last executing test programs: 18.161839096s ago: executing program 1 (id=14): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f00000000c0)=0x7f) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$rxrpc(0x21, 0x2, 0x2) write$6lowpan_control(r3, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r5 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_restrict_self(r5, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78) socket$nl_route(0x10, 0x3, 0x0) 14.888904376s ago: executing program 0 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) fsmount(r1, 0x1, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x0, 0x3, "679e23066f854e45ff80bf975376eeeb108dbe082f6da44b1701d8ccd5becd4b5404fc27627d9e99d0eda2bdd6a53498f8ac7e39ca3466c6763fa4c43210d08ed7819deaa3fb40dc733a3bc9d4ff43ab24512e098c621aae214cdd033cfa04e29cca3574b5f777a2047691e232fcc442f86a4f691c5bb8f4f912c7b2de67f151ba3410fc845f0233deda21d9ebb2e23bbbc52ca1cf621a3aaee40d971629339fe5d738e5d88648"}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320000e00000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e2064010100000000000000000002000100000000000000000000000000030005000000000002004e21ff0500"/112], 0x70}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "1e7b8fb4758a564f5684"}}, 0x0, 0x0}, 0x0) 10.93509032s ago: executing program 0 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ffffffffac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10040090780000"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10, 0x0}) socket$igmp6(0xa, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000280)='rxrpc_s\x00', 0x0, 0xfffffffffffffffc) syz_open_procfs$namespace(r4, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 10.482572916s ago: executing program 4 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700001fff00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9.979468014s ago: executing program 1 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f000001ac1414aa00187f71ae9b1c03"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x1, r0, 'id0\x00'}) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0x8, 0x2) syz_emit_vhci(0x0, 0xf8) r5 = syz_usb_connect(0x500000000000000, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="f74f8de587da49ff77752ea94938e547", 0x10) r7 = accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0000020000006a2ddcf6177a88641100d34a19d05ff6"], 0x0) connect$unix(r7, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 9.715205566s ago: executing program 3 (id=29): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x100d, 0x75}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x1000000000) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="040100001a000100000000000000000020010000000000000000000000f034800dffb352250c447fa787ef000001ac1e00010000000000000000000000000000000000000000000000000000000056e5b3257120b3b8c065834ccaf8a2ba1e3179917a3a4f000b239fc67d9aab4b017ce226824301e37411449ca0be43ea0bfac38f8060aae5aae5e7d6eec94004d02559e2e1ed984aac8f49b2028b82868937d786c2f3c4cce0d8129dd0dbec761d3519a6fc00"/192, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r6], 0x104}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000bc0)=ANY=[], 0x23d) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 9.520721917s ago: executing program 0 (id=30): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') getrlimit(0xf, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 8.535155175s ago: executing program 3 (id=33): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(0x0, &(0x7f0000000280)={[0x0]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x8c988000) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x434fdd1ac86a44e6, 0x0, [0x200000007, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 8.502649811s ago: executing program 4 (id=34): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe, &(0x7f0000000080)=0x80, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c041}, 0x800) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000280)) 7.998894429s ago: executing program 0 (id=35): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYBLOB="000000000000000466080000000000ff9500000000000000c60a0200000000001801000020207825000000000000000007010000f8ffffffb702000008000000b50a00000100000085000000b40000009500000000000000f449d34553b6cd933712a05d0c"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001370274902796e79e0e8b68f578bc93e0813a5ca0862be0be8f47c15589488024a13abb0f2995bf19618d7f3afd402dc6435fe8a07bb83514b70200678bf279d3343f376df14ebbf2638999bd3b02482da832836abfd8fe5b91c82dacd12636615d5e86e781761fe06d09b8c4b847f4c1debb9427747702853a8a343b89084cc008831fba81ec3d01fd41ce20c85357ff944ef0e77268c91e8921bd412ee154a53518d75f1cbf09ce8589f1a3bd260c3a1165437cd0dd7ed327d35afa75b21d9d7901c016a4c8ec69bf30ec5bcaf8d248961aaab9a12ef69101434050dbd55b60100e2bda31cb79ab63f99201dcb3352e1b2ae8892d871212db92d182d4d4061c2cd2d745607515b8291f096e53c54da0a937ff80de0990ee0a061103a303be4d0e5ae73d"], 0x6f4}}, 0x4000000) syz_usb_connect(0x5, 0x24, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0x8c, 0xd6, 0x29, 0x8, 0x413c, 0x81e0, 0x535c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x1, 0x50, 0xfa, [{{0x9, 0x4, 0x82, 0x6, 0x0, 0x8, 0xf4, 0xf2, 0x2}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0}) 6.276882371s ago: executing program 3 (id=36): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0x57, {0x57, 0x6, "f222db73fcf9a5fb1ccbe31a561348b51d386fbe18477dac7e3336f51ad091a866b89f05c5e17f6dd065a0a77240e687ffaa23303d87a6fe840047b7c254f9222a59a7e8eb2a2f8a355a089a1cab4f30faa4d05387"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f00000000c0)={0x0, 0xf, 0x79, {0x5, 0xf, 0x79, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x7, 0x1}, @generic={0x4e, 0x10, 0x4, "2f83084cb2fbef4772c63796362712a1f03af1f3f2cbbb639e7fc737e157a739d0459074af74165b984a36565b3c36845b37d8baf569716134a8e98bec41d915aaf600302410d43f14ce8d"}, @generic={0x14, 0x10, 0x3, "831f27d13f6922cc3deea614bbbd5dded8"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x8, 0xff, 0x74, 0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x9, 0x11, "27b51ec0", "ba1389b8"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0xc, 0x8d, 0x2, 0xc, 0x425, 0x6}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x0, 0x6, 0x41, "9eb19f09bfc115613f9520786698b086550ac437137f8a0b8088049e272b0b23933a4af83ec7637a2800cb8818cb67029e52499240cd88f4276caaa9347bbf124d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0xda}, &(0x7f0000000400)={0x40, 0xb, 0x2, "13db"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, &(0x7f0000000500)={0x40, 0x19, 0x2, "0ada"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x8}}) (async, rerun: 64) r0 = syz_usb_connect$cdc_ncm(0x2, 0xa7, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "0352d2"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x6, 0x400, 0x1}, {0x6, 0x24, 0x1a, 0x3, 0x3c}, [@mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x4, 0x7fe}, @country_functional={0x12, 0x24, 0x7, 0x9, 0x2, [0x2, 0x80, 0x800, 0x9, 0xb0c0, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x54, 0x9f, 0x1, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x5, [0x8, 0x3, 0xa, 0x6, 0x81]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x1, 0x2a}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x9, 0x42}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xff, 0x0, 0xb1, 0xff, 0x8}, 0x7e, &(0x7f0000000800)={0x5, 0xf, 0x7e, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x7, 0xf00, 0x7b57, [0x0, 0x3f00, 0xff0030, 0x0, 0x17, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8, 0x0, 0xfff9, [0xc0cf, 0x3f00, 0xff30, 0x0, 0xff00cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x2, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "6646ef706ae1edbf97f8c57e2ae8d595"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0x0, 0xff, [0x60]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x6}]}, 0x9, [{0x89, &(0x7f0000000880)=@string={0x89, 0x3, "e6f2d8d1fc4cdb1e5fae883579eb3c835ab3ca0b394033988c39d47364c3f6026fcf570c036eda03cde2040605eafd2c484b21944c16e94ef6fcc53f62c4f8a81987adaa206318c84f3655922c585c4ebf12c7a79fe12be72ac36ac402dd91f8228a7b18fbfd4cfe97db42040635e379f79222e3fb9d04169042af22d055157b6837611606264b"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2001}}, {0x2c, &(0x7f0000000980)=@string={0x2c, 0x3, "043b945537de504b60c053971ee7ca0641c820a62e1ba19051d2d603faf2acf07c7a3044cadf0fe7bcad"}}, {0xeb, &(0x7f00000009c0)=@string={0xeb, 0x3, "370b2d295ca257f5a0960c7e3b825b0e83b62a0de7d4109127cadb5dc87e4a23ba3b1877ce75ebfd9cfe9041751aa0aba0913f40f256f32d4a2d15778ebcb32b924908263541fa5b627fe1e9f86dd9b19543a89ab01af4b4bca1660b510582cfcc4a47d7230175411fa5736902c2a66823d55c1e6913afbfd488a7ba392221c3bfd67c8c2a819a662fcf485f09365f86782feecc72022d79354ba377c4828c282446f71c008747341b92fe35417097095c9793664b90efee6e821bdb5cb5c41c16b2206f7f273073d0c2263afb1f8a0f03379dfb80d426b3203f17b048b51f786aa22b2a06cec545b8"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x423}}, {0x89, &(0x7f0000000b00)=@string={0x89, 0x3, "006ecc6cbbb4b77649a03553a44d1c14823b9cdb3b943868080bae6d8b332219cfe7899587f5a10d3aa4ff65a8983992c0ae40aa8b84a90470e757da5d07bed41b6d5760c04d0c8ae0f787658b0a8d8d51d738b7d51e1620c2aea388de62a3fabf0e72bf4274c587fde9b10f5d4469bdcf3fabdf3272832982ebd4e562636a070c90ef71c86054"}}, {0xfe, &(0x7f0000000bc0)=@string={0xfe, 0x3, "f064ecdec59f992d9ffb2bcac9719ed96025dfe046bcd82072675dcc9e3792e0df5149c45f21c79d6f4f099894f92bac3e6ec8ac7efac12839c87acca7cbd2a8a5348d0ccc66ea734efecaf13c6420e1619fc2495efe4104cc3d1ac2c6bfec7a5de382b71dbe4ba6a0373f7b70766c42740d7bc72ab4f2d2a5b0f12de36ea3cee673d5b647d97c87c86908b34e528ba43c8888c614a6a51f97793fabc8abb72d7fc2a1af8a5030fd8fbcd2d2dc7861d5794ffe063ecd54037789dbcf09c5c37e76c2270d009c3c14867b62de5e5db6fa825737fa0a08811b0297e506d2cec3da0f89166dd1241cb0cab4e20ad105396c0c1de1fb93cab713bb71593c"}}, {0xc6, &(0x7f0000000cc0)=@string={0xc6, 0x3, "1e091d9e827fda06da6e645fe519d47d199c057e1e0591ef21cd4559df40005b8d8cb728e96df1191bcdcadcae8830ffba90e68c6df9d2e191230baafea04b312e0d3a12f3561dc39d7be7204010ce944e0d576268ebd0fe230ed35299f69d4303245e98c5ea28c39e326dea0a26c923d9e35cb2a6e9314ed31a6d8a1fe73aefce9d31c2be47b47a19d9cb832b18af1365f0d06c49ad250c76b6d78acf2aae4169599e3ae68325cc4f0b4a02d203a6d6b78ec6d84d86d0052343dd12ea8dc116f4f1b9a0"}}, {0x6f, &(0x7f0000000dc0)=@string={0x6f, 0x3, "c9bd41860913a959c233e6770d6e68a8d03b33d928fe92099fcf734c7d45a45d5696d04d0edd7d306542ac2f3cb8aeb238bf55ef4476059f14a45773bb420a629f401a5dac46de25c626c8f1baf0d63bc7287aef3fdda13a08242993cff53e49c53fe3661b8ee4883aef2fb2e8"}}]}) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f40)={0x14, 0xfffffffffffffffd, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000f80)={0x0, 0x9, 0x63, "b11303a7352dea7531939178421f84458f8bfed0be7fa38abff93bec1d0101186ffa4fd89cc438cffd68e205a5549e0b9b2afbff0c219d07a97423a8bbd46d86a09ddcb302844b93785e9749b0bc806fee4293a6734ffdc15547f2fc9cd33321740a40"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1}, &(0x7f0000001080)={0x20, 0x80, 0x1c, {0x40, 0x47, 0xa, 0x4ba, 0x200, 0xd4d, 0xffc0, 0x8, 0xf, 0x2, 0x4ba, 0x941}}, &(0x7f00000010c0)={0x20, 0x85, 0x4, 0x64f}, &(0x7f0000001100)={0x20, 0x83, 0x2}, &(0x7f0000001140)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000001180)={0x20, 0x89, 0x2}}) (async, rerun: 32) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x106, &(0x7f00000012c0)=@generic={0x5, 0x0, 0xfe, "99645714", "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"}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001540)={0x14, &(0x7f0000001400)={0x0, 0x21, 0xd3, {0xd3, 0x23, "755fa03dcaec4c9b9f1ab903a2eaec9834514878de9c92798e2ac88591890061dcb77920a6c446c14ece4dbad3f3e6f3f613b6fb47b245ce91fac034ff0cc25957631b6bdfb49b17001054ffdbc8c24d69ce0a3ae933890edd8b4b4ebc5667a0132c945a7a5779d98a9cf239e51806f3fc1621248475753e34567a90d1c159536984dc3fad7129c83ba5351d06eef79af7e1e8fa138d12fef907397d39d666fdeaa1ac90fb50adb8e9d538c92e9aa4910afa1e14325ad219a257fed19c76d8eac2af3c3f99a5d48f5fe1af298c09013a8f"}}, &(0x7f0000001500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001800)={0x44, &(0x7f0000001580)={0x40, 0xb, 0xaf, "2d27b0ad866b2ee37aad919f878c7fbfde7c84fe1a49f11b9fae03d628f6ff0770c325ecfcee968426dca12d964af4c617fb61dbb061ec5d12f08708edcb2fe1f1f5eb7b4f512a916a9c206ae7b92dda11a3bd62bfd7daa4afb4601eaabbaaf78f9d5c514f609fc64a15ef39b9c36d2082b97ad05b729c2defab3bc184fa9dc24d6d67be67f0c188abb2398a0559dfe958da506c3c12571c0d3614bcfd28f85ebe1a650bfad119c712006eb129a686"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x80, 0x1c, {0xfff, 0x1, 0x80000001, 0xe, 0xd2, 0x7, 0x3, 0x2, 0xb2aa, 0xbb2e, 0x2, 0xfff8}}, &(0x7f0000001700)={0x20, 0x85, 0x4, 0x6b}, &(0x7f0000001740)={0x20, 0x83, 0x2}, &(0x7f0000001780)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000017c0)={0x20, 0x89, 0x2}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1334, &(0x7f0000001880)={[{0x1000, 0x4e00, "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"}, {0x68, 0x4e00, "ffa42cb63ad0988ac4991048c9d0ae863562432416fc542a219b5264d62b40124f8e59269c70864d6f8f718d186c26c0f5e1fc23290d7c1e00fe0fc1f79088fec2ce4626ce1f0a0ff536eb8f945db194fa94dc9332cee923ade6ce06dbc5f638730dfc90e90efe52"}, {0xd1, 0x4e00, "7cc8e4c7de11d85f3cd1d62dbf7ecbb80c1a484f6447b992a73f2c8772e1e4ad4631315d729fb5b15f28d232a776dbf8f1a4d373ad3476a6c41b224c76bb5677c0296f5ccb7988f53e5b12584adbc5f2588dae4635f0e9798503ac09ca2987e3b8a7d54006a3d8f7d519a88b4300e052304a2f46ad7b8b507522cc94928fa0482f97266deb46d798ec7c843c93551d6c1989e9827547b715a8ebb71eff0ea5a129704d4a8b066ddd327bc6be53af45697002c9c1b42bf34b49f52d0ef3cb8b89d51d8aed8da2b897b6b8674591e79cda4f"}, {0x78, 0x4e00, "db4add069de8b9e643b20f76365fd5158271efdb2739a05109b59835fb0dcdba948bfd2c545dde6f1c1385d144a30bf301bb34d4823fe4be2758ee29061cbe073f7f022181acb9b4f8e5289726c12719fef86b7c450d47b7fdbcaa9e6317b6cbad6beba60f9ea033f4b4c9d88d7dd5992921d60f3b800e7c"}, {0xd2, 0x4e00, "700e465408b98048337a2f8773adf97d66a83e5247d52ddc4b325e8a7e2ef68b23ff6f2bda6801cc8006d8cfb1de64ca66faac4af0a2e73acba64048855a72e9f2259d031ea33dd99a2176a04b75b1befc03e596af85727ddb0130e2a2eb6c859f18af464529473bc67d15550376fb971553a7ca21d00cc751c41ccd071cbc399f8d1085d64d11f2e091d65650b41aa11d38d4f54053ed572c22e3974baf2c8b87204ce804828deb709307dd7370e9947a324543d79e681bc060707973dbc446352024a87a3733130bc32da8db544575c77e"}, {0x93, 0x4e00, "352a2d0074e41da4d5c73017e627a6e7b9b8a2fdba39c36bdb66c10cb2e18af2ac137d41667f82a3d16f1d1762afa694599b8f6195e40ccb6a1c7b05ae418b0e38d098922092b6005ea06c77481fb4599a963a7595ded99eb705a0d86fd045a15d38daa181326600a1e486daa65eec501d64501cb1716a5b6bd2d12d406ae6c7727a6eb661905fd1b2a4c08d84ee5c7244f5bb"}]}) (async, rerun: 64) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002bc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0xbc}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x6, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x7, 0xb, 0x40, 0x7}, 0xf, &(0x7f0000002c40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x59, 0x2, 0x805}]}, 0x6, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x436}}, {0x44, &(0x7f0000002d00)=@string={0x44, 0x3, "55b4c24b76d3e8fb6c0ba3c64791d00633959950b333dcc2e94785272becf279d81ea4413c86beee80f2c3a1319018d27fac212735c341a34872d20694c5df046285"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x42d}}, {0xaf, &(0x7f0000002dc0)=@string={0xaf, 0x3, "b1f0eb8c040d635920f725b17494e1a2492e93eabf990d86a27178ebdb4ae91dd3784119c9c78c4b4473a32001e35141a43540236cbabaef4e54e06f8fe67c8ad4116ea3c8faa0cad9ec80aec4181960a3582adab18262bb6e1de244cd8e455ba567a2f9ca9a2ac20364e5970fc9f968a02deaa91886b8a40060d9058cff8b279a25dfbfe6d4a679968d87f1c6f5165b5fdbde34503dd733b7c20d50cee9ba6e628763bfff45cf073ce8c84993"}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$hid(r2, &(0x7f0000003040)={0x24, &(0x7f0000002f40)={0x40, 0x11, 0xd, {0xd, 0x30, "c78717c1752c00c6940fe9"}}, &(0x7f0000002f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000002fc0)={0x0, 0x22, 0x1a, {[@local=@item_4={0x3, 0x2, 0x7, "1b0b37b7"}, @global=@item_012={0x2, 0x1, 0x8, "e434"}, @main=@item_4={0x3, 0x0, 0x8, "1ddb3a82"}, @local=@item_012={0x2, 0x2, 0x9, "a6a9"}, @main=@item_012={0x1, 0x0, 0x8, "ec"}, @local=@item_012={0x2, 0x2, 0x8, "d8e4"}, @global=@item_4={0x3, 0x1, 0x1, "c60c573f"}]}}, &(0x7f0000003000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x25, 0x1, {0x22, 0x7c9}}}}, &(0x7f00000031c0)={0x2c, &(0x7f0000003080)={0x40, 0x16, 0x35, "679d92649ca257b49c42417072a82c96a0b2459269754e31ae9656da89f011c79c251ee5f4d456e29a808db64476d3922e78e2f8ba"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000003140)={0x20, 0x1, 0x19, "64199940527a31cefe5f47aa6a6c8543dad10c660676b94e83"}, &(0x7f0000003180)={0x20, 0x3, 0x1, 0x9}}) (async) r3 = syz_open_dev$usbmon(&(0x7f0000003200), 0x30, 0x8080) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000003280)={&(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7}) (async) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000032c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x3, 0xf, {0x9, 0x21, 0x7ff, 0x80, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x8, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x4, 0x77}}]}}}]}}]}}, &(0x7f0000003500)={0xa, &(0x7f0000003300)={0xa, 0x6, 0x110, 0x0, 0x27, 0xe, 0x40, 0x10}, 0x24, &(0x7f0000003340)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x2, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7fff, 0x0, 0x2, [0xff3f, 0xf, 0xc00f]}]}, 0x2, [{0xab, &(0x7f0000003380)=@string={0xab, 0x3, "39edab2539008b14e24e89310d4099f873691ec3afb6a4f221f50a0017c541f22f6e11f647a51a517586efe9d2330acd878f2c3e673ee930c25ca60b14078e8b9716d20d427ad44026e6746491a7cf9956d270717de44bfc9203d9bf791862f709a91b97882e3fe2c205d9d6fd8fb9a1f31e7d9bf9f53ab150afe1bf328bb6d36fcbda95f5f3c2988cb390673babae754d513e42b15476ddc2bdec89229a693585e36ebd9adf774da0"}}, {0xb0, &(0x7f0000003440)=@string={0xb0, 0x3, "feee79031c447b7359de3b14afc77bbe31202db87de5036e556cee244f931e0374948b2d0b11a025b49d45d1227db8723096febb85f6eb23d15f72ab97a465b771ddd2d322c59563bc1842ec989a7c856b742676e7647ea8db316dc9ab41fe7f41b8b04f5286eb77b3315a124296349b79c6ddd3457585c9266ff27658a49b3b1cc68ac24f990d0e255c59a61a6f3e6aa87fb2a0b440523bf1821c84991c4e79405aa78f43b9451165962db4fb94"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000003780)={0x24, &(0x7f0000003540)={0x0, 0x1, 0xa9, {0xa9, 0xd, "ac488a39f8b4d8e99010518d32148d0e840212e7c319ffcfd21d0141c5790a99765b458dbb9828696f859923a43bf06da1600b9511d32333e5b11c3dd91cf8b361487cfcf9181a34e7aabd0df127e84dbc7b990b7babf3cb07ce539aec796dc32d0ae004f1cc2eeae9d53ce5cdb75b768d93fd3632bde6348da7824d5bf05d87b860e8013d59ca0b3113154686c63e7b1ea98b8f35c4eba4876bd06ab3add2e03e71da9b2959e8"}}, &(0x7f0000003600)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "8011232e6ecc6c0d5436f9184bdb27412902813830bffda211d2f009b2e1f6cf3feaf794191b916dbc31c86f0d9b2161f527f8bad627e4e12a86f2d9117f534f6498751cc72b94943a69f2459c79797b3e2da11ab94f3e6400a97919ac135a4d5624cfdce09e77f84beefc7e04e185d77c1ce7c1195289a11401803eb802e05ee8d08d122701f25b60c8dba33eb0ab809809cd973d3ab7de068251077ee1431f16999510155951251790a04874ca6cc3e7c72478065d6fb88916a5e805b81e027cacacf87a0079acdf86c221ac8162ef7534f3062402e04f75756f3bab6a6a3f39e412f8f0ede6cb6ffbf4aa827fb323d401723d69"}}, &(0x7f0000003700)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x2b7828385215971b, "80312f6b"}, @local=@item_012={0x1, 0x2, 0x0, "c7"}, @global=@item_012={0x1, 0x1, 0x5, "c3"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0x8, "8299fcf5"}]}}, &(0x7f0000003740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x0, 0x1, {0x22, 0x173}}}}, &(0x7f0000003a00)={0x2c, &(0x7f00000037c0)={0x0, 0x16, 0x40, "ce0b7e49fe906217b7d4787be61a25e0a577f68bbc1172c81be1962383da8573a0899f89b2f1f15feca26a60c69258fd22da5d889f46ba868f40ccf23de2663c"}, &(0x7f0000003840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000038c0)={0x20, 0x1, 0xe9, "a5d9403a6b64a71472292462381b9da8698a7140d62d67d72c374258a0924adaef793059c5579ed874d6a97a184532d189e5770607fae37b86452254bf8e344407f031a645a5062b66a294663098f12398a954ecc7a7445c319874406deadfe3892fdc54408da44abd4e2fb902a42753c67b3f13d65d6cfa9ff3980de1701b24ae17b0126e336672d814a12bc0302c350528e95537de083a1c682e13b630b9dc640827d57e6b1354b220c112fd7b24781ff61cf057ba3b68ce52ebd60997c7252e6f8e437668c90fb49186844086cf1c133d2b819e38b4be93aaf8dade393456ca8f2581806ec99de9"}, &(0x7f00000039c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r4, &(0x7f0000003bc0)={0x24, &(0x7f0000003a40)={0x0, 0xb, 0xaa, {0xaa, 0x31, "bab4e6a2d4b68de374a09d1c46228336859a23838ca70917e0d099de38d76e7e12de9dd4babf35effb04ba593351c79e7ae766e3b309986d23461aeefc20ab2ee252c63d10f8fedfcf1d0e9e7374a0283630e7beddf242aece9293016f84d2a4a6c004746b6f35558c28bb2e3ef8af81f832d8da18a6976d99878e4fa2e6cfc332745ea99b66de39a40c0fa5a2a441d354bf7717ed4d15591bf9829fb4d10e8ba689a23f14c7ef8a"}}, &(0x7f0000003b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000003b40)={0x0, 0x22, 0x10, {[@local=@item_012={0x2, 0x2, 0xa, "f4ed"}, @global=@item_012={0x1, 0x1, 0x2, 'T'}, @main=@item_012={0x2, 0x0, 0xb, "2ee8"}, @global=@item_4={0x3, 0x1, 0x3, "314b8cf8"}, @local=@item_012={0x2, 0x2, 0x9, "f6e8"}]}}, &(0x7f0000003b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6c, 0x1, {0x22, 0x4e5}}}}, &(0x7f0000003d40)={0x2c, &(0x7f0000003c00)={0x0, 0xb, 0x20, "7df080ac616c4670f8159dd16e7a972477a1b9c20dd50f4d1574ec93ac824096"}, &(0x7f0000003c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003cc0)={0x20, 0x1, 0x38, "9cc070c388730162e11afdd6053cb37d2e93d660e69a46f9dab0391d6018ebbbb708fee6e0fe6398bfeb15349b4e61dc6df1e9b42c69fe5f"}, &(0x7f0000003d00)={0x20, 0x3, 0x1}}) r5 = syz_usb_connect$printer(0x8247355e543c8772, 0x36, &(0x7f0000003d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x4f, 0x2, 0x7, 0x1, 0x2, 0xfa, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa5, 0x5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x7, 0xc}}]}}}]}}]}}, &(0x7f0000004100)={0xa, &(0x7f0000003dc0)={0xa, 0x6, 0x250, 0x60, 0x3, 0x5, 0x8, 0x9}, 0xaf, &(0x7f0000003e00)={0x5, 0xf, 0xaf, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "2e8bbf96ac4db4cc7a4231df448d44d8"}, @generic={0x96, 0x10, 0x0, "5b5e8f85fe41b7459a174522059f079c690c067101beb49c99ed75d26e0fd0069f7e1c357d4c1b9a80e8ce913d1d9101b60701d98b346b7b22e62466f42d146be73f15456067c60b06d21a9c1f3114b4292b8fde7ec3ea9eeed6c95df9cbeb334615b8f303c1fac8cf158c820d1dcb6378db72a7df732f5e82bae1c58c3490e95a0748eafc885323d0a8995b33b983d1482c25"}]}, 0x6, [{0xaf, &(0x7f0000003ec0)=@string={0xaf, 0x3, "2917f57823cb0667c317bf6c96cfd0f36fb9de0b9db66a8324564d92ebc0b6d6a2b2247129587d52b2f6c40e45c519eb18f6362a85195c239a2fef1290e1893f7f01ecf45c96b77b110911048ed85fc4f41b6c46b63331aa21b5087d5221695ce99c9062d039bd02ae87fdc6cf292a529b26472b50f1ca91c967ce1c644e9cfdfc5607bac6aaf95c8e5dd2fa154c8beeaf4f3ba07a969945ee1c6f9de2dfb9610a78fd6c62ac9729252ea9bb9c"}}, {0x7c, &(0x7f0000003f80)=@string={0x7c, 0x3, "375b11f9a0b0550212764b3ea8436189ea625cec95ed03f6c5ecffa20737ec00cff1c734ff079fb075a98f54e95b40c1aac5c59f6e36b61e2fe3708dc07192f641a5f7f92782f1c6c7f9329e28f25182ad91dc74e327562cd5e44a627c59dcc07e7853410ff72e23966f52850cd9a86ff8c91c06e220a7825795"}}, {0x4, &(0x7f0000004000)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000004080)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000040c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_ep_write(r5, 0x26, 0xda, &(0x7f0000004180)="c71b518d4a613ccc7f9897d01da20ce9700799dae90c2e48e2551060f5df684c03940cb08fc429691512ecbf373932a0e074ffbcd62db5e7abac2a9235c533f5b17e1cdf4a1a4059eb79a57f097cfd0fc1f2d1b91a51a7ffaa89f3ad9d4910df5e5c3904bd020efa4bf59f70da9be0264d53b436557693810bb49198748cf6eede79cf0d67fbf332560ffd37edbd56a3d0da75a15fd70405a71ecdaa26db6f83dc29903b03e2316fedbe1f096fa4f93b93791ba799240e926a30db0c59996533f9249d4ab00d89985081bcb4630d4c1a48b389db721f2c423e44") r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000004280)={0x2, 0x4e21, @private=0xa010101}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004380)={'syztnl1\x00', &(0x7f0000004300)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x9, 0xffff0001, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x64, 0x0, 0x4, 0x0, 0x0, @multicast2, @empty, {[@rr={0x7, 0x17, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast1, @loopback, @private=0xa010102]}, @end]}}}}}) sendmsg$nl_route(r7, &(0x7f0000004440)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)=@bridge_dellink={0x38, 0x11, 0x20, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x1000, 0x8}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x58b0f}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7ea99}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) r9 = syz_usb_connect(0x2, 0x74b, &(0x7f0000004480)={{0x12, 0x1, 0x200, 0x5a, 0x37, 0x52, 0x8, 0x413, 0x2101, 0x803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x739, 0x2, 0x9, 0xe4, 0x10, 0xd6, [{{0x9, 0x4, 0x89, 0x1, 0xe, 0xd9, 0x26, 0x4, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0x80}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x3, 0x5f}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x3, "ae8fa1"}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x1, "c63fb4"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x7, "239e"}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x6, 0x3, "239592"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a6a7c130700c"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x1, 0x6}, [@obex={0x5, 0x24, 0x15, 0x4}, @mdlm_detail={0x59, 0x24, 0x13, 0x1, "e7702bb39ce6f32dc659e5ffacaac550358c4277852ffcc7b8012aa334bce01826151bb442f1bb408cf1edf42a78519c8b4e5c79ad0e14138fb905281576ceeac05e14464dde4ce9278e87a44db55e4783d1d50885"}, @mbim={0xc, 0x24, 0x1b, 0xfff7, 0x40, 0xf, 0x5, 0xd0cf, 0x4}, @acm={0x4, 0x24, 0x2, 0x9}, @dmm={0x7, 0x24, 0x14, 0x101}, @dmm={0x7, 0x24, 0x14, 0x1000, 0xe}]}], [{{0x9, 0x5, 0xb, 0x2, 0x8, 0x9, 0xff, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x33, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x18, 0x5, 0x8, [@generic={0x5c, 0x21, "ab77d1d6d4551141ce500d4de7983b487fea16177b655870ea650aaeee1a622edcbfbd5398439bcc463cb8f17161988871e55906539ad412dedd37dcf0c116c5ffe97b39057e839c96c2f3603329a5d6fb995f6b91772aea1adb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0xff, 0x5, [@generic={0x95, 0xd, "0ce5907e99ec30e1eba4cf39ca6ebccc214ec53baa04f500c80d8ed42dc9dec25c2be80fae060322058c4e78c4374b11c68ad4eaa52df5c4d8bed78dd329c8011e7bf5fa12ea9c49d88b84b35af4527e4d049cb0d872e362f155909e5dda89756ab3ed89a8b783c76e8602724f2ec25c1e1e05df6d6a1fb00e794945b794c71c469735e1f67bf6c6e84af05417d933f2cd928c"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x3, 0x1, 0xb7}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x3, 0x8c}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xff, 0x9, 0x5, [@generic={0xe2, 0x22, "b8fdde05efafb45b5618559bde6784c2a811b9550f714f331788d4b3244e86136a1398e6ccb3f34235f16b280257ac8ab1cdec5040e399fb59627ca4f0bc38e6572910bfa92bb23c362f25507be7086314381c33bbcfd383bd5d68e694b5d1e0c5951c75bd13872bcdc9f93719ef0a1c482a9080ee88c6d71efd67a5b877db7bc2962ece495fb29e14323bd9509b972d82210ae7c34488ff553733ad429d9bb27a3847f42db3c4c055daf7b1082f98ab738d4391afbe67962ad2e297367b3b1bd23813b5fe2422c667363ef6a9df5ad26f89c415b0c8cfd8b7fac33630f0073f"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x0, 0xc, 0x9, [@generic={0xf7, 0x24, "b2998a41580fc004b9a333ae9a19ad3aefbc9aecd4b141ccc0522991e2dc2812db939df95232d9a8241693a23e4062c48e0f1f2b45a0712c245c38d92a91239c51aa24d04307aa99b595f7bee4fd3a88ab492e3230420fecc5c093e7c7931185391cd81f6e35dac9f7a6277064f2f7ff327e3b185672b1bae15d901fbb79bf424ba6e5ddfe6bd1c5688555c4084ec29666a649d4f529b6d01784e11ed738e41ab6121b8b1f8ffed31b36990fd6d2e4cc1752a5203cf04770516b85554b825f9d3457ff59560f78781fa6a9561024f615b1c6f46b2cd711202539ad1ab2207cbf96cd5b9392658c7cd12a7236b3beab9d2d1f07fef7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x4, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfffc}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0xc2, 0x8a}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x3, 0x9, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}, @generic={0xf6, 0x22, "f40524b3a4fbfc2f2c4b8ff853421f6e19730a367a6eb3afe5cc71e7630c75fcc1fcc8ef549b684085df6d56c74fda27a70527acb852bcce2499e3c148952393c73fa8291784a4ab7da8ec5f62ee75e1f5a91cf2051b80960162a8bdafe8438e2fed334d10aa5e27d11ec223b053f99621d5a47cdbd587d7dfa11fba8bd498b238defc8dd2c8bc782680d2cf5750bfdc230e22b62e3fcbec177a11d8d9f35c0edd3e1933bc9c84ee1a7b721abcfb6c7696a9743163ce77e80e4a24dca7d7f373f8c999e0c99a194a82c92f7e1671668693ccca7f3fe3ad4f7b6b0f4dba12a0f8cdf5ac99649f4439ef2fa80c4d0017434f043c10"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}]}}, {{0x9, 0x4, 0x3, 0xa8, 0x9, 0x2a, 0xae, 0x1a, 0x4, [@hid_hid={0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x388}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "99d36320"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0xcda9e51978b0db2e}}], [{{0x9, 0x5, 0xb, 0x8, 0x200, 0xef, 0x9}}, {{0x9, 0x5, 0xc, 0x1c, 0x400, 0x6, 0xfa, 0x8}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x5, 0xfd, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}, @generic={0x53, 0xe, "60b29b6df24d565119376b8800b3c7c4d7d971eaabab68f98eabd7be5ddadb80a4f1c711037d51cf639a03274c5e08f81f276a0674abe0cf3e382abcdff655d29556a268987be447eb038e914416c320c0"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xa4, 0xc1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xff, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xea, 0x7f}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x6, 0x4, [@generic={0xe4, 0x19, "793b2365eb8edc07a8470dccdea0aea84aadf6c368cd20e2a7520f5ace89bcde3f1cae71fc368a876ec0700d14a4e11eaa27f928a55159f8f6d045a1659e4bb72674bc493f0b1294cdadcfe6d50189ba1929883803d4b981e0bb2d8950d82389d4a2ee37359bdc58c824f095ec1bd1e04953d443b68e12a3438a2c6e364ce7442649605b1a1d2962f72c278c692be08ae41864d2832abd01e512cfd058a14857f254c6069e698064faa847d6acd2fe129659960c644dcd8acfc48c1b0ce7931cc501d40f478c045e1d8875f00c6bee9ef57d835022e6d76cde8e26e388fe16118279"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xc, 0x10, 0x5ff, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}, @generic={0xe, 0xfca3baba34aeecba, "fa6ab600ef0e3dc78d53c56e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1, 0x5}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000004c80)={0xa, &(0x7f0000004c00)={0xa, 0x6, 0x300, 0xfd, 0xf, 0x7, 0x8}, 0x10, &(0x7f0000004c40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd2, 0x6, 0x2e, 0x3, 0x8}]}}) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = accept4$unix(0xffffffffffffffff, &(0x7f0000004cc0)=@abs, &(0x7f0000004d40)=0x6e, 0x100800) sendmsg$kcm(r10, &(0x7f0000005200)={&(0x7f0000004d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x4, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x2c, @private0, 0x5}}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004e00)="ef832eb4de3314c1daf4106800dcea136257fb27b28fe65a1138b3c56f1f811b8927dccedf0e1951650386c2f071ba588cb1a94cc7ba63e4f4311942b2fb00d75e2afbeb1f2852cbe193c7aca136d0ff0e98318f52de7e7690accf36dcef2c5d35c0ee5383ad66c3184b91681b143b60f60b7f240f3ea1e01e9e55e19bfd1fb8865fca2038d78166361e6068", 0x8c}, {&(0x7f0000004ec0)="a67030c5913e73ba50dcda2af2721ccaab015d2fce816595747472654f4b41b86d6b048cb04908af0efe571990b3fbabc1caab7052ba7c0d2672df29c0bdba28ce1865aba0632e45957e483ff888220b87da476c66d131bde2dc93816b6d8a67420f0644a65deed036777cf43228a0550e10b1c165feb9fe9205d395e79878586e190c776d9e0594278df9272747646c251de27c0353f40843dc3b8386cf4bc96b1a9c00a417db3947a904924d02aa6c1fc292ab1402c8aa7122bcbf6d08201857fb9bcc73ac3c5146bb34e49c4ae40f5f", 0xd1}, {&(0x7f0000004fc0)="2e8056de30b01af889cd699c4c91bc93308e3465c1002d463fbba5800a62f0c3dfb96a75f3ba44a2dfe53cd0c245b00ee55e60d8f583bac66e9358af72e12f3d03a915b9b0fa9ffad1e0c53ff7cca811f75f43f426ebb3054187d67e420cd4e640005103c48e3d04de7ad1a5b2c4c6f4b3e705e14b3d87b5e0dbd518b5501f77b1246723db9a285b01a816fa07bf7ca0", 0x90}, {&(0x7f0000005080)="c5a663137af0a0b03869e9ae807dfecaa4d05db369ea3f80e9", 0x19}, {&(0x7f00000050c0)="2468c7522ecb256cfa44ab19c4324af5e38aa64cf0c0a283ac3aec423a5474fb3ebeb4cae2fdcfca25becb2a8362d232d20beb4f3ca4ba62b0fb95f1a935822a267bf105febcef01c248e521ad07db2a50aaa7c0fd2c3acc9de57834f772b751e643bd66b0f06863e068a84f8525746e8a723fa885cbc486ef36b075fd0dbb0b3c8a9a1d4f6a25d48755dae5142eec409b2d0db02cba894a6667a46458be0a12be90e2278b495cc9d6d6c00d2274b8bbfc94a5c5070d727d1c21", 0xba}], 0x5}, 0x8000) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000005240)=@ready={0x0, 0x0, 0x8, "6c176a9e", {0x1, 0x304, 0xa, 0x3}}) (async, rerun: 64) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (rerun: 64) ioctl$SIOCAX25OPTRT(r12, 0x89e7, &(0x7f0000005280)={@default, @bcast, 0x2, 0x20}) r13 = fspick(0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r13, 0x3, &(0x7f0000005300)='\x00', &(0x7f0000005340)='./file0\x00', r7) 6.135774775s ago: executing program 4 (id=37): socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x749e, 0x0, &(0x7f0000000100), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0x79af, 0x10081, 0x8000, 0x3d0}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd4(r5, 0x0, 0x0, 0x800) socket$pppoe(0x18, 0x1, 0x0) getresgid(&(0x7f0000000480), &(0x7f0000002500), &(0x7f0000002540)) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r10, 0xc008551b, 0x0) 5.271222838s ago: executing program 4 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x34}], 0x30, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x100000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.921167793s ago: executing program 1 (id=39): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffede, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42cc82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x752, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200}], 0xbc) recvfrom$unix(r2, &(0x7f0000000400)=""/194, 0xc2, 0x40000002, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @broadcast}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4.912465152s ago: executing program 2 (id=40): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/38, 0x26}], 0x1, 0x0, 0x0, 0xeffd}, 0x9e9f}], 0x1, 0x0, 0x0) 4.779191332s ago: executing program 3 (id=41): syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r0 = gettid() tkill(r0, 0x7) prlimit64(r0, 0xe, &(0x7f0000000100)={0x4}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) socket$isdn(0x22, 0x3, 0x26) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) (async) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file1', [{0x20, 'afs\x00'}, {}, {0x20, '.\''}], 0xa, "f20c91010357bb97ef6c8fb87afeec5b772d562274279f1d2c4a1766f5d9ab490d356cc8b6cc6285377071d86a15689798841c7a670fba7d1f8b3ba2c76209c52e1564a78b12ce853fff19923226bbec31e4a0ca8cd4b39cbd62b49d39535bc20f313824c88da7ed311fb763046afad3a1e84dfa84c29f31ff0a9fc5606d2960c29efc1210ae6442fb2427d2250571162d74962a4cfe0282f732aa8aaa2d57bc69889d96d4322a87c61a53a545d06608b30ed4d06a9d5093c4c15ea1dab942f5f371b9cc1b1c52c4a64ca1b2837e25be14e7494397aaadb237d6"}, 0xee) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000000)='afs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(r3, 0x0, 0x0) (rerun: 64) fchdir(r4) mkdir(0x0, 0x0) chdir(0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) 4.721566061s ago: executing program 2 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0x0, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.621246597s ago: executing program 4 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r8}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.619282804s ago: executing program 0 (id=44): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x100d, 0x75}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="040100001a000100000000000000000020010000000000000000000000f034800dffb352250c447fa787ef000001ac1e00010000000000000000000000000000000000000000000000000000000056e5b3257120b3b8c065834ccaf8a2ba1e3179917a3a4f000b239fc67d9aab4b017ce226824301e37411449ca0be43ea0bfac38f8060aae5aae5e7d6eec94004d02559e2e1ed984aac8f49b2028b82868937d786c2f3c4cce0d8129dd0dbec761d3519a6fc00"/192, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r6], 0x104}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000bc0)=ANY=[], 0x23d) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 3.618819609s ago: executing program 3 (id=45): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x6f, 0x400) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {0x7}, 0x60, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="1ed4e9242f930fcc66050a096f0f4a76926a1011a1796dde4774915b9b5dfe5cf7f7a905fa52b3ce9af3bb3323a422b4694b04797c4ee797024e2042190bbc46cd83e4b7009070c53ca5c43ad0b5252eb0354a759424850ad2d6fbf1fd04eed3a2d6708f8dd662e1842a126089848a4d676eda42ddb3801ac84c4e89cf0aac016f64d893229d7349aa14ef9d15c0f8e84d961cecbf9bd5c735b28a6567b9162f0948a01069f0ce8c14f2e9db584626efa14d6ee56f1b38e35071e90d83448dd185411230e5f945bdb0382b20b52080a794ab3b315a7efbc98a662a1ee93778d0e29794498f32b19fd1ce6883b9e52b7e00d7801c30a435031eea98bac5fd550ca9a5c611ed0a70faf6dcfcd2f76d7db45790f13cf16aa7083f2e1078ec5173a598c9dc7d96c9ba0d9120977830e3f57941ec5489c4b4d50fba9e7ccb75da5e444cfee9ee467fbac5dfab4494136a2d1b95be14ef3950cd819690385d9f3290536c952ffa5d33ea2772bd939904c8172d48c929", 0x173, 0x0, &(0x7f0000000280)={0x2, 0x11a, {0x1, 0xc, 0x1c, "12eabf517d9e90565a2ea91a15ed0cd1acd2991ad63b7bd21c987bde", 0xf1, "d95646b2231a261b0b4aab45ba10673def664e599e3f906de840451246d7670388eb89f162bca08afd11dc7e3402b080767c051d7ac767d6fe8652c491d30deb52f19be102401d68c73b3e356af55d3ede87f6a2a745a2647a26cb5ec94ef62fa1897260f368978ec03b78db1ca039cfc9120d33d5d06f81c927f01e99f7afe343cd77941d25286ee822b27653fdf3d90b48f437180d85d1f45e96dc62271d907ee6cb9a1e1daebd77613266470948651d425dd2768c7347570e57bb5f845d00a7e64fdd71caf64bf07fe34382491d3486a19aa86ce9a823bd7ca6d173ca11329c04182ff603240f25f2cf24c03aa05ea9"}, 0x50, "368ee105e6ea95d0d77c91b2173b2c14c5dd5560a4be60891c29eba461969e9016684848d75155c03f6a3f1b3914ea574b5e8d12334358d0d2e8a8b9ec2e9b4c1375ed0907f9d854b932b41c78cdc506"}, 0x176}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1364, &(0x7f0000000500)={[{0xab, 0x4e00, "ac1b36354e98db0b228a65caa7195838dc2f21e8f755838a40b31f917862a1f5c2dc58d618deb4601b6eed2cb49eccbc1924540df54ec77d403566de6f90dd676889a8250e13c6ee5fe66a847f499bae95f77e620b7d0c6650b6fd22cfcb981cec1d2045c5d07e54dda4b9464bef7e4ddce2bbd5ad29525c62971986f9e08f40ed9af93d9a2ed8a352337c4912ec7c65fc797b93d996495afc25ebc610ec2552e4d3831657375691c27fc0"}, {0x1000, 0x4e00, "0a71f663d34fc36df66d3af2cffb2f48f89cb46c80501d7354668ef6a8845c1475ba5bfc6dc657a4ac5d1e0841860b64f28b995e5306fed447a2284a79989feffe6244a95770945387f6f60e46f4b1cbc81634b5a929e20e387cadf93ec28b9eec2b5cecf22d7c0db69c64f7ab7bc78647a3554ab8ad55eaa7d5fa0645d09a59e0399f7b15a0eaa926c90751b74fef6dd20694f85859be03538ca50437d80e2311f4578d34e7727405436778d1475dec17d85cea0ed39b02454cd6785eead2f33f4c6244dd3cb93c74b3c2215438d66c735d676f8e590fd3a1035da556cf31937fb1839f83765c64b7bf56891dce9b66c0aaf4c72ee0c39c21fc679d5af7615283347d603c8fe29ab537fe78125d32f1265662754616d10c8a2af4db8c776719f01c5a311251c4e8858602920fd77b603885e04dcb928791450b063f597714ed6ad8762e2f2b838f865ede555e3f75f54fa221a532739980f8e88c959e5c5dfa13a0678a75e994212a729198518a2118b01f6fb5bcc41524c6a2caff43bef1b4904f9c2d9f72df0a0720a2c00d1af8c222b77477948a03efc7dec949df69f1ea963d057920552bfdc0e67d0ef29534cc97bca173c369360a4f1065f2dd9bee764450b48b0cf6caf085cf8c8998ef623594340f3e9db35598f1d5cf300e81ec753930768bc49c4e5d9a1e43920c343ec271e6190d47a9856f2ba61e3cf4a24ee5026f3feb4690eb40a9874c1e9b7dc72deba0209b808154b2190914a23158a8226f733245311bc4fa5ee78d8bf5137147a83109f52b50ecf2c028d9360f59ea67dc9e815ac95f6b1edba0072c2a1f870113bcbd4ab24582bae518215d16866f7f674606f4f4f6e190ed33db5c90cda55697c80ce8da935ce888b869391cae9e97d30c1cdd7c1469c282e5ab0b854e23e3402aaef0349d4626ac306a1b58ac09f6246761cce729de8ae5beec0f3d9134ba00caf3aea30264637a6de0bbd17d3421f8f4a994a04077eda6b307116ea522361a9a9a6d3862e171c580d6d2593249426f34b024de875d7b61f8268780feefbf7cce28cee5829fa1ea40237a6b1a584fb7c9734ef4b91d8bb3931fef84518e65bd5e5a4dbee192308c7f00aa086e7006794de5fdd83abec966db2a69db07c51b7fd7e3c19e40ee65fdbb8ce35a26a7f0f92cd18c6b87b4a4b116b2f704aac0ab11d066b03a8cfb8d1a433e61248c710b35901df9d994e037f2e49033ba487896d6cabb4c0bc6026bbbe10e67d3f8e79572f1f91f3a9e7be16f8a4a7910970ed71cb35ae87004a5afcd892504839a3c8dbcb658dd1bb82ccd858a85c95bcea25999460c934080aad67372538a6c9a8b485a6854699737248ed60b063246f296e44167aa6659b6653e8f71b34bcf5f59b286b7c739df186ce9916840e3ed51f46cfae4ab45aee27624592b4106f071e885fc8147492410806087684f15109fe7ef0c593c37b82bc46c9b1985fd8b73c8d3b572ea664489d218001808989a6aa4053b898b82b02dd2af9e350c39eac87dfe4bf662a75dec9e8984414e981899e918d613391835f1f7e04acf53a699528fc31a50bcac4126cca4146761dadfebb95cac562c9e7a2d47f9410787c18c636be809080fed68d0c16153486d047b443f8fc77be6256f26903c0948c05ad3fbffeb769e0e2347dc228150d4b550230b9b4f4a79000a229e7312e6a6e89b50cb4e099f9f3b0189211097094ecee35811f0231067502efcf420ac47404522e0e58969f15d45277ac278e7243b7d389af3429add34a7fcd7263f191afc849990f74819d45bb0936e8c6c5ce2463a7f97242ce950f030ea4c8974fbce6824209344c0dfe4b5eddc782f186b1fa32af3a2ada9e26e50df22c925fa9899d6eb62cbe4ad143aecad6a090da834a8c4bc8c37da87f9cc74c5482afd8e89c9a8bcb9b370e8a0e24a612dd2537caa736abfd8f727b84d22759e7b8ed457582314126a484ff233a9915304d839f7add56c7062c9517eeabfedcaad2d5635bf1cdf2cc82b223539bc980852ac24ca4253bc3fc50494a610bcdd4e48af43693dc58e36d9dc9516d0df6873d99f03d665f676daa3e4c86124d45beb46c78c8dcb7918b6a1db40a762140a868acd78d58f3792b955baefbda61d4b46b52b1f724571494000d3d681fe503612c3b403f3c4a39fc6df673250e160e0eff1131963dfce35d1a61a236c8651a459c82170184a07d49a6a13292902478f1b4692dd6da8dcd3eefa53fc603099368abf3b350f8c00dabad8b4c050a7f8e6315c4c8032025fe9cbadfd205f847b13bdea58aa5d16f119becc599a60f5fa1e811a5996bf18c4f8674a4bc0fb6ebf0cdbe20461ec57712cadacd5ed542dbc34130431abe896e3e1a55b2b4750c9e12294279acce0ba006b784461143b0b4cf5b13e44a3041512a762d8189457c161798a8f6f7ce87ea5276915c596f1c3260c06ee07e6fc176c7d3866064fb16b2ce348531688ede014e71c31e61bd06edefb2ff6b05eb5dfd7f7ec8d51b9db34442b6e8e914da1c21a2699630b6e25cc78514135612716d96b8c3b16aab53cf0819be2791224b16c2d9c1829b80b467deda1d356bc411d5f8b4cf67b509d931a5f8cb695090ac592e3590c88ed95963d65413261e57a4f298984734ad0fcda2403a979a0e9b8dc1448996962d12a09af75acfe0a73cca52b7e153a52111a7a45aae7faf9497101dfbceeec0af7f5a369bf9f2fa408fff9862e5c8e789082018f1a6a9f1d12dadf905aa06edc35b3401d3ea66abe252855a963bc252cb54ab51d55ad238391c14e777fd17f5a00d0e1793600f41963c6d50c92b791b265b7c99b547a11df27fe94d283dde002b8853a7058f69176aa4c470ac040af47541b548c07e64edc1a7aa0089b17bdf021f7c9981193741ed1fb8b6651510076f9223f0534eb2be038388d0c50452f20df0cd9104c6ce2a9059ff02a84e43ef46a5f6d5b87742ca1ce92d054f245a2b16b0d43b165a642e1b57b5036db2359df5e6f94e7737705e765d93ff2c84f63db7d21de3a05f29a8db94c97ab49194083863eb05a54ce751f7b8c17ad00197f4d7c3b1cc1d4c62e8dd7b719deb2aae93f0658253d9f4a5f6ada178cf960e8354239e12afa754bc6eb9d45dc3e7a264d6cfd9538bc31fc90c369823f46c322897ec7153faf3bd7c87c1a50d91270e71bca1afc3fa18612e2f97a501e46384064669fbae585d0687f428b0f9477b429380c49084f1b92ec1e2b428b0747753985105c8f27a081b82492801f8fb2affeefd58478b92b119c22e39aba79308dba67c50cebe566113bd932c73550fa8a89ac3670907706f494c0f931f2800412a11525103ace4c56b76adcff8472a84cded2f36a464187dcd434d42f563e6b5c7587644d833b0d39b4ac670f7bb3ab7f04650e91b9115fd6e76badb16ab8c5476243f88eccbb9efc2824326198eca3f9f795cfeb0f557c4e8b5c37989c49fd37be33d7d59d958a7ed2ab45e52940157dd433063f13052da4eeecafa37a5924d8e4881f960645ad692f0604900faebd5bfd749a99415aea9736d111ee1c3095015df113c0be65fe40b5b6ebf873d64da3c7b8f5e9a149fff06f85921d6aa0ef1822066ebf8a258dc2fdab445498346b049b663a5b11ad7c4ea43cb554ce970f832f58f0a666f2f02b06b586aa70c60ce71f6ccc7dd58639e1221b00315b07d4d76b8b64bbaa00cffd850b6b4579fd4045c1e96a4064c6d532a5938457a08c0dbf09cff3eb34df531a51f206cfbbbd90bc5deb80878d886ff86495e49f9c8804f1ae25451b6bca5dccb891704da2953da98657ad58fc27431229caf3c432ecdee89ba800dd2ec0bb22916c11b3e9d22520919e91466a85090283b9111e251c0964e1b0b0271d4e0b1f3f7ba5fb3b25a33e19670e5d46619a7bde4f8191a8bcaed7db4bf0d5b5032fb1c5c3a8c908fae340ea9df86be6fb05489f209102856c3736d909f2d6149bbf4bb65b23d7f9a91b16658e0303f746578953c015c693dff88d8d1a2d4f9bc1e954162157062de108f69ff973ece60778020dff2fd7c9b6fe4c4c860c87625b57a26165a610c6d3bcfd0f78d46c0ac693bc1cb14ef64dc1727acbd245fa6705488e573713a4e7523c0bafde546ca45ff0ef3d348dc048eb4b4a2422f76b6cf39aabd1975c1aef97138d9de595d59271bef28cb1c363cda7a8dfbfab67e826487efa7d05c97836da38bcba8e12471fb69d8f57659c68f2542e9aa8f6ec158177bfbeaeebc88dd2d19b0ecaf0416a387d24f38bec2d10b4016d068112f6db19e55dc2a010b0197d4bb5a56cab36002b3152ba0dfc5c44130532a273c2729601707ad7f4e406ba439aea0b69df4905dc4140ad3766fe9e311e81ff9e84240948a4af868f57502575513af50128b36faa85581f25280f7437c3e265e8b2ba3152e5482db9f9f8a2ae1659c505416fadd0614bc727f38210b0b6ebde037d375e92978891686006e72bb8c50ee0052e57a7e454edcb0d8be13bf6d66b649f85ba5f948af6a4c4dffd8655d36ab7f19fcdf2a6d5bcc6d2c9b821c46e7f1801a03fd6626f44fef8f73c600eec69c829ecccaefc7b248d025d6905449a418cae79462672d1ee815d35572582118b86287d799ef1702353938a6515d6c24a330f0bad349649dd84fc39cfa6f2aaf35d2f6af2035cf8868c94d4e2065b33514e6d8864c1e654e3271eb045163926c3400508dc1c0b73fe9106032bd74cffccbb19066654e8617f29dd613ac3d45d9b66ade26b6ae2208dd511e8f8e124281640f2fe6973d9361de3cdf2176f1b04cd02e11da02d572ee74e4afb7d0fe54c33cff71884498fad02224bcb7cb9cbcc516d06812fa5ea21db517e279ac6234553280e55c91890386b0e2313b9c243ed7565d88c6bc2d79698f6d49ba8b485a11ff0c3780229494836226ce2908cdec17ef7ed6eab06691e8bf54def44fdd388b73c0d2353d1f78bd35ca0a644bc41504920e01b1ea517620f230f1d7e4371cd35ae7e94e96d389d42bbb0ad7afc2964602fc8e49e1ff389d68f475f06764ed16a9fc517913b8256758c560c0bbc3e18eee060b4a71b5e75ab49c387a29945d4ceb92d1a8a54dbc921e95a93d6fd725ac9bcfd843fe378dbec6b56ed163b31dadfad5d89fc51c8a5c19e862a664397ca94c176f22a9ac59343193f12051da1bd778f75781f11a72f22cc54053e18f9f1b51218fcf5c5893de46821eafc9b3bcb6bd69210c9d45570b133a2a39ceb0019477cdc7dff4e70b05d941d974b7da5a9d5271f0ade500a055091ee7749be0e4aa6616071496475106f29a47d934678bdc5fc2f4c01438efb87ebfb341bfcc3e168bd6b64cb3826e457e0e782e23b92adb5e9a59b7ab3300d06d3020da4d316db84264e4c878f42f563148569cf3e6aa87d61d008bb008e3788ce8784c01463b899948b91c68eb7a6e478eabf11505780a49d5aa6db1aec4df7087e1aad24abd15af736a6b87cc4ff1db573bfa8adbfbc8ed9c8aab9d62d565fe9a5269308e625380e184f8c584a4f3255736830c177e918014adbb410efa9ba62ca85283e4364fe7c9752942a84a5c028d080dc8b17c5adcf197f51dd270867c1ca5badd1f8d73219b9fe7bacf5e246c21c9a85c1141759397a45f1d9858d942b863506668172abb745c037357ef2539a8d6c862e0b411a9e79e4bad9117732bbf521375f13c92acc7d5ff1eb646a4c051295fa3e42160a7612347c5c7191f27af4a145252907138d75115d514ac8"}, {0xdb, 0x4e00, "6eabc1297436cc489f5075d0d77817d0f715f5ad00e9a06ad07b0e241f1a2cd5becc82949d1bf5a7b8df63bd198a02841e2f7c53a0a0a184b8784cf27cfc700726fc5d1ef1e17fd98c2014f11906bbcd63eebcd21120ec56be66caac6003e6a748ab9ce1d950c4fe26aa8b0fafc0dc88627e256fda65c979b6f2f612869af27ee96c1e6d13121e2b9722a670f3a68e1bbba67d4ee6e182aa545863cab81474beafe097dfacd7858fa2b5504351b681cced83de1c8ca9d9d02ca4e0b66dc9a7d33d8c53a823f901212f65d1de65a1bea8a0cc84801fc153339a6faa"}, {0x16, 0x4e00, "f5df54a5f1bc732a7f9fbddc4734465c159eeea8af81"}, {0x57, 0x4e00, "8992e6f41283ed0ccf2610123f1feacffe2f3397536167579a5af252b86acf741b982cb9e8b4eae147a2bc4d8a5c6d6ac6e5d0b6d1be9d20a605280ad9c9457606d8600b83188aa1706bea07006b0e00568a4720322b7c"}, {0x83, 0x4e00, "cf7314cacf74f97607ce2513af56e67d1a4036322c277b8e81bc5f796658e3e8d16e2b09c0009973e5508fec3842b59438c64874cf7cf07e02231f910de35f7ea370999690ca3f6d0a54d24f9f6b6f115b02da64543d0b74ba4a550d2f902018fd19e442e87e04e4e69dde2f0e9a93840cf4351d445506a4aa24abe0b5cf60282b7159"}, {0xcb, 0x4e00, "970d22759973c38f558425ca8f287c579c46cc916db3ec4cd14c7eb7a9b053c2b54a5c9858bb58f32929a2d8bb892d719512b1c30d2ce5ec097ba0faac4619a5a05d7ab675f3cf89df59aa34e75fd8e775108fb9111174c1c562140397dd85e96f369592622fa7bc23086cac18be04170b5c807deb9488df891c94eb5f8c4d26941614e3ff587d847545045e3e1ed5f444abc5bea61e9ae487cffe4e12552ce02d101bf951376d9e867210be8f3aad9d5e1b8e1a9d2ff3a952cdb81857f6c4c76f1d9103bb9b6c8489dfd0"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x28c, &(0x7f00000032c0)={[{0x86, 0x4e00, "44885689ddfeb5f7195504ed5098e7dad10998218521d0e086581b57e019132bd891f8cd800f4f93e1df83af00d099dfad972f6d7ef5e9dca9a730a1713d2f886bed616e89811674b75aab078fab0b25859ec042d14acecded31eb98919eeaae36f5af98ece49c4d4f514866a2d27aad6bea2c1aaab2f50ea1798eaa77ad66233ed7303760f0"}, {0xd2, 0x4e00, "934cf4059d14f7ce731605b221ef41ce7db1c3ecac843bdedc299fa1cd3494ff3680b634aada019ed65c120070a27820bf4b26cfc5a3454f2813724572e2dafa391cb32addee154455d1de211c4afe674bad978cf6d173c592d875602fb9de125ac23d1b63e26dc22bd7a04ccd3713fea24aafa0f443f313008b2784d80ee6f30c2e96fff8ca1a56d9193c3ae2e43519ba6dd5bfa5285429437a9233199910a733f5027e46f853b9862d5a37ccf0a43ffb53dc9c25ec28db84ab36dba57488302425faea864c4dcf7f1ce4e913f1e15a6630"}, {0x7e, 0x4e00, "8c557a7de0213b72dc1c3ec4b99d54e2a34fcb63e8ff5eb38bff48903c757290e4ee95b2508b428ded73789de6c5665693fcba1566d86b6da30fe9a15ffff71942c44b833a89072271d3e32182a7a4db644afca054c67825238b694818a97a36e19f2c94d52c4054d8ee403613fd3e4a55185d531268c0e187862e8f7a59"}, {0xe, 0x4e00, "af81826d5970bc6805f3fc367a18"}, {0x8c, 0x4e00, "33cdee579fb381e725670d5280242d59c193ab5b61d0ba23081dd9fd0ecf1b167cf0c5f2a8cd292bb5a7faf6eb1cd801192bde66fe546b48bb82b8fdeb2faea34daa7ec6155b77de845c0897d642bd9f0c5db4641b6bb0940ddf12fd3c8eaac6bd16787bca6fc27b273ae5d1ec5e70d683c4d29157d6a6c1e7c8e9faaf6b1d3916742f4c877942c093adfdc4"}]}) 3.481639789s ago: executing program 1 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000200), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/115, 0x73}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x60) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) signalfd(r4, &(0x7f0000000580)={[0x100000001]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) socket$inet6(0xa, 0x805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.408863909s ago: executing program 2 (id=47): sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xffffffff, 0xfffffffffffffd08) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 2.215676824s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0xc0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xe, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'sit0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000018c0)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0x2f, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d9bea440830447374d52000000010902581e01000000000904"], 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) 2.064669676s ago: executing program 4 (id=49): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x1a000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100), 0x4) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0xf1, 0x1, {0x22, 0xf72}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x93, 0x4, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xe8}}]}}}]}}]}}, 0x0) 1.291416502s ago: executing program 2 (id=50): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1d, 0x1, 0x0, "9611e6d6ffc88885083200000000000500000300000000000000230083df00", 0x39565559}) 817.391065ms ago: executing program 3 (id=51): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) iopl(0x3) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(0x0, 0x14927e, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000400000004000000", @ANYRES32], 0x50) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000540)="fcac43", &(0x7f0000000200)=""/221}, 0x20) 775.099241ms ago: executing program 2 (id=52): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x80000000, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f0000000000)) 639.279456ms ago: executing program 1 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 590.743267ms ago: executing program 2 (id=54): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_cancel(0x0, 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ba00df7edf39170473"], 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r3, &(0x7f0000000180), 0x40000000000007b, 0x4004) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000ffe5000400003a741402000000010000000000000000000000009e1d42ee9be360ee00f6abf24f00010c0002800500010000f400003c0002802c00818001000000fe8000000000000000008000000000aa2d000400fe8000000000000000000000000000aa0c000280050001"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, 0x0, 0x0, 0x4001c00) 0s ago: executing program 1 (id=55): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0x0, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 54.166211][ T30] audit: type=1400 audit(1753464156.301:62): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.169766][ T5814] cgroup: Unknown subsys name 'net' [ 54.189133][ T30] audit: type=1400 audit(1753464156.301:63): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.218760][ T30] audit: type=1400 audit(1753464156.361:64): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.403936][ T5814] cgroup: Unknown subsys name 'cpuset' [ 54.411710][ T5814] cgroup: Unknown subsys name 'rlimit' [ 54.577000][ T30] audit: type=1400 audit(1753464156.711:65): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.613407][ T30] audit: type=1400 audit(1753464156.711:66): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.634131][ T30] audit: type=1400 audit(1753464156.711:67): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.654721][ T30] audit: type=1400 audit(1753464156.711:68): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.675181][ T30] audit: type=1400 audit(1753464156.731:69): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.696694][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.701469][ T30] audit: type=1400 audit(1753464156.731:70): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 54.731949][ T30] audit: type=1400 audit(1753464156.731:71): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.617622][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.765454][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 59.765468][ T30] audit: type=1400 audit(1753464161.901:78): avc: denied { create } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.804347][ T30] audit: type=1400 audit(1753464161.931:79): avc: denied { read write } for pid=5824 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.828163][ T30] audit: type=1400 audit(1753464161.931:80): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.855807][ T30] audit: type=1400 audit(1753464161.931:81): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="socket:[4494]" dev="sockfs" ino=4494 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.916876][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.926100][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.934632][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.949298][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.951471][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.956864][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.972257][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.979654][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.981558][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.986874][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.995316][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.002062][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.008460][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.022352][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.023616][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.030720][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.036931][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.044496][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.053058][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.060562][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.065573][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.078566][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.088363][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.097935][ T30] audit: type=1400 audit(1753464162.211:82): avc: denied { read } for pid=5834 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.136716][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.164355][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.168855][ T30] audit: type=1400 audit(1753464162.211:83): avc: denied { open } for pid=5834 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.197322][ T30] audit: type=1400 audit(1753464162.221:84): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 60.526001][ T30] audit: type=1400 audit(1753464162.661:85): avc: denied { module_request } for pid=5834 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.600664][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 60.639790][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 60.650159][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 60.716361][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 60.815432][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.822610][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.830000][ T5834] bridge_slave_0: entered allmulticast mode [ 60.837452][ T5834] bridge_slave_0: entered promiscuous mode [ 60.875213][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.882413][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.889762][ T5834] bridge_slave_1: entered allmulticast mode [ 60.896788][ T5834] bridge_slave_1: entered promiscuous mode [ 60.906640][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.913795][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.921549][ T5826] bridge_slave_0: entered allmulticast mode [ 60.928166][ T5826] bridge_slave_0: entered promiscuous mode [ 60.938618][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.947838][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.955634][ T5824] bridge_slave_0: entered allmulticast mode [ 60.964596][ T5824] bridge_slave_0: entered promiscuous mode [ 60.984278][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.991482][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.998622][ T5826] bridge_slave_1: entered allmulticast mode [ 61.005446][ T5826] bridge_slave_1: entered promiscuous mode [ 61.029224][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.036345][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.043781][ T5824] bridge_slave_1: entered allmulticast mode [ 61.050401][ T5824] bridge_slave_1: entered promiscuous mode [ 61.079526][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.090611][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.109135][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.118488][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 61.159968][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.194146][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.201339][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.208414][ T5825] bridge_slave_0: entered allmulticast mode [ 61.216167][ T5825] bridge_slave_0: entered promiscuous mode [ 61.224853][ T5826] team0: Port device team_slave_0 added [ 61.233174][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.244681][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.262419][ T5834] team0: Port device team_slave_0 added [ 61.272360][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.279464][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.287002][ T5825] bridge_slave_1: entered allmulticast mode [ 61.293729][ T5825] bridge_slave_1: entered promiscuous mode [ 61.302173][ T5826] team0: Port device team_slave_1 added [ 61.316043][ T5834] team0: Port device team_slave_1 added [ 61.382231][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.389171][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.415363][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.432860][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.442462][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.449401][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.475505][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.488127][ T5824] team0: Port device team_slave_0 added [ 61.494441][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.501574][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.527539][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.547812][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.557364][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.564481][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.590478][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.608137][ T5824] team0: Port device team_slave_1 added [ 61.667062][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.674717][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.681969][ T5838] bridge_slave_0: entered allmulticast mode [ 61.688578][ T5838] bridge_slave_0: entered promiscuous mode [ 61.719250][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.726323][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.754939][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.767177][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.774314][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.781694][ T5838] bridge_slave_1: entered allmulticast mode [ 61.788326][ T5838] bridge_slave_1: entered promiscuous mode [ 61.796600][ T5825] team0: Port device team_slave_0 added [ 61.804919][ T5825] team0: Port device team_slave_1 added [ 61.820088][ T5826] hsr_slave_0: entered promiscuous mode [ 61.826686][ T5826] hsr_slave_1: entered promiscuous mode [ 61.833548][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.840479][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.866606][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.896578][ T5834] hsr_slave_0: entered promiscuous mode [ 61.902609][ T5834] hsr_slave_1: entered promiscuous mode [ 61.908428][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.916502][ T5834] Cannot create hsr debugfs directory [ 61.962579][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.973502][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.980431][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.006552][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.018638][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.025800][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.052016][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.079793][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.141933][ T5841] Bluetooth: hci2: command tx timeout [ 62.147514][ T5841] Bluetooth: hci1: command tx timeout [ 62.153628][ T5837] Bluetooth: hci3: command tx timeout [ 62.157731][ T5824] hsr_slave_0: entered promiscuous mode [ 62.165557][ T5824] hsr_slave_1: entered promiscuous mode [ 62.172062][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.179608][ T5824] Cannot create hsr debugfs directory [ 62.188010][ T5838] team0: Port device team_slave_0 added [ 62.220994][ T5841] Bluetooth: hci0: command tx timeout [ 62.228797][ T5838] team0: Port device team_slave_1 added [ 62.257806][ T5825] hsr_slave_0: entered promiscuous mode [ 62.263998][ T5825] hsr_slave_1: entered promiscuous mode [ 62.269937][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.277618][ T5825] Cannot create hsr debugfs directory [ 62.301372][ T5841] Bluetooth: hci4: command tx timeout [ 62.317208][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.324233][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.350179][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.382745][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.389709][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.415699][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.596129][ T5838] hsr_slave_0: entered promiscuous mode [ 62.602596][ T5838] hsr_slave_1: entered promiscuous mode [ 62.608431][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.616533][ T5838] Cannot create hsr debugfs directory [ 62.707812][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.728846][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.738231][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.766374][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.817074][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.827190][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.843794][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.861759][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.904151][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.913511][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.947160][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.971901][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.001774][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.029491][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.040169][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.051281][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.134358][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.147297][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.172628][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.194767][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.202993][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.222997][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.266134][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.296686][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.311915][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.320501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.327726][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.337654][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.367006][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.374145][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.386155][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.398539][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.405676][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.421697][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.428799][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.439768][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.446906][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.476749][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.484192][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.505583][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.523698][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.530828][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.567563][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.574645][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.628899][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.652606][ T30] audit: type=1400 audit(1753464165.791:86): avc: denied { sys_module } for pid=5825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.720026][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.760249][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.802428][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.809548][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.843039][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.850162][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.953962][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.040409][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.129391][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.185545][ T5825] veth0_vlan: entered promiscuous mode [ 64.208804][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.225657][ T5825] veth1_vlan: entered promiscuous mode [ 64.232378][ T5841] Bluetooth: hci1: command tx timeout [ 64.237782][ T5841] Bluetooth: hci3: command tx timeout [ 64.245441][ T5152] Bluetooth: hci2: command tx timeout [ 64.260166][ T5834] veth0_vlan: entered promiscuous mode [ 64.304584][ T5837] Bluetooth: hci0: command tx timeout [ 64.316606][ T5834] veth1_vlan: entered promiscuous mode [ 64.383298][ T5837] Bluetooth: hci4: command tx timeout [ 64.396980][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.425506][ T5834] veth0_macvtap: entered promiscuous mode [ 64.438507][ T5825] veth0_macvtap: entered promiscuous mode [ 64.448466][ T5825] veth1_macvtap: entered promiscuous mode [ 64.467443][ T5834] veth1_macvtap: entered promiscuous mode [ 64.490128][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.501617][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.517731][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.526795][ T5824] veth0_vlan: entered promiscuous mode [ 64.536335][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.547281][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556092][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.565028][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.582318][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.599337][ T5824] veth1_vlan: entered promiscuous mode [ 64.608638][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.618074][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.627056][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637490][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717737][ T5838] veth0_vlan: entered promiscuous mode [ 64.729337][ T5826] veth0_vlan: entered promiscuous mode [ 64.764457][ T5824] veth0_macvtap: entered promiscuous mode [ 64.787256][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.790402][ T5824] veth1_macvtap: entered promiscuous mode [ 64.799412][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.809890][ T5838] veth1_vlan: entered promiscuous mode [ 64.828490][ T5826] veth1_vlan: entered promiscuous mode [ 64.874359][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.886240][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.896333][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.924020][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.938470][ T5838] veth0_macvtap: entered promiscuous mode [ 64.957163][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.958566][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.974056][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.977453][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.990723][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000035][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.013419][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.014661][ T5838] veth1_macvtap: entered promiscuous mode [ 65.022871][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.044410][ T5826] veth0_macvtap: entered promiscuous mode [ 65.060749][ T30] audit: type=1400 audit(1753464167.191:87): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.vU5KRW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.089619][ T5826] veth1_macvtap: entered promiscuous mode [ 65.111536][ T30] audit: type=1400 audit(1753464167.201:88): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.134104][ T30] audit: type=1400 audit(1753464167.201:89): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.vU5KRW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.168011][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.172037][ T30] audit: type=1400 audit(1753464167.201:90): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.185231][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.209500][ T30] audit: type=1400 audit(1753464167.201:91): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.vU5KRW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.244928][ T30] audit: type=1400 audit(1753464167.201:92): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.vU5KRW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.284826][ T30] audit: type=1400 audit(1753464167.241:93): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.292932][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.323156][ T30] audit: type=1400 audit(1753464167.241:94): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.349717][ T30] audit: type=1400 audit(1753464167.251:95): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="gadgetfs" ino=6564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.396616][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.425014][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437435][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.446770][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.477125][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.504408][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.544384][ T30] audit: type=1400 audit(1753464167.251:96): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.552468][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.609818][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.082493][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.091912][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.105188][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.115137][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124203][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133387][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.304219][ T5837] Bluetooth: hci3: command tx timeout [ 66.309658][ T5152] Bluetooth: hci1: command tx timeout [ 66.315833][ T5841] Bluetooth: hci2: command tx timeout [ 66.323071][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.341259][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.391125][ T5841] Bluetooth: hci0: command tx timeout [ 66.461047][ T5841] Bluetooth: hci4: command tx timeout [ 66.672580][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.697497][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.191550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.275312][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.286551][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.933101][ T5971] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 68.026369][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.036803][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.061305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.353812][ T5965] ALSA: mixer_oss: invalid OSS volume 'w2' [ 68.414258][ T5841] Bluetooth: hci2: command tx timeout [ 68.419693][ T5841] Bluetooth: hci3: command tx timeout [ 68.425803][ T5837] Bluetooth: hci1: command tx timeout [ 68.461045][ T5152] Bluetooth: hci0: command tx timeout [ 68.491146][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.595384][ T5984] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.662473][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.836507][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.938799][ T5152] Bluetooth: hci4: command tx timeout [ 69.093097][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 69.106136][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.118927][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.120908][ T5884] usb 3-1: device descriptor read/64, error -71 [ 69.147694][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 69.168592][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.331524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 69.427341][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.451016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.636022][ T5884] usb 3-1: device descriptor read/64, error -71 [ 69.678510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.681075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 69.751958][ T5884] usb usb3-port1: attempt power cycle [ 70.168037][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 70.168052][ T30] audit: type=1400 audit(1753464172.301:152): avc: denied { create } for pid=5993 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.292956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.381428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.395352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.435917][ T5988] usb 1-1: USB disconnect, device number 2 [ 70.461065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.909080][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.002113][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.922841][ T30] audit: type=1400 audit(1753464172.341:153): avc: denied { ioctl } for pid=5993 comm="syz.4.15" path="socket:[7795]" dev="sockfs" ino=7795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.968861][ T5884] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.159953][ T30] audit: type=1400 audit(1753464174.261:154): avc: denied { read } for pid=5995 comm="syz.1.14" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.266537][ T5884] usb 3-1: device not accepting address 4, error -71 [ 72.335297][ T30] audit: type=1400 audit(1753464174.261:155): avc: denied { open } for pid=5995 comm="syz.1.14" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.764745][ T6014] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 72.840475][ T30] audit: type=1400 audit(1753464174.441:156): avc: denied { create } for pid=5995 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.861732][ T30] audit: type=1400 audit(1753464174.451:157): avc: denied { setopt } for pid=5995 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.881411][ T30] audit: type=1400 audit(1753464174.581:158): avc: denied { create } for pid=6009 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.901183][ T30] audit: type=1400 audit(1753464174.621:159): avc: denied { ioctl } for pid=6009 comm="syz.2.16" path="socket:[7805]" dev="sockfs" ino=7805 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.927196][ T30] audit: type=1400 audit(1753464174.631:160): avc: denied { write } for pid=6009 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 72.947219][ T30] audit: type=1400 audit(1753464174.711:161): avc: denied { create } for pid=6009 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.983817][ T6003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.054075][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.082379][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.149371][ T6003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.155450][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.176748][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.218629][ T6003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.228686][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.389330][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.885890][ T6003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.892198][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.906600][ T6022] bridge0: entered promiscuous mode [ 73.914128][ T6022] bridge0: port 3(macsec1) entered blocking state [ 73.921574][ T6022] bridge0: port 3(macsec1) entered disabled state [ 73.929120][ T6022] macsec1: entered allmulticast mode [ 73.935021][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.935049][ T6022] bridge0: entered allmulticast mode [ 73.948909][ T6022] macsec1: left allmulticast mode [ 73.955668][ T6022] bridge0: left allmulticast mode [ 73.965241][ T6022] bridge0: left promiscuous mode [ 74.744094][ T6027] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.021016][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.191061][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.260889][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.903000][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.949702][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 75.986632][ T9] cfg80211: failed to load regulatory.db [ 76.082220][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 76.455208][ T6003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.481030][ T6003] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.508833][ T6003] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.552458][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 76.552473][ T30] audit: type=1400 audit(1753464178.691:171): avc: denied { name_bind } for pid=6036 comm="syz.4.23" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.612638][ T6037] netlink: 87 bytes leftover after parsing attributes in process `syz.4.23'. [ 77.110840][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.171240][ T6043] bridge0: entered promiscuous mode [ 77.251323][ T30] audit: type=1400 audit(1753464179.371:172): avc: denied { ioctl } for pid=6044 comm="syz.4.26" path="socket:[7854]" dev="sockfs" ino=7854 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.277739][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.342538][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.367761][ T5841] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 77.375762][ T6043] bridge0: port 3(macsec1) entered blocking state [ 77.532180][ T6043] bridge0: port 3(macsec1) entered disabled state [ 77.620100][ T6043] macsec1: entered allmulticast mode [ 77.639964][ T6043] bridge0: entered allmulticast mode [ 77.722778][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.734408][ T6043] macsec1: left allmulticast mode [ 77.739530][ T6043] bridge0: left allmulticast mode [ 77.768645][ T30] audit: type=1400 audit(1753464179.901:173): avc: denied { read } for pid=6049 comm="syz.2.27" path="socket:[7870]" dev="sockfs" ino=7870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.823410][ T6043] bridge0: left promiscuous mode [ 77.854563][ T6054] loop6: detected capacity change from 0 to 524287999 [ 77.861897][ T30] audit: type=1400 audit(1753464179.991:174): avc: denied { read write } for pid=6051 comm="syz.1.28" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.887325][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.900608][ T30] audit: type=1400 audit(1753464179.991:175): avc: denied { open } for pid=6051 comm="syz.1.28" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.938498][ T30] audit: type=1400 audit(1753464179.991:176): avc: denied { append } for pid=6051 comm="syz.1.28" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.963145][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.975177][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.984069][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.994403][ T30] audit: type=1400 audit(1753464180.121:177): avc: denied { ioctl } for pid=6049 comm="syz.2.27" path="socket:[7870]" dev="sockfs" ino=7870 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.995346][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.041193][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.069488][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.111017][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.118965][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.129608][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.137768][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.145905][ T6054] ldm_validate_partition_table(): Disk read failed. [ 78.152908][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.161135][ T6054] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.169139][ T6054] Dev loop6: unable to read RDB block 0 [ 78.213851][ T30] audit: type=1400 audit(1753464180.131:178): avc: denied { create } for pid=6049 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.234095][ T6054] loop6: unable to read partition table [ 78.248499][ T6054] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 78.257659][ T30] audit: type=1400 audit(1753464180.131:179): avc: denied { create } for pid=6049 comm="syz.2.27" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.286046][ T30] audit: type=1400 audit(1753464180.131:180): avc: denied { map } for pid=6049 comm="syz.2.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.358310][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.679199][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 78.768771][ T6061] mmap: syz.2.31 (6061): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 78.846690][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 78.892521][ T24] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 79.147315][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.255931][ T24] usb 2-1: config 0 has no interface number 0 [ 79.337064][ T24] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 79.371911][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.388918][ T24] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.402473][ T24] usb 2-1: config 0 interface 52 has no altsetting 0 [ 79.412104][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 79.421305][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.427504][ T24] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 79.437518][ T24] usb 2-1: Manufacturer: syz [ 79.460272][ T24] usb 2-1: config 0 descriptor?? [ 79.491223][ T24] hub 2-1:0.52: bad descriptor, ignoring hub [ 79.496371][ T6074] process 'syz.3.33' launched './file0' with NULL argv: empty string added [ 79.497368][ T24] hub 2-1:0.52: probe with driver hub failed with error -5 [ 80.531433][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.548977][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.614597][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 80.631368][ T24] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input5 [ 80.733454][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 81.033972][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.269930][ T5892] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 81.390078][ T5892] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 81.462361][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.489306][ T5892] usb 3-1: config 0 descriptor?? [ 81.502380][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.518375][ T5892] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 81.545218][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.567096][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.581666][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.594801][ T6086] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.609334][ T6086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.641145][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 81.652275][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.664092][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.672773][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.685254][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.706201][ T6086] dummy0 speed is unknown, defaulting to 1000 [ 81.962431][ T5884] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.048909][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 82.048923][ T30] audit: type=1400 audit(1753464184.181:204): avc: denied { create } for pid=6085 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.086364][ T10] usb 3-1: USB disconnect, device number 6 [ 82.097057][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 82.106582][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.124840][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.134295][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.143543][ T9] usb 4-1: Product: 㬄喔䭐쁠靓ۊ졁꘠ᬮ邡퉑ϖ穼䐰궼 [ 82.153692][ T9] usb 4-1: Manufacturer:   [ 82.159232][ T9] usb 4-1: SerialNumber: ଷ⤭ꉜ隠縌舻๛뚃പ퓧鄐쨧巛终⍊㮺眘痎﷫ﺜ䆐᩵ꮠ醠䀿囲ⷳⵊ眕벎⮳䦒☈䄵寺罢淸뇙䎕骨᪰듴ꆼ୦Ց쾂䫌흇ģ䅵ꔟ楳숂梦픣Ṝ፩뾯裔몧∹쌡횿豼脪暚켯彈㘉號⽸쳮ɲ礭䬵瞣苄⢌䘤᳷蜀㑇鈛㗾灁গ靜暓運艮땜᳄눖漠❿猰싐㨦Ώྊ㜃ﮝ풀댦㼠뀗땈砟ꉪ⨫츆䗅 [ 82.193995][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 82.206650][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.215308][ T5884] usb 1-1: config 10 has an invalid interface number: 130 but max is 0 [ 82.224065][ T5884] usb 1-1: config 10 has no interface number 0 [ 82.232852][ T5884] usb 1-1: config 10 interface 130 has no altsetting 0 [ 82.248890][ T5884] usb 1-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=53.5c [ 82.258230][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.268515][ T5884] usb 1-1: Product: syz [ 82.276115][ T5884] usb 1-1: Manufacturer: syz [ 82.281128][ T5884] usb 1-1: SerialNumber: syz [ 82.367034][ T30] audit: type=1400 audit(1753464184.501:205): avc: denied { append } for pid=6089 comm="syz.4.38" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.442752][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.451717][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.469402][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.475689][ T30] audit: type=1400 audit(1753464184.601:206): avc: denied { write } for pid=6089 comm="syz.4.38" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.483440][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.517438][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.543208][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.557879][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.561305][ T5884] usb 1-1: USB disconnect, device number 3 [ 82.576330][ T30] audit: type=1400 audit(1753464184.711:207): avc: denied { mounton } for pid=6089 comm="syz.4.38" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.604074][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.617427][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.663227][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.733296][ T10] usb 2-1: USB disconnect, device number 2 [ 82.769288][ T9] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 82.775736][ T9] cdc_ncm 4-1:1.0: bind() failure [ 82.781022][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 82.870438][ T6098] warning: `syz.1.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.894945][ T30] audit: type=1400 audit(1753464185.001:208): avc: denied { ioctl } for pid=6095 comm="syz.1.39" path="socket:[8400]" dev="sockfs" ino=8400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.928348][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 82.960472][ T9] cdc_ncm 4-1:1.1: bind() failure [ 83.053226][ T30] audit: type=1400 audit(1753464185.091:209): avc: denied { create } for pid=6101 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.072871][ T30] audit: type=1400 audit(1753464185.121:210): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.882225][ T9] usb 4-1: USB disconnect, device number 2 [ 85.379119][ T6125] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 85.391925][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 85.458293][ T6118] netlink: 'syz.1.46': attribute type 30 has an invalid length. [ 85.469440][ T6118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.478335][ T6118] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.487025][ T6118] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.495725][ T6118] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.505793][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 85.514512][ T6118] netlink: 'syz.1.46': attribute type 30 has an invalid length. [ 85.527523][ T6118] Zero length message leads to an empty skb [ 85.617221][ T30] audit: type=1400 audit(1753464187.751:211): avc: denied { getopt } for pid=6126 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.064534][ T5866] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.124683][ T5866] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 87.133219][ T5866] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 87.152685][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.612631][ T5866] usb 1-1: config 0 descriptor?? [ 87.634643][ T6140] page: refcount:515 mapcount:0 mapping:ffff8880253d0220 index:0x0 pfn:0x63400 [ 87.640752][ T30] audit: type=1400 audit(1753464189.251:212): avc: denied { mount } for pid=6143 comm="syz.1.53" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 87.643797][ T6140] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 87.674280][ T6140] aops:hugetlbfs_aops ino:2148 dentry name(?):"anon_hugepage" [ 87.681738][ T6140] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 87.689865][ T6140] page_type: f4(hugetlb) [ 87.694088][ T6140] raw: 00fff00000000041 ffffc9000468fd68 ffffc9000468fd68 ffff8880253d0220 [ 87.702647][ T6140] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 87.711203][ T6140] head: 00fff00000000041 ffffc9000468fd68 ffffc9000468fd68 ffff8880253d0220 [ 87.719843][ T6140] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 87.728487][ T6140] head: 00fff00000000009 ffffea00018d0001 0000000000000000 0000000000000000 [ 87.737128][ T6140] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 87.745775][ T6140] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 87.753024][ T6140] page_owner tracks the page as allocated [ 87.758907][ T6140] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 15519480530, free_ts 14344117941 [ 87.779978][ T6140] post_alloc_hook+0x1c0/0x230 [ 87.784743][ T6140] get_page_from_freelist+0x1321/0x3890 [ 87.790269][ T6140] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 87.796143][ T6140] alloc_pool_huge_folio+0x285/0x440 [ 87.801408][ T6140] set_max_huge_pages+0x457/0xdc0 [ 87.806411][ T6140] hugetlb_sysctl_handler_common+0x27d/0x340 [ 87.812378][ T6140] proc_sys_call_handler+0x43d/0x570 [ 87.817670][ T6140] __kernel_write_iter+0x31a/0xa90 [ 87.822776][ T6140] kernel_write+0x1f4/0x6c0 [ 87.827268][ T6140] process_sysctl_arg+0x22b/0x5f0 [ 87.832274][ T6140] parse_args+0x5a6/0x8e0 [ 87.836589][ T6140] do_sysctl_args+0xc7/0x150 [ 87.841161][ T6140] kernel_init+0x84/0x2b0 [ 87.845476][ T6140] ret_from_fork+0x5d4/0x6f0 [ 87.850065][ T6140] ret_from_fork_asm+0x1a/0x30 [ 87.854810][ T6140] page last free pid 1 tgid 1 stack trace: [ 87.860590][ T6140] __free_frozen_pages+0x7fe/0x1180 [ 87.865775][ T6140] free_contig_range+0x183/0x4b0 [ 87.870695][ T6140] destroy_args+0x7f6/0xa60 [ 87.875185][ T6140] debug_vm_pgtable+0x13b8/0x2d00 [ 87.880193][ T6140] do_one_initcall+0x120/0x6e0 [ 87.884938][ T6140] kernel_init_freeable+0x5c2/0x900 [ 87.890117][ T6140] kernel_init+0x1c/0x2b0 [ 87.894430][ T6140] ret_from_fork+0x5d4/0x6f0 [ 87.899006][ T6140] ret_from_fork_asm+0x1a/0x30 [ 87.903842][ T6140] ------------[ cut here ]------------ [ 87.909276][ T6140] kernel BUG at mm/filemap.c:154! [ 87.914284][ T6140] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 87.920679][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.4.49 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 87.932460][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.942494][ T6140] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 87.948635][ T6140] Code: 37 fd c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 6a f8 c9 ff 85 ed 7e 17 e8 21 fd c9 ff 48 c7 c6 80 03 b9 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a fd c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 87.968223][ T6140] RSP: 0018:ffffc900053b73d0 EFLAGS: 00010046 [ 87.974272][ T6140] RAX: 0000000000080000 RBX: ffffea00018d0000 RCX: ffffc900111e5000 [ 87.982225][ T6140] RDX: 0000000000080000 RSI: ffffffff81f1eb7e RDI: ffff88801df0ccc4 [ 87.990177][ T6140] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 87.998129][ T6140] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880253d0220 [ 88.006080][ T6140] R13: ffffea00018d0030 R14: 00000000000005a0 R15: ffffea00018d0000 [ 88.014030][ T6140] FS: 00007fbdbafb26c0(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 88.022945][ T6140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.029522][ T6140] CR2: 000020000010c7b0 CR3: 000000007c76b000 CR4: 00000000003526f0 [ 88.037475][ T6140] Call Trace: [ 88.040745][ T6140] [ 88.043659][ T6140] filemap_remove_folio+0xf1/0x250 [ 88.048762][ T6140] remove_inode_hugepages+0x74a/0xed0 [ 88.054119][ T6140] ? find_held_lock+0x2b/0x80 [ 88.058778][ T6140] ? rcu_is_watching+0x12/0xc0 [ 88.063528][ T6140] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 88.069404][ T6140] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 88.075549][ T6140] ? up_write+0x1b2/0x520 [ 88.079857][ T6140] ? avc_has_perm_noaudit+0x117/0x3b0 [ 88.085215][ T6140] hugetlbfs_fallocate+0xf3f/0x12e0 [ 88.090397][ T6140] ? avc_has_perm_noaudit+0x149/0x3b0 [ 88.095752][ T6140] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 88.101388][ T6140] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 88.107015][ T6140] ? vfs_fallocate+0x608/0x10c0 [ 88.111863][ T6140] vfs_fallocate+0x608/0x10c0 [ 88.116546][ T6140] ? __pfx_vfs_fallocate+0x10/0x10 [ 88.121660][ T6140] ? madvise_vma_behavior+0x222c/0x2420 [ 88.127200][ T6140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.133078][ T6140] madvise_vma_behavior+0x21ca/0x2420 [ 88.138431][ T6140] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 88.144132][ T6140] ? __pfx_mas_prev+0x10/0x10 [ 88.148791][ T6140] ? find_vma_prev+0xda/0x160 [ 88.153450][ T6140] ? __pfx_find_vma_prev+0x10/0x10 [ 88.158545][ T6140] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 88.164244][ T6140] madvise_walk_vmas+0x1d1/0x2c0 [ 88.169159][ T6140] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 88.174598][ T6140] madvise_do_behavior+0x15d/0x3f0 [ 88.179688][ T6140] ? __pfx_madvise_do_behavior+0x10/0x10 [ 88.185302][ T6140] ? __schedule+0x1181/0x5dd0 [ 88.189967][ T6140] do_madvise+0x161/0x230 [ 88.194277][ T6140] ? __pfx_do_madvise+0x10/0x10 [ 88.199111][ T6140] ? xfd_validate_state+0x61/0x180 [ 88.204210][ T6140] __x64_sys_madvise+0xa9/0x110 [ 88.209040][ T6140] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.214233][ T6140] do_syscall_64+0xcd/0x4c0 [ 88.218715][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.224590][ T6140] RIP: 0033:0x7fbdbd58e9a9 [ 88.228985][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.248573][ T6140] RSP: 002b:00007fbdbafb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.256965][ T6140] RAX: ffffffffffffffda RBX: 00007fbdbd7b6240 RCX: 00007fbdbd58e9a9 [ 88.264914][ T6140] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 88.272867][ T6140] RBP: 00007fbdbd610d69 R08: 0000000000000000 R09: 0000000000000000 [ 88.280817][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.288769][ T6140] R13: 0000000000000000 R14: 00007fbdbd7b6240 R15: 00007ffffa3c7958 [ 88.296725][ T6140] [ 88.299722][ T6140] Modules linked in: [ 88.303602][ T6140] ---[ end trace 0000000000000000 ]--- [ 88.309031][ T6140] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 88.315176][ T6140] Code: 37 fd c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 6a f8 c9 ff 85 ed 7e 17 e8 21 fd c9 ff 48 c7 c6 80 03 b9 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a fd c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 88.334768][ T6140] RSP: 0018:ffffc900053b73d0 EFLAGS: 00010046 [ 88.340814][ T6140] RAX: 0000000000080000 RBX: ffffea00018d0000 RCX: ffffc900111e5000 [ 88.348939][ T6140] RDX: 0000000000080000 RSI: ffffffff81f1eb7e RDI: ffff88801df0ccc4 [ 88.356900][ T6140] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 88.364858][ T6140] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880253d0220 [ 88.372816][ T6140] R13: ffffea00018d0030 R14: 00000000000005a0 R15: ffffea00018d0000 [ 88.380772][ T6140] FS: 00007fbdbafb26c0(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 88.389689][ T6140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.396255][ T6140] CR2: 000020000010c7b0 CR3: 000000007c76b000 CR4: 00000000003526f0 [ 88.404211][ T6140] Kernel panic - not syncing: Fatal exception [ 88.410448][ T6140] Kernel Offset: disabled [ 88.414757][ T6140] Rebooting in 86400 seconds..