) 2.212983171s ago: executing program 1 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x7e9543, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* m\b'], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xd9, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x3, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x1, "58b01ebf"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x6, 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x3, "f9359c"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x7f, "096caf0dc76a"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x0, "11"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x1, 0x1001}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8a, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x5, 0x80, {0x7, 0x25, 0x1, 0x2, 0x7, 0xff2f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xf, 0x2, 0xfc, 0xf, "87cd5387f256e21b"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x3, "1e"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x4, 0xf5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x2, 0xd, {0x7, 0x25, 0x1, 0x0, 0x1, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0xc8, 0x3, 0x40, 0x2}, 0x24, &(0x7f0000000440)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0xc2, 0xb3, 0x1, 0x3, 0x81}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x9, 0xf00, 0x0, [0x3f, 0x7fbf00]}]}, 0x1, [{0x37, &(0x7f0000000480)=@string={0x37, 0x3, "63ce889ea6fdac0e97bf4bf32349a239e05f81e2a431241a55ed10efe3e3c0236cf9d98382101bfabd8647afaf2833db1d7dc54ce8"}}]}) syz_usb_control_io$uac1(r5, &(0x7f00000005c0)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x0, 0x3, 0xee, @string={0xee, 0x3, "9b14c39468e8d6bb22c4e3f82c441642f2ca27696dba663ee8a0d1a538757c1623bda775dbf9fb8cfd994612ec6e752a6f28c900ca2200f7d925c755668ca56aab4137b2f4d57a967cac26eebe804cf9405a4916348f7d2c65facb1385311a32f10051ffc9e81e16e89d86ae09d49f5180d20a5d6a0312758e66b86d5f5071c56c67edf891d9aff2bd96d6db0d294405671eab615d43b2c5290a7dfcc5fb6c4d011c77261f5d995f062a578cef39df476fdb7e75b7fdf59ce12a4d986ca786752fd83f874731c3ca04e5ada2852594747e51fd19106d35fcd18cbe1d6ac09621f01d1fff8169f6bc23674fe6"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0xea85e88bb13bf269, 0x7, 0xa3, "6df2c0897d888bb2314749aee2d3c6967bac5374dd6b24bb021c9e115f1e928375e8128d57583ed0f1218e22195e2654dd587a754300a71a2846fae7e48b925a74b8a7079d115947e10fb9c56c8ec14b4a89017b080d093416e65986fd63c973c2e92abc7fd6a002b314e04217ed49dedf3b988cec27b0f526743ef9ca281e6cb6a3a817c2c6c6a55e9aa7b0d55ad0638a057f5a7d3f571b5fefcaf293f1e313e1d2ad"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x81, 0x1, '8'}, &(0x7f0000000980)={0x20, 0x82, 0x2, '[\x00'}, &(0x7f00000009c0)={0x20, 0x83, 0x3, "0345b0"}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "3749a403"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "fa0604"}}) syz_usb_control_io$uac1(r4, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "6afd6459e33382bfa67646680917424056a5fa8ee21ccc0837b45beb614dca6e576ab4a05c2d0fb4597207319b48f902b741643e606790fc9e944da833b647597bd755ace540601124cf54ceb8cf15f6d6634933de5b086aeb3b906382b381bc3726104a5f2a8bf7c39349d3debbd965e07a902a378b1d105cb77ec200f356"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000006c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x202}, 0x14}}, 0x0) 1.806076197s ago: executing program 2 (id=3): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r1, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x9}, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000100)={{0x32, @empty, 0x4e24, 0x2, 'wrr\x00', 0x8, 0xffffffff, 0xb}, {@multicast1, 0x4e22, 0x2000, 0x7f, 0x800, 0x7f}}, 0x44) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.211482234s ago: executing program 0 (id=10): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @can, @in={0x2, 0x4e20, @remote}, @generic={0x2a, "baaa65701029ce9da7e8a636d0f7"}, 0x7ff, 0x0, 0x0, 0x0, 0xee33, &(0x7f0000000040)='team0\x00', 0x0, 0x7ff, 0xfff}) 938.8071ms ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) 836.558253ms ago: executing program 0 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002080)={0x40, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x7}}, './file1\x00'}) 692.318028ms ago: executing program 3 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0xf623ff85f250c649) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x1000000, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 680.335051ms ago: executing program 0 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x101) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x40000000000000}) 627.951846ms ago: executing program 2 (id=15): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5001, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 492.400636ms ago: executing program 0 (id=16): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000040)="d62795b319fb420c94a18ab68c2a31a9454de534b5b2f3bb2f6c329eda57ad0e9c63a1713907654586635f29b49e098c17d6857b58fd7bff259410204d39881ed873e22674d8ded7d6b4dac74573cafc8bb30c111351873d3da970ffdfa1df8abdfa9edc115dfbf9fc3ef9c514a58a903bcc5e21996acee561b70997c84fbab9ff90b57d75f62ec5658b347a28d1b1cfbfd696fef69cce", 0x97}], 0x2, &(0x7f0000001300)=[{0xb0, 0x110, 0xd, "e80383e96c7b3d8e661fa744edd211db65b9284f5b1b081048706381d38f7b47d3eaa99aa12569ebacba3ceac712d8bbd21995a73310ffc24e0a39378e74df6c29ec8ce45ef852a7e8fe7036012cddf801ce93bbcb00985dfa20708fc4a86452113da1a28ee6235c62bb4f08c8d8a16190a74ef27f003f8f7631495532d25ec9a1deee67acf39080d31a8eac96f7a5de415fd46353114651642f28d8b1"}, {0x98, 0x110, 0xffff0fe0, "3437565506e16f6124f362716d9554bc7d13a3aceb04434b9056caeff53c0f49f620fbf5bfd54689a345dd7a93d3a17213de6614e96935bda6e04c960ecbe67389e06e70f1dbd45320caa467f0613093d07437536d4909fdf1000a9b13f281fc2a1d8203bd79b61c3669636749b582df9add70ef2521de66cbc9dc685439e2b703b26663d9"}, {0x30, 0x102, 0x5f, "29a59829d93eb236de2bd1344b0aaba9d84a9662dcebefe22e1e505ac258"}, {0x80, 0x118, 0x0, "0107456e5eb8877034ebbdbe9b58411ac47ac95c531e67d620bfe94ee5b649c4a57e0de6fab31fb852dcfbe010d081a245319521d9274b989b34fbcdc1d4085fbd78ba0b2de2333c94db4a309d63e62aa657aa6a8a47ba78878fe4e21971baccdf83d278dbafc240b08d02f9584095"}, {0x68, 0x6, 0x2, "821d697aeb81928c3f36a9600e68bf0fa98cb7f9a949152f835bf41a147c587fcf5b3750ecbeb6c06c73ffef53be2eb729b4a27cd7ac04b93892514890b1c2d3f683d0c6c09725351be341d4313a5342435bf5bec6"}, {0x58, 0x107, 0x2, "7ec84a2a276307c75378a3e99a71fd92c058c7c3c352c3fbe8c8606a34bdcdab900f1876939e97220bd6087333ac5002fcc1cd87063af1e1a223de4ddea84e9ab6879b04"}, {0xa0, 0x10a, 0xb64f9b6b, "a85e8a82d09f368c93dcf8f60413da0ce205ccacf1db6d6b708a27848a1629eb112ecbb759c5982ee4edce9e366f932847c5e020732f81fd76bedfc0b00caf7e24da4e12b3a5cac57a6cf808809e102cf04c8fcc1102d02dfa0bb7132af04b88db38c34b6b8f20dace0f893e3eaf92a304df11fbf1a94f9d54fa69ad7bc4708f627c39bf5fa6c13288b459b1b042"}], 0x358}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002a80)="f228c518e0f7cc3449e0ee7e3ebe29da8c634969346c808be8f6b2d9a4cd4d6bc0e6009c495d40a6502372e11fe00ea2d0605131f032620300ac269636283f6701a0cb8f1ffadfb047a761b2029c658bb8fb47518670ee6400e448d1bb7f8cbcd2e3d66c5122208835994aa03225014595b0f72559df371cbceb4ebe7f3bc5a1d6fab6fd00578a980512ee5ab7f72bad65774be39e0a70ecdcf437e6708130d3fdc72450b65421b95bf50beb6962895bead083a0644dde9eaafef265c7e880cd1f9aa07ee532bed54361afe1ad9292c16132dcf779bf30cfb3f46cc9d139c993a7eb0ef7b120913af63b0577bd020d0afb8bd3a14b", 0xf5}, {&(0x7f0000000200)="6e4df68a2e8669a55b339758cd82f9925ddee1492e5bbc92d88171f5c865e7b3aa9aa556d55869fcff77c280574d4e51b25bd900d04a68fd913622d2f37b2a179ff05b22b9fdd0c6b4001418a2dc0f0288745fa0d5a07b16d050a4f01fe98bb54f29fe433ae177fa52e95c41e2ced533186e224928d2806ff9cf788bd9b331bff5a20e747d18855191", 0x89}, {&(0x7f0000001880)="c62ca9fffee375c8962dc8990e54e1bfcadcc9dd14b21281d1fec18a9f5b2031bd243628152b64ed558e4eb83b80bf174b5b73e99dc1beedab72127521a6722e5ea3bc70e3900f98e46005d966933a98e17ca791958c9bc3516a506c5627335ade29c3e8de6d91e67a3e849ccf9e4c81a017310238e3c34f5cf24f019da5a1efdca8dad41c9795bb6b4ff9992759aa55378d320641dc02bb98400f625c9e", 0x9e}, {&(0x7f0000001940)="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", 0x1000}], 0x4}}], 0x2, 0x400c000) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="14010000220001000000000000000000020100800c000100000000000000000014000c"], 0x114}], 0x1}, 0x80) accept4$inet(r2, &(0x7f0000002a00)={0x2, 0x0, @private}, &(0x7f0000002a40)=0x10, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) 464.53838ms ago: executing program 3 (id=17): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x8, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) r4 = socket$kcm(0x2, 0x2, 0x73) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r6 = gettid() r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}, {&(0x7f0000000300)="5aa1ab9a50e31db360574bce6ca0e9cf36cdf995f6326c20b9cb19a57868c33c48f2a5c968670e7788d3e25d50fc45d86ad5458a16466a61436a9db302e5a23418bfa1f4dafae9e2854a2879275cc2b255ea7dce6d54eb10be207409f41a846c28f9f851dffbeb221814047faf15ef9dde44900436416a0d6c437e30a53e32fe0f9f760a64f3edca2c9acfbe7348bb9db4196cce74653e17db32e4b39a7577b4cf4449d62e6e58082cbebca99b6a5ee99e46b15e37a85d3af4ae2aa2174d5990727b6496a24498be01488b627e596e6191f274554131633a8b9a5787f175f5a5cae548cc6eb79eb98a6dc38e20d6a12a21ce35fa5b636ae8", 0xf8}, {&(0x7f0000000480)="8130ab4923f8e75bc9541c4b45a425891d642a2bd50aec5d1fa854278a0f308d39070c92216bd28ab2aecd218d37dc54072399300c0bb5a48a7c47637daabb6dbe617bf25d4984f9332afbf2be5f8a05ed7fd0c9541a2a3bb724d4d45317e7226c13b9f1a44f968004394210db9f42a874783277b9e8fb6b1e2494620c4cfd8e7581b8244e2fdad4c340e709979d55acd4d6a4ab4b14876b72f3c416fad40c10d3fd245aafb83e074ce8c3b2cae9ac0e828b88ca26cff3da", 0xb8}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000700)="bb4fab11fb73e6e3e90569dbe3baa79fff200522606d95f89b5540938b921b78f5455a58f204624ddb6aa5e9da1e07c6b2e24cd252c5f63cc72d700ffefc2428d7263ce34bf87f100942a9c2a9501f4036844a48f933032ed83431341ea818d6a222122af6c1d2195d12a17063d485ae25f87461351baab7ee5498d6b4ffe84d06382b04c3908c35b52850012d53298fbfc42b3a2383d7a46857c3c798f3f890de1bfc956f9eb77b7defba7ba07cf25072024b11266a595efd49131f4e1644e2e72994fe695ea98e", 0xc8}], 0x5, 0x0, 0x0, 0x7400}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@any, 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SET_IRQCHIP(r10, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r10, 0xae71, &(0x7f0000000080)={[{0x10000, 0x0, 0x20, 0x0, 0x20, 0xfd, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0xd340, 0x20, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x2, 0x0, 0x8415}]}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x18000}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000440)=0x1) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 319.79887ms ago: executing program 0 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="3e2e0f22a30fecbd0000260f01d1362208a00fc71a0f01df640f01cb0f22c5670f21fb470fa18c", 0x27}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000b6fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 224.197284ms ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x40000) fanotify_mark(r2, 0x1, 0x8000018, r1, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0xe1, 0xff, 0x64, 0x8, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x25, 0x6, 0x0, 0x7, 0xfc, 0x2b, 0x7}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=20): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x3, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x8, 0x4}, {0xeeef0000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0xeeee8000, 0x3000, 0x0, 0x1, 0xb, 0x3, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0x1, 0x2}, 0xddf8ffdb, 0x0, 0xf000, 0x70, 0x0, 0x0, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x2, @broadcast, 'pimreg1\x00'}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r7 = eventfd(0x2) close_range(r0, r7, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 84.640572][ T5850] cgroup: Unknown subsys name 'net' [ 84.816679][ T5850] cgroup: Unknown subsys name 'cpuset' [ 84.826472][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.553224][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.115063][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.123697][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.132020][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.140652][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.148657][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.203257][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.213068][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.222951][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.238970][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.247049][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.292118][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.300756][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.308913][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.317276][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.325755][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.334000][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.343991][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.352921][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.366775][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.375128][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.772720][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 89.854466][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.038620][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 90.050138][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.057935][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.065889][ T5859] bridge_slave_0: entered allmulticast mode [ 90.074531][ T5859] bridge_slave_0: entered promiscuous mode [ 90.088681][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095910][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.103239][ T5859] bridge_slave_1: entered allmulticast mode [ 90.110794][ T5859] bridge_slave_1: entered promiscuous mode [ 90.232773][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.242206][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.251445][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.259309][ T5863] bridge_slave_0: entered allmulticast mode [ 90.267848][ T5863] bridge_slave_0: entered promiscuous mode [ 90.292472][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.317822][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.326066][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.333426][ T5863] bridge_slave_1: entered allmulticast mode [ 90.341103][ T5863] bridge_slave_1: entered promiscuous mode [ 90.375964][ T5859] team0: Port device team_slave_0 added [ 90.401414][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 90.416694][ T5859] team0: Port device team_slave_1 added [ 90.463718][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.529496][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.553684][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.560952][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.568784][ T5868] bridge_slave_0: entered allmulticast mode [ 90.577814][ T5868] bridge_slave_0: entered promiscuous mode [ 90.586487][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.593731][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.619947][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.658372][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.665669][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.673232][ T5868] bridge_slave_1: entered allmulticast mode [ 90.680898][ T5868] bridge_slave_1: entered promiscuous mode [ 90.705711][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.712779][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.739469][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.766176][ T5863] team0: Port device team_slave_0 added [ 90.781776][ T5863] team0: Port device team_slave_1 added [ 90.846762][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.862121][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.929349][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.936937][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.944720][ T5867] bridge_slave_0: entered allmulticast mode [ 90.952030][ T5867] bridge_slave_0: entered promiscuous mode [ 90.960019][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.967143][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.993711][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.035482][ T5868] team0: Port device team_slave_0 added [ 91.042021][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.049541][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.056941][ T5867] bridge_slave_1: entered allmulticast mode [ 91.065697][ T5867] bridge_slave_1: entered promiscuous mode [ 91.073072][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.080080][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.106857][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.124435][ T5859] hsr_slave_0: entered promiscuous mode [ 91.131102][ T5859] hsr_slave_1: entered promiscuous mode [ 91.139689][ T5868] team0: Port device team_slave_1 added [ 91.233414][ T52] Bluetooth: hci0: command tx timeout [ 91.244892][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.251988][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.278452][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.293361][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.312875][ T52] Bluetooth: hci1: command tx timeout [ 91.327612][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.334816][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.361591][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.376230][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.391363][ T5863] hsr_slave_0: entered promiscuous mode [ 91.398567][ T5863] hsr_slave_1: entered promiscuous mode [ 91.402782][ T52] Bluetooth: hci2: command tx timeout [ 91.405292][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 91.415545][ T5863] Cannot create hsr debugfs directory [ 91.472639][ T52] Bluetooth: hci3: command tx timeout [ 91.503928][ T5867] team0: Port device team_slave_0 added [ 91.534276][ T5867] team0: Port device team_slave_1 added [ 91.626856][ T5868] hsr_slave_0: entered promiscuous mode [ 91.634281][ T5868] hsr_slave_1: entered promiscuous mode [ 91.640630][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.647327][ T5868] Cannot create hsr debugfs directory [ 91.729999][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.737635][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.763832][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.821768][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.829315][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.855486][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.044105][ T5867] hsr_slave_0: entered promiscuous mode [ 92.050623][ T5867] hsr_slave_1: entered promiscuous mode [ 92.056998][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 92.062896][ T5867] Cannot create hsr debugfs directory [ 92.082445][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.097226][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.137683][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.176299][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.378148][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.429664][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.444335][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.495522][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.626909][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.669752][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.690925][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.709226][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.720353][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.809410][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.823722][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.852014][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.865644][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.881022][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.927341][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.934653][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.979088][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.986310][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.038379][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.086520][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.118149][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.125361][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.167679][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.174934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.240406][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.259631][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.314281][ T52] Bluetooth: hci0: command tx timeout [ 93.318171][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.341137][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.366470][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.373691][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.397610][ T52] Bluetooth: hci1: command tx timeout [ 93.418259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.425517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.455847][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.463092][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.478683][ T52] Bluetooth: hci2: command tx timeout [ 93.525066][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.532356][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.555587][ T52] Bluetooth: hci3: command tx timeout [ 93.706973][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.780769][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.926206][ T5859] veth0_vlan: entered promiscuous mode [ 93.990981][ T5859] veth1_vlan: entered promiscuous mode [ 94.030646][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.111202][ T5859] veth0_macvtap: entered promiscuous mode [ 94.131770][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.179676][ T5859] veth1_macvtap: entered promiscuous mode [ 94.206799][ T5863] veth0_vlan: entered promiscuous mode [ 94.246395][ T5863] veth1_vlan: entered promiscuous mode [ 94.286303][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.314592][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.339259][ T5868] veth0_vlan: entered promiscuous mode [ 94.351761][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.379576][ T5863] veth0_macvtap: entered promiscuous mode [ 94.396378][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406317][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.421234][ T5868] veth1_vlan: entered promiscuous mode [ 94.431383][ T5863] veth1_macvtap: entered promiscuous mode [ 94.440444][ T3011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450514][ T3011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.531382][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.561151][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.618238][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.627159][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645219][ T5867] veth0_vlan: entered promiscuous mode [ 94.655683][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.664609][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.678438][ T5868] veth0_macvtap: entered promiscuous mode [ 94.688996][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.690018][ T5867] veth1_vlan: entered promiscuous mode [ 94.713303][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.759572][ T5868] veth1_macvtap: entered promiscuous mode [ 94.778049][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.787992][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.854313][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.892877][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.907985][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.908019][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.956492][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.004600][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.027864][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.028479][ T5867] veth0_macvtap: entered promiscuous mode [ 95.045974][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060496][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.109156][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.130690][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.178484][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.197607][ T5867] veth1_macvtap: entered promiscuous mode [ 95.288479][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.324507][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.326685][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.367673][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.395172][ T52] Bluetooth: hci0: command tx timeout [ 95.427436][ T3011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.428068][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.444654][ T3011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.460141][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473173][ T52] Bluetooth: hci1: command tx timeout [ 95.480653][ T3011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.491645][ T3011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.554863][ T52] Bluetooth: hci2: command tx timeout [ 95.573726][ T908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.633571][ T52] Bluetooth: hci3: command tx timeout [ 95.748432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.763072][ T908] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 95.772424][ T908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.787148][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.808227][ T908] usb 4-1: Product: syz [ 95.812455][ T908] usb 4-1: Manufacturer: syz [ 95.824951][ T908] usb 4-1: SerialNumber: syz [ 95.863787][ T908] usb 4-1: config 0 descriptor?? [ 95.891397][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.899896][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.105189][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.134592][ T908] usb-storage 4-1:0.0: USB Mass Storage device detected [ 96.207800][ T5967] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 96.217835][ T5967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.315627][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 96.336280][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.338017][ T5956] usb 4-1: USB disconnect, device number 2 [ 96.364604][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.382461][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.405686][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.415046][ T5911] usb 2-1: Product: syz [ 96.419258][ T5911] usb 2-1: Manufacturer: syz [ 96.424307][ T5911] usb 2-1: SerialNumber: syz [ 96.451310][ T5911] usb 2-1: config 0 descriptor?? [ 96.469497][ T5911] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.480119][ T5911] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 97.067731][ T5911] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 97.083846][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.097368][ T5911] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 97.133436][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.335377][ T1212] cfg80211: failed to load regulatory.db [ 97.410572][ T5989] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 97.419748][ T5989] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16'. [ 97.498542][ T52] Bluetooth: hci0: command tx timeout [ 97.554449][ T52] Bluetooth: hci1: command tx timeout [ 97.562441][ T5991] Zero length message leads to an empty skb [ 97.568555][ T908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.643117][ T52] Bluetooth: hci2: command tx timeout [ 97.713300][ T52] Bluetooth: hci3: command tx timeout [ 97.735923][ T908] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.746781][ T908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.760676][ T5911] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 97.769619][ T5911] em28xx 2-1:0.0: No AC97 audio processor [ 97.775946][ T908] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.787875][ T908] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.802000][ T5911] usb 2-1: USB disconnect, device number 2 [ 97.808648][ T908] usb 3-1: Manufacturer: syz [ 97.826147][ T5911] em28xx 2-1:0.0: Disconnecting em28xx [ 97.838027][ T908] usb 3-1: config 0 descriptor?? [ 97.869451][ T5911] ================================================================== [ 97.877602][ T5911] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 97.886002][ T5911] Read of size 4 at addr ffff888057f804f0 by task kworker/1:4/5911 [ 97.893931][ T5911] [ 97.896284][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 97.896307][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.896320][ T5911] Workqueue: usb_hub_wq hub_event [ 97.896351][ T5911] Call Trace: [ 97.896358][ T5911] [ 97.896367][ T5911] dump_stack_lvl+0x189/0x250 [ 97.896386][ T5911] ? rcu_is_watching+0x15/0xb0 [ 97.896413][ T5911] ? __kasan_check_byte+0x12/0x40 [ 97.896434][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.896449][ T5911] ? rcu_is_watching+0x15/0xb0 [ 97.896471][ T5911] ? lock_release+0x4b/0x3e0 [ 97.896491][ T5911] ? __virt_addr_valid+0x1c8/0x5c0 [ 97.896518][ T5911] ? __virt_addr_valid+0x4a5/0x5c0 [ 97.896547][ T5911] print_report+0xca/0x240 [ 97.896564][ T5911] ? media_devnode_unregister+0xe2/0xf0 [ 97.896588][ T5911] kasan_report+0x118/0x150 [ 97.896608][ T5911] ? media_devnode_unregister+0xe2/0xf0 [ 97.896635][ T5911] media_devnode_unregister+0xe2/0xf0 [ 97.896658][ T5911] media_device_unregister+0x37c/0x400 [ 97.896681][ T5911] ? em28xx_audio_fini+0x59/0x1b0 [ 97.896702][ T5911] em28xx_release_resources+0xac/0x240 [ 97.896730][ T5911] em28xx_usb_disconnect+0x19f/0x2f0 [ 97.896757][ T5911] usb_unbind_interface+0x26e/0x910 [ 97.896780][ T5911] ? __pfx_usb_unbind_interface+0x10/0x10 [ 97.896800][ T5911] device_release_driver_internal+0x4d9/0x800 [ 97.896826][ T5911] bus_remove_device+0x34d/0x410 [ 97.896845][ T5911] device_del+0x511/0x8e0 [ 97.896868][ T5911] ? __pfx_device_del+0x10/0x10 [ 97.896886][ T5911] ? kobject_put+0x446/0x480 [ 97.896906][ T5911] usb_disable_device+0x3e9/0x8a0 [ 97.896927][ T5911] usb_disconnect+0x330/0x950 [ 97.896957][ T5911] hub_event+0x1cf5/0x4a20 [ 97.896985][ T5911] ? do_raw_spin_lock+0x121/0x290 [ 97.897012][ T5911] ? register_lock_class+0x51/0x320 [ 97.897037][ T5911] ? __pfx_hub_event+0x10/0x10 [ 97.897055][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 97.897078][ T5911] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.897102][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 97.897122][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 97.897145][ T5911] process_scheduled_works+0xae1/0x17b0 [ 97.897269][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.897310][ T5911] worker_thread+0x8a0/0xda0 [ 97.897336][ T5911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.897378][ T5911] ? __kthread_parkme+0x7b/0x200 [ 97.897405][ T5911] kthread+0x711/0x8a0 [ 97.897433][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 97.897455][ T5911] ? __pfx_kthread+0x10/0x10 [ 97.897482][ T5911] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.897506][ T5911] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.897532][ T5911] ? __pfx_kthread+0x10/0x10 [ 97.897558][ T5911] ret_from_fork+0x47c/0x820 [ 97.897580][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 97.897604][ T5911] ? __switch_to_asm+0x39/0x70 [ 97.897623][ T5911] ? __switch_to_asm+0x33/0x70 [ 97.897641][ T5911] ? __pfx_kthread+0x10/0x10 [ 97.897667][ T5911] ret_from_fork_asm+0x1a/0x30 [ 97.897694][ T5911] [ 97.897701][ T5911] [ 98.192600][ T5911] Allocated by task 5911: [ 98.196945][ T5911] kasan_save_track+0x3e/0x80 [ 98.201645][ T5911] __kasan_kmalloc+0x93/0xb0 [ 98.206244][ T5911] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 98.211627][ T5911] __media_device_register+0x58/0x280 [ 98.217014][ T5911] em28xx_usb_probe+0x1764/0x2a20 [ 98.222067][ T5911] usb_probe_interface+0x665/0xc30 [ 98.227213][ T5911] really_probe+0x26d/0x9e0 [ 98.231742][ T5911] __driver_probe_device+0x18c/0x2f0 [ 98.237157][ T5911] driver_probe_device+0x4f/0x430 [ 98.242199][ T5911] __device_attach_driver+0x2ce/0x530 [ 98.247687][ T5911] bus_for_each_drv+0x24e/0x2e0 [ 98.252564][ T5911] __device_attach+0x2b8/0x400 [ 98.257341][ T5911] bus_probe_device+0x185/0x260 [ 98.262297][ T5911] device_add+0x7b6/0xb50 [ 98.266855][ T5911] usb_set_configuration+0x1a87/0x20e0 [ 98.272342][ T5911] usb_generic_driver_probe+0x8d/0x150 [ 98.277830][ T5911] usb_probe_device+0x1c1/0x390 [ 98.282735][ T5911] really_probe+0x26d/0x9e0 [ 98.287291][ T5911] __driver_probe_device+0x18c/0x2f0 [ 98.292710][ T5911] driver_probe_device+0x4f/0x430 [ 98.297757][ T5911] __device_attach_driver+0x2ce/0x530 [ 98.303234][ T5911] bus_for_each_drv+0x24e/0x2e0 [ 98.308112][ T5911] __device_attach+0x2b8/0x400 [ 98.312896][ T5911] bus_probe_device+0x185/0x260 [ 98.317766][ T5911] device_add+0x7b6/0xb50 [ 98.322104][ T5911] usb_new_device+0xa39/0x16f0 [ 98.326895][ T5911] hub_event+0x2958/0x4a20 [ 98.331350][ T5911] process_scheduled_works+0xae1/0x17b0 [ 98.336913][ T5911] worker_thread+0x8a0/0xda0 [ 98.341543][ T5911] kthread+0x711/0x8a0 [ 98.345629][ T5911] ret_from_fork+0x47c/0x820 [ 98.350239][ T5911] ret_from_fork_asm+0x1a/0x30 [ 98.355114][ T5911] [ 98.357450][ T5911] Freed by task 5911: [ 98.361431][ T5911] kasan_save_track+0x3e/0x80 [ 98.366263][ T5911] __kasan_save_free_info+0x46/0x50 [ 98.371580][ T5911] __kasan_slab_free+0x5b/0x80 [ 98.376368][ T5911] kfree+0x199/0x6d0 [ 98.380274][ T5911] media_devnode_release+0x61/0xa0 [ 98.385406][ T5911] device_release+0x99/0x1c0 [ 98.390019][ T5911] kobject_put+0x228/0x480 [ 98.394450][ T5911] media_devnode_unregister+0x6d/0xf0 [ 98.399846][ T5911] media_device_unregister+0x37c/0x400 [ 98.405339][ T5911] em28xx_release_resources+0xac/0x240 [ 98.410838][ T5911] em28xx_usb_disconnect+0x19f/0x2f0 [ 98.416143][ T5911] usb_unbind_interface+0x26e/0x910 [ 98.421373][ T5911] device_release_driver_internal+0x4d9/0x800 [ 98.427470][ T5911] bus_remove_device+0x34d/0x410 [ 98.432431][ T5911] device_del+0x511/0x8e0 [ 98.436777][ T5911] usb_disable_device+0x3e9/0x8a0 [ 98.441905][ T5911] usb_disconnect+0x330/0x950 [ 98.446600][ T5911] hub_event+0x1cf5/0x4a20 [ 98.451025][ T5911] process_scheduled_works+0xae1/0x17b0 [ 98.456609][ T5911] worker_thread+0x8a0/0xda0 [ 98.461221][ T5911] kthread+0x711/0x8a0 [ 98.465313][ T5911] ret_from_fork+0x47c/0x820 [ 98.470036][ T5911] ret_from_fork_asm+0x1a/0x30 [ 98.474841][ T5911] [ 98.477200][ T5911] The buggy address belongs to the object at ffff888057f80000 [ 98.477200][ T5911] which belongs to the cache kmalloc-2k of size 2048 [ 98.491543][ T5911] The buggy address is located 1264 bytes inside of [ 98.491543][ T5911] freed 2048-byte region [ffff888057f80000, ffff888057f80800) [ 98.505546][ T5911] [ 98.507885][ T5911] The buggy address belongs to the physical page: [ 98.514409][ T5911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57f80 [ 98.523271][ T5911] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.531795][ T5911] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.539377][ T5911] page_type: f5(slab) [ 98.543371][ T5911] raw: 00fff00000000040 ffff88801a842000 dead000000000122 0000000000000000 [ 98.551968][ T5911] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 98.560666][ T5911] head: 00fff00000000040 ffff88801a842000 dead000000000122 0000000000000000 [ 98.569448][ T5911] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 98.578143][ T5911] head: 00fff00000000003 ffffea00015fe001 00000000ffffffff 00000000ffffffff [ 98.586852][ T5911] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 98.595544][ T5911] page dumped because: kasan: bad access detected [ 98.602079][ T5911] page_owner tracks the page as allocated [ 98.607846][ T5911] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5911, tgid 5911 (kworker/1:4), ts 97786334080, free_ts 96955026372 [ 98.629692][ T5911] post_alloc_hook+0x240/0x2a0 [ 98.634492][ T5911] get_page_from_freelist+0x21e4/0x22c0 [ 98.640174][ T5911] __alloc_frozen_pages_noprof+0x181/0x370 [ 98.646014][ T5911] alloc_pages_mpol+0x232/0x4a0 [ 98.650886][ T5911] allocate_slab+0x8a/0x330 [ 98.655521][ T5911] ___slab_alloc+0xbd1/0x13f0 [ 98.660219][ T5911] __slab_alloc+0x55/0xa0 [ 98.664679][ T5911] __kmalloc_cache_noprof+0x411/0x6f0 [ 98.670070][ T5911] __media_device_register+0x58/0x280 [ 98.675487][ T5911] em28xx_usb_probe+0x1764/0x2a20 [ 98.680670][ T5911] usb_probe_interface+0x665/0xc30 [ 98.686062][ T5911] really_probe+0x26d/0x9e0 [ 98.690592][ T5911] __driver_probe_device+0x18c/0x2f0 [ 98.695900][ T5911] driver_probe_device+0x4f/0x430 [ 98.700968][ T5911] __device_attach_driver+0x2ce/0x530 [ 98.706449][ T5911] bus_for_each_drv+0x24e/0x2e0 [ 98.711414][ T5911] page last free pid 3011 tgid 3011 stack trace: [ 98.717836][ T5911] __free_frozen_pages+0xbc4/0xd30 [ 98.722976][ T5911] __folio_put+0x21b/0x2c0 [ 98.727421][ T5911] skb_release_data+0x49a/0x7c0 [ 98.732303][ T5911] sk_skb_reason_drop+0x127/0x170 [ 98.737347][ T5911] skb_queue_purge_reason+0x2c8/0x360 [ 98.742846][ T5911] rds_tcp_inc_free+0x1e/0x30 [ 98.747663][ T5911] rds_tcp_conn_path_shutdown+0x23d/0x2d0 [ 98.753414][ T5911] rds_conn_shutdown+0x469/0x8c0 [ 98.758411][ T5911] process_scheduled_works+0xae1/0x17b0 [ 98.764100][ T5911] worker_thread+0x8a0/0xda0 [ 98.768713][ T5911] kthread+0x711/0x8a0 [ 98.772829][ T5911] ret_from_fork+0x47c/0x820 [ 98.777438][ T5911] ret_from_fork_asm+0x1a/0x30 [ 98.782229][ T5911] [ 98.784590][ T5911] Memory state around the buggy address: [ 98.790253][ T5911] ffff888057f80380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.798344][ T5911] ffff888057f80400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.806431][ T5911] >ffff888057f80480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.814525][ T5911] ^ [ 98.822508][ T5911] ffff888057f80500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.830673][ T5911] ffff888057f80580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.838744][ T5911] ================================================================== [ 98.939146][ T5911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.946429][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 98.955836][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.965929][ T5911] Workqueue: usb_hub_wq hub_event [ 98.970986][ T5911] Call Trace: [ 98.974423][ T5911] [ 98.977380][ T5911] dump_stack_lvl+0x99/0x250 [ 98.982000][ T5911] ? __asan_memcpy+0x40/0x70 [ 98.986634][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.991844][ T5911] ? __pfx__printk+0x10/0x10 [ 98.996477][ T5911] vpanic+0x237/0x6d0 [ 99.000483][ T5911] ? __pfx_vpanic+0x10/0x10 [ 99.005049][ T5911] ? preempt_schedule+0xae/0xc0 [ 99.009937][ T5911] ? __pfx_preempt_schedule+0x10/0x10 [ 99.015432][ T5911] panic+0xb9/0xc0 [ 99.019180][ T5911] ? __pfx_panic+0x10/0x10 [ 99.023662][ T5911] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 99.029605][ T5911] ? media_devnode_unregister+0xe2/0xf0 [ 99.035414][ T5911] check_panic_on_warn+0x89/0xb0 [ 99.040391][ T5911] ? media_devnode_unregister+0xe2/0xf0 [ 99.045971][ T5911] end_report+0x78/0x160 [ 99.050235][ T5911] kasan_report+0x129/0x150 [ 99.054755][ T5911] ? media_devnode_unregister+0xe2/0xf0 [ 99.060500][ T5911] media_devnode_unregister+0xe2/0xf0 [ 99.065894][ T5911] media_device_unregister+0x37c/0x400 [ 99.071371][ T5911] ? em28xx_audio_fini+0x59/0x1b0 [ 99.076417][ T5911] em28xx_release_resources+0xac/0x240 [ 99.082015][ T5911] em28xx_usb_disconnect+0x19f/0x2f0 [ 99.087322][ T5911] usb_unbind_interface+0x26e/0x910 [ 99.092543][ T5911] ? __pfx_usb_unbind_interface+0x10/0x10 [ 99.098286][ T5911] device_release_driver_internal+0x4d9/0x800 [ 99.104520][ T5911] bus_remove_device+0x34d/0x410 [ 99.109499][ T5911] device_del+0x511/0x8e0 [ 99.113859][ T5911] ? __pfx_device_del+0x10/0x10 [ 99.118731][ T5911] ? kobject_put+0x446/0x480 [ 99.123337][ T5911] usb_disable_device+0x3e9/0x8a0 [ 99.128378][ T5911] usb_disconnect+0x330/0x950 [ 99.133081][ T5911] hub_event+0x1cf5/0x4a20 [ 99.137548][ T5911] ? do_raw_spin_lock+0x121/0x290 [ 99.142594][ T5911] ? register_lock_class+0x51/0x320 [ 99.147808][ T5911] ? __pfx_hub_event+0x10/0x10 [ 99.152588][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 99.158338][ T5911] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.163566][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 99.169322][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 99.175055][ T5911] process_scheduled_works+0xae1/0x17b0 [ 99.180627][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.186820][ T5911] worker_thread+0x8a0/0xda0 [ 99.191435][ T5911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.197862][ T5911] ? __kthread_parkme+0x7b/0x200 [ 99.202922][ T5911] kthread+0x711/0x8a0 [ 99.207033][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 99.212170][ T5911] ? __pfx_kthread+0x10/0x10 [ 99.216787][ T5911] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.222093][ T5911] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.227317][ T5911] ? __pfx_kthread+0x10/0x10 [ 99.231969][ T5911] ret_from_fork+0x47c/0x820 [ 99.236700][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 99.241856][ T5911] ? __switch_to_asm+0x39/0x70 [ 99.246657][ T5911] ? __switch_to_asm+0x33/0x70 [ 99.251438][ T5911] ? __pfx_kthread+0x10/0x10 [ 99.256122][ T5911] ret_from_fork_asm+0x1a/0x30 [ 99.260916][ T5911] [ 99.264348][ T5911] Kernel Offset: disabled [ 99.268774][ T5911] Rebooting in 86400 seconds..